Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8299CBD0E78311EEA48F70A0775412E6.roa
File: 8299CBD0E78311EEA48F70A0775412E6.roa (raw, json)
Hash identifier: eCOXqnUiCWqdIduqa+P2BnCP/NnIS9+jXFV/GZB430w=
Subject key identifier: 50:D1:88:C0:12:C8:44:BB:A4:4D:34:04:D8:2B:27:D6:8B:BA:CB:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A58B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8299CBD0E78311EEA48F70A0775412E6.roa
Signing time: Thu 21 Mar 2024 13:04:11 +0000
ROA not before: Thu 21 Mar 2024 13:04:05 +0000
ROA not after: Tue 23 Apr 2024 13:04:05 +0000
asID: 44559
IP address blocks: 154.210.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42379 (0xa58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:04:05 2024 GMT
Not After : Apr 23 13:04:05 2024 GMT
Subject: CN=65fc304b-7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:90:64:dd:b6:71:c9:09:1b:5a:59:f1:e2:
0b:33:81:10:a1:02:7c:05:3e:6c:7c:a6:2b:a0:57:
da:29:af:af:38:06:63:ed:d6:9f:88:fc:f7:cb:f3:
c2:ad:a6:b4:db:ad:e4:fb:db:ba:ca:a7:1c:5d:e0:
fe:05:65:c2:37:46:0c:6d:11:a6:a0:39:f2:75:2f:
8d:f5:69:0c:49:78:9e:37:4c:28:42:6c:33:1b:16:
aa:10:38:84:56:b1:81:45:af:2a:e3:2e:b2:05:15:
fe:73:ab:8f:c4:98:22:2f:b9:99:c4:08:8a:51:2e:
49:a5:f4:dc:a1:17:2a:e5:39:76:eb:04:6f:74:d3:
04:38:b4:da:58:8f:9f:6c:46:89:a2:dc:e6:76:54:
7d:3b:09:21:b4:6f:48:6e:6a:05:6c:a8:c0:c3:ff:
0f:a3:9b:aa:d3:46:3a:e0:6e:fa:24:06:c4:3a:6f:
18:82:cf:d0:f0:10:0f:86:3f:b5:ab:6a:8b:6d:8f:
ba:4f:c2:c8:34:e8:64:80:ca:fa:92:cc:f4:d6:a5:
14:03:dc:12:b5:cd:b6:23:2b:fa:52:e6:87:cc:fa:
31:a7:5d:ff:65:9d:0c:25:70:75:15:1d:4a:c0:e4:
3e:59:60:98:92:7a:c5:57:81:f2:0f:14:38:52:45:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:88:C0:12:C8:44:BB:A4:4D:34:04:D8:2B:27:D6:8B:BA:CB:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8299CBD0E78311EEA48F70A0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5e:d8:ff:23:ef:8f:53:71:d3:c2:5d:49:07:5b:2a:92:77:
f9:b3:ec:10:49:ea:ec:ba:e9:eb:dc:92:3d:5b:d6:4e:a7:95:
a6:68:67:3f:24:e9:c3:1f:c6:1c:0b:00:8d:af:7b:45:79:98:
5d:c4:32:bb:da:e8:e5:b0:8c:be:e2:39:9e:59:67:e4:7e:91:
24:d6:9f:ab:38:85:13:7d:db:fd:69:a5:9f:c8:69:5a:41:81:
c9:99:28:b6:db:04:22:81:3a:a1:4c:08:86:56:8f:d2:02:76:
6a:45:19:36:0f:2e:64:a4:80:17:32:5a:69:cf:3d:98:bd:9a:
22:08:fe:e1:4f:a5:d6:86:0f:93:a0:8b:45:87:73:ad:3e:c4:
06:a5:d1:7d:d5:54:54:b3:6a:ea:f1:e5:c4:9b:ca:40:65:9f:
62:ce:3f:70:da:2c:86:96:ab:37:b0:5d:0c:7a:b5:18:83:2c:
19:4f:17:8b:95:06:1d:71:cb:47:4f:34:06:b9:46:27:f7:a0:
2a:b9:6b:14:d4:6f:80:1a:1b:bc:ef:40:a7:0e:13:84:1c:64:
21:8e:87:fd:06:11:0e:52:6d:59:7a:38:b8:96:e4:40:4b:bf:
7f:4a:b0:2b:b8:a2:6c:5a:92:25:fc:b1:59:30:ec:cc:f5:59:
c0:7d:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org