Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A15D9874D111EFA545655E762E951A.roa
File: 63A15D9874D111EFA545655E762E951A.roa (raw, json)
Hash identifier: TJfKULPAjdskbj7rElkOxQS/WlTAUwNHOML0W6tJ3/0=
Subject key identifier: C5:33:87:B8:24:CC:60:D6:85:A2:06:E4:AE:75:02:BF:F1:B9:17:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F028
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A15D9874D111EFA545655E762E951A.roa
Signing time: Tue 17 Sep 2024 08:46:54 +0000
ROA not before: Tue 17 Sep 2024 08:46:51 +0000
ROA not after: Sat 30 Nov 2024 08:46:51 +0000
asID: 142403
IP address blocks: 154.83.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61480 (0xf028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:46:51 2024 GMT
Not After : Nov 30 08:46:51 2024 GMT
Subject: CN=66e941fe-1dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:3a:48:e5:1d:80:90:72:29:0b:ba:f2:b8:
0f:0f:b3:eb:0d:fd:88:92:4e:53:9d:11:3b:0d:d6:
e0:27:77:6d:17:d5:a6:78:73:6d:b0:66:0d:fa:e2:
a6:2e:d1:6f:60:76:5b:20:a8:81:45:ac:d0:fb:9c:
5b:99:45:54:8a:3a:42:b7:cd:1d:70:da:f3:66:20:
85:6a:a9:74:af:73:0f:6c:33:af:30:1b:a4:df:14:
60:c7:1c:55:68:27:7e:9d:ac:39:7a:a1:8c:5e:32:
48:65:eb:06:90:9c:d3:ba:cf:31:1d:4a:1b:b5:aa:
1b:31:41:90:ad:bf:de:a3:b1:6a:38:de:56:14:44:
82:69:9d:b1:08:77:88:6f:95:b9:6e:a6:12:11:37:
ca:01:77:12:b8:71:bf:6b:bf:de:b3:ef:2f:29:14:
25:e1:36:f7:8f:c7:c6:93:08:18:3a:d9:d0:48:e7:
0c:f2:bb:f9:79:1a:6e:4d:08:29:99:0e:0d:67:80:
51:61:96:7c:37:75:c5:14:16:33:d9:2c:fd:a7:20:
66:7c:77:54:a5:82:34:49:21:c4:30:e7:f1:76:9f:
0f:79:fb:20:5d:b0:4b:a0:9b:33:94:a5:a4:a8:97:
0f:5e:cc:55:3d:a7:fa:d3:55:76:d1:09:eb:bc:a3:
aa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:87:B8:24:CC:60:D6:85:A2:06:E4:AE:75:02:BF:F1:B9:17:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A15D9874D111EFA545655E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:67:14:86:d0:34:3c:57:3f:65:84:b7:b8:a8:f3:2b:ac:3d:
46:52:36:c9:d0:52:18:7e:d4:f3:93:7f:73:b2:c6:79:90:88:
07:61:e3:cf:1c:1f:65:3b:79:ea:78:c2:5a:33:f9:1d:c3:e4:
8f:4a:6f:ca:7a:61:e0:d4:ad:93:6c:38:01:86:32:38:74:c2:
8c:36:ee:42:56:e7:09:37:fe:3a:48:bb:18:a3:a8:71:ab:44:
b9:24:c9:b6:02:4d:a4:74:37:d0:12:03:2d:4c:a8:ed:ba:76:
91:31:b3:3b:06:ca:f4:32:03:fc:72:76:c0:fe:67:3d:db:b5:
63:31:2b:ee:ab:67:af:97:ef:46:e5:67:d7:c4:e3:9b:b1:3a:
cb:90:0f:26:f3:3f:e6:7a:76:64:6a:83:1a:d7:34:b9:04:af:
68:84:c9:06:78:e6:cf:30:47:a0:4a:aa:cb:ed:64:12:3a:6e:
df:8a:f9:ee:0e:67:08:9a:d9:3e:bf:9d:ca:0f:e8:3f:02:8e:
38:9f:92:ec:0a:0a:bd:81:56:77:7b:a8:82:1b:cb:02:8a:22:
d1:73:e2:b0:3c:12:0e:75:3f:c9:1b:97:a5:0a:33:85:62:8e:
01:3c:cb:75:72:fd:58:63:8d:0f:1c:fb:64:0a:30:e1:59:b3:
55:d9:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org