Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8260DE14F86911EEAC6C64FF007001B1.roa
File: 8260DE14F86911EEAC6C64FF007001B1.roa (raw, json)
Hash identifier: LRIlc2GI9bWD6fmyIHLNfSLxBHc/jkiGtu3eEHyimjk=
Subject key identifier: A7:A2:FA:6A:C0:92:A9:D2:2B:CC:0E:FF:63:6C:C3:8A:92:19:51:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8260DE14F86911EEAC6C64FF007001B1.roa
Signing time: Fri 12 Apr 2024 01:10:54 +0000
ROA not before: Fri 12 Apr 2024 01:10:51 +0000
ROA not after: Sun 19 May 2024 01:10:51 +0000
asID: 138915
IP address blocks: 154.90.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43876 (0xab64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:10:51 2024 GMT
Not After : May 19 01:10:51 2024 GMT
Subject: CN=66188a1e-8efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:c2:6b:35:7c:b1:c6:1f:d7:ec:9c:23:ce:
2c:17:df:1c:21:58:b8:9b:fc:0b:c8:47:42:ad:de:
e3:59:df:df:af:5a:c4:11:fc:8b:c6:5b:29:f4:1a:
46:16:89:cc:f8:ec:82:84:77:0a:31:fd:b2:c7:07:
cb:7c:bb:0e:0f:17:fe:e0:2e:e7:7c:0f:a2:f4:f3:
3c:59:3d:82:42:e7:18:99:ac:3c:4c:b9:e1:84:90:
1d:26:7e:04:a4:56:c4:4f:ed:65:3d:76:cc:b7:78:
23:50:29:9e:68:40:b9:c7:a7:36:2e:3b:9b:07:88:
42:b1:c3:6f:a2:04:d4:e8:c8:87:ce:59:52:aa:a2:
2e:84:c0:ce:51:e0:73:3f:7b:5b:4f:17:62:26:0d:
46:7e:d3:04:11:20:34:a2:7d:f9:12:51:a1:e8:ee:
07:14:e8:ce:fe:78:d5:b0:69:cf:2a:ec:0d:78:f7:
09:ce:c3:84:db:a9:28:61:5d:08:4a:78:79:f8:af:
be:95:ad:28:97:c3:18:18:62:38:42:31:91:83:54:
80:f0:03:33:1a:80:9d:0d:d8:02:2f:70:80:ab:ca:
2a:1b:10:53:f1:3f:bb:a7:cb:29:08:44:b6:46:eb:
05:c0:0f:85:9d:b6:fb:bd:a8:e0:3e:18:3a:b2:ee:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:FA:6A:C0:92:A9:D2:2B:CC:0E:FF:63:6C:C3:8A:92:19:51:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8260DE14F86911EEAC6C64FF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.48.0/23
Signature Algorithm: sha256WithRSAEncryption
54:93:c4:69:e0:da:75:16:26:06:25:9a:f0:a3:77:c5:d3:b1:
f8:06:f5:2f:6e:70:45:e7:67:ec:0e:04:d7:77:49:9d:2e:c9:
41:99:d1:db:7a:0d:e7:a0:71:d3:ba:c1:41:b1:6a:f2:21:80:
a3:f3:3e:d8:38:f4:77:15:df:4e:e0:ee:19:ac:71:37:ec:73:
ea:41:28:49:75:96:10:7b:c0:8c:81:a7:25:a4:21:1a:5d:eb:
0e:33:4d:ee:14:b2:e1:bb:e3:3a:f6:98:53:33:63:ed:cc:9c:
1c:67:57:01:66:c7:be:7d:a9:8d:45:d4:a2:1b:78:6d:13:75:
db:1a:5e:ab:3d:5d:ac:58:67:08:05:4a:6d:60:01:2e:70:3c:
dc:38:5e:dd:ba:27:6c:f0:c3:c0:c9:9a:76:37:bf:02:0c:07:
b0:53:04:8a:e5:5b:70:85:47:a7:c4:7f:12:7f:db:ad:38:b9:
ac:68:4d:cf:ad:78:35:1f:ee:07:35:80:8f:88:e9:1a:dd:04:
88:73:57:91:cc:de:bc:15:70:18:e0:65:63:54:7d:45:ac:7c:
37:81:8b:40:8d:9d:1a:7e:f0:45:49:e8:85:48:69:43:3b:c2:
89:26:43:b2:8f:cb:32:4d:0d:36:b2:ae:5f:b1:ba:96:11:91:
23:2b:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org