Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80442712EDB511EEA5024C9D775412E6.roa
File: 80442712EDB511EEA5024C9D775412E6.roa (raw, json)
Hash identifier: hcVbMSObrigagB4zJlpC2KBu9N/+wbg1ws66YqJM+OA=
Subject key identifier: 91:54:64:DD:F6:92:34:03:40:FF:73:50:AA:A6:00:38:94:00:17:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A71F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80442712EDB511EEA5024C9D775412E6.roa
Signing time: Fri 29 Mar 2024 10:17:09 +0000
ROA not before: Fri 29 Mar 2024 10:17:06 +0000
ROA not after: Sat 04 May 2024 10:17:06 +0000
asID: 142062
IP address blocks: 154.86.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42783 (0xa71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:17:06 2024 GMT
Not After : May 4 10:17:06 2024 GMT
Subject: CN=66069525-fe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:c1:e5:d3:03:5f:ec:53:50:72:e4:ba:91:
6c:4e:05:db:72:8b:ab:ff:ad:6f:c8:11:70:52:2c:
bf:01:63:e5:ac:79:96:d9:c5:c6:1a:f2:ff:1b:66:
7a:ec:5e:60:53:88:ce:e1:88:b9:1a:b2:5d:3b:6e:
46:83:eb:31:9a:ac:34:a8:86:ab:d1:86:8b:cc:fe:
89:49:ea:a1:9d:5c:e5:f1:3f:7f:b9:a7:ad:a1:0d:
c4:c0:9d:c4:9a:3a:fa:7e:31:f3:cd:9f:bd:3e:c9:
9e:0c:bf:73:0c:b0:ef:d3:3a:10:ad:a2:ec:18:3a:
a9:15:4f:f9:06:af:5f:31:2d:90:b1:50:39:52:21:
03:07:6c:35:f6:56:10:15:c4:ce:9a:08:19:55:d2:
69:d8:c3:ba:3b:71:2a:a3:dc:26:a0:85:f0:0a:02:
16:90:74:ab:05:1d:c2:b7:32:c4:85:46:7a:ed:83:
c4:d9:ec:7c:09:cf:ca:78:33:65:de:7d:ba:26:7e:
2d:72:4f:44:cc:70:01:96:b6:b8:a1:aa:0e:a8:34:
d8:3a:76:a3:63:6a:8a:64:47:41:8e:de:f9:9e:fe:
0e:43:52:5b:04:29:26:ad:f5:5f:05:19:8d:db:00:
a2:d4:6f:b1:22:36:2d:94:ac:db:98:06:74:7d:35:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:54:64:DD:F6:92:34:03:40:FF:73:50:AA:A6:00:38:94:00:17:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80442712EDB511EEA5024C9D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:00:76:c7:a1:92:0c:47:e4:b6:83:ae:f5:5f:dd:9b:9e:6d:
2c:9e:04:7b:39:a2:e8:56:ea:4d:60:6a:91:4f:c0:3d:7c:a0:
c1:90:b5:d3:59:4d:d9:70:97:84:8e:9b:b5:95:1f:97:a9:45:
2b:a5:12:92:da:90:ae:77:30:8d:ee:8a:fb:28:f9:5e:d5:13:
d8:50:38:e6:14:96:81:e4:00:a9:99:ce:7e:83:f7:6c:72:f3:
fc:f5:a5:89:9a:01:44:e7:e4:b1:f2:dd:8e:24:ad:3e:0f:37:
dd:7b:b8:15:a6:1f:ae:e7:f0:3e:38:e5:33:2d:a0:32:5b:8c:
1c:73:7a:e0:e8:ba:6c:cb:28:58:55:eb:61:ec:8b:a0:22:a5:
f9:42:a0:dc:dd:46:c8:fe:f3:94:71:82:3d:07:3a:55:cc:8d:
a3:f8:43:cd:f6:b9:9b:e9:db:28:e0:46:80:56:59:2d:8d:fa:
80:bd:06:8e:6b:9b:d7:17:52:bf:1e:4d:b2:f6:74:68:51:63:
4f:d2:fa:e4:5a:67:0a:cd:ea:63:1e:cd:b6:0c:c1:11:26:ea:
14:7c:7f:1b:81:3f:a7:7d:ba:b9:24:58:3f:34:bf:3b:08:3a:
d3:81:dc:37:cc:39:72:30:78:fb:22:dc:44:2d:84:e3:27:f5:
ba:aa:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org