Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E644B0EDBA11EEA05E07C7775412E6.roa
File: 77E644B0EDBA11EEA05E07C7775412E6.roa (raw, json)
Hash identifier: 5AeBKUD5K8MalMJIqXho5K6GzhTNfklJuXAW7KODvCc=
Subject key identifier: 32:3F:7F:4E:C5:57:3E:53:2F:B4:AF:20:7C:C3:2F:67:40:05:60:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A747
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E644B0EDBA11EEA05E07C7775412E6.roa
Signing time: Fri 29 Mar 2024 10:52:43 +0000
ROA not before: Fri 29 Mar 2024 10:52:39 +0000
ROA not after: Sat 04 May 2024 10:52:39 +0000
asID: 142062
IP address blocks: 154.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42823 (0xa747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:52:39 2024 GMT
Not After : May 4 10:52:39 2024 GMT
Subject: CN=66069d7b-fec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:33:eb:10:0c:3d:fb:9c:50:17:52:d4:82:
c8:16:49:9c:83:b1:0b:00:19:b2:f0:dc:3d:6a:6c:
60:12:80:51:b1:41:a3:56:52:d8:8d:4c:67:26:68:
b8:8b:6e:d9:37:85:4a:42:80:5c:f1:6f:0e:d9:e8:
b4:09:92:85:69:4c:17:ee:73:e8:89:a8:9b:c8:7c:
36:12:85:0d:3b:ff:fe:f5:67:50:52:7e:4f:5e:37:
7f:b7:39:b8:67:7f:d9:6f:65:32:5b:23:fd:c6:0f:
52:23:d2:cd:55:ca:98:70:24:94:c3:ff:f3:9a:56:
9c:3f:c1:16:33:c3:b7:b9:1c:c8:d2:da:a8:33:b5:
3e:53:4d:cb:84:2e:b4:46:08:47:f3:c1:40:b1:fe:
59:7e:8a:f7:2c:0a:4b:a4:d6:6b:59:3b:a4:61:09:
45:a8:ba:92:74:2e:4a:d5:9b:85:f2:99:18:e2:b4:
61:74:82:18:3f:5f:ba:9b:a3:f2:47:98:f5:19:cc:
8a:9b:d5:ae:ce:3e:f0:0a:63:77:16:86:a9:8f:c8:
a2:71:c5:c5:de:45:60:66:92:2c:33:17:91:77:8b:
25:61:d2:51:62:e5:5e:e4:46:40:84:b1:7c:eb:83:
08:9d:0e:d3:f9:2e:46:af:97:08:1f:16:cb:cb:3e:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:7F:4E:C5:57:3E:53:2F:B4:AF:20:7C:C3:2F:67:40:05:60:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E644B0EDBA11EEA05E07C7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b6:41:c1:33:08:75:9d:40:26:ea:82:58:75:66:20:e2:9e:
73:68:5b:90:4e:6a:15:fb:67:1e:ee:8f:2f:ac:75:7e:06:b3:
29:a0:1e:a0:7c:66:65:bc:4c:f4:66:15:41:8b:cb:5c:8d:d0:
15:08:43:fb:20:0c:4a:d9:b2:13:3f:80:da:bb:50:1e:31:bf:
5f:76:16:ed:13:1e:71:8a:7c:19:fa:ae:bf:0a:aa:17:c2:59:
f0:c4:13:7b:8d:e9:a0:a0:c3:7c:38:c3:3d:f3:3f:7f:93:0a:
33:6a:f4:62:35:7f:09:d6:30:3b:31:71:0c:08:a6:4a:e1:9f:
43:c8:6c:af:7d:88:75:af:c8:e4:a5:79:42:ea:fb:20:fc:99:
83:00:d6:79:64:5e:66:2f:65:85:3b:2a:5a:b2:48:01:e0:eb:
a0:b1:54:46:a3:fe:b0:d2:1f:9d:7d:ae:4a:36:93:ab:20:45:
bd:c3:4e:6f:f7:db:c4:0c:4e:77:5d:26:6a:f5:52:3a:98:69:
19:3a:9b:96:81:f8:ba:37:54:3f:c5:b9:73:9f:44:c3:03:ce:
48:3f:fe:c0:b0:b1:d5:20:8a:03:42:a3:71:36:da:27:f6:c3:
ec:d7:74:8a:23:89:76:31:37:2b:8d:46:3a:7b:e2:43:f8:4d:
01:77:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org