Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F56A0A71A211EFA75F4674762E951A.roa
File: 86F56A0A71A211EFA75F4674762E951A.roa (raw, json)
Hash identifier: CgfHWcki6/S5fvWHOCCVoOz7XSh2gFv8Xp6EUVX/894=
Subject key identifier: 21:42:69:4B:8B:39:C7:B8:E5:67:6B:CD:FD:88:DF:DB:EF:27:92:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F56A0A71A211EFA75F4674762E951A.roa
Signing time: Fri 13 Sep 2024 07:33:53 +0000
ROA not before: Fri 13 Sep 2024 07:33:50 +0000
ROA not after: Sat 30 Nov 2024 07:33:50 +0000
asID: 142403
IP address blocks: 154.83.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60816 (0xed90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:33:50 2024 GMT
Not After : Nov 30 07:33:50 2024 GMT
Subject: CN=66e3eae1-c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:c3:17:78:c6:f0:a7:fa:17:b1:da:a3:56:
ff:73:1d:bc:cf:a6:bb:12:3e:94:94:45:89:8c:7f:
98:ad:3c:60:32:3e:68:0a:0c:df:0e:f1:cb:35:9a:
a8:99:15:4a:13:c2:80:af:e9:d7:b2:f7:31:66:78:
c0:3b:4a:57:9e:2e:92:06:e1:1c:25:a4:bf:93:3b:
b3:71:3b:0f:55:06:56:af:62:ed:57:e8:da:e5:1a:
fe:ed:b6:2e:6d:ae:41:69:2f:ce:79:71:57:a6:45:
86:69:f2:36:ef:05:92:fa:0a:53:a2:1a:bf:72:d8:
2e:19:20:ed:83:96:65:6a:a5:11:3a:f1:f7:4d:d5:
80:66:5d:5b:17:01:50:3e:70:e4:77:69:42:f8:fa:
b3:03:4c:f5:96:f0:f3:74:71:d4:49:3f:fd:4e:2f:
d2:54:4f:10:07:d8:71:e1:c6:40:9a:54:0a:fe:de:
b5:a9:41:8c:b1:26:f8:68:01:78:d6:2d:45:9b:af:
2b:ca:6a:f5:5f:98:26:47:19:cd:20:b3:d0:be:d7:
13:29:2f:35:1d:36:f7:33:d2:2f:5c:03:f9:1f:3b:
08:d9:96:0a:9e:8d:db:78:c5:ec:d6:85:f5:3f:e0:
01:34:c5:05:3c:3c:10:b9:d6:8c:cb:61:5e:b1:67:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:69:4B:8B:39:C7:B8:E5:67:6B:CD:FD:88:DF:DB:EF:27:92:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F56A0A71A211EFA75F4674762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.16.0/23
Signature Algorithm: sha256WithRSAEncryption
27:a2:6b:9c:2e:aa:9f:e1:13:34:37:d1:ba:02:b3:ce:b4:8a:
bd:0a:be:6d:51:5b:a9:87:e0:cd:6a:64:1e:0e:d9:33:77:6c:
b4:6b:ad:28:96:45:96:bc:3b:a7:e7:6e:f9:4c:a9:aa:bd:61:
8e:5a:19:73:10:5b:b2:3b:b8:ac:62:7c:14:8e:f2:83:aa:5a:
2b:ca:2e:0d:aa:cf:74:1a:15:37:7e:6b:d8:68:03:92:1a:43:
0e:85:de:bb:6e:d8:06:d5:43:3a:36:e6:f7:69:aa:d5:2c:04:
30:4e:72:9b:75:f8:e1:99:5a:69:5f:a0:38:82:71:81:1d:27:
0e:8c:8c:e6:9a:d7:63:38:88:db:a6:b0:24:79:3f:85:e4:80:
05:4e:64:ff:6d:82:ff:33:d0:30:57:ab:f6:4f:d6:60:07:0c:
30:5a:52:f0:92:6f:1f:9c:12:bb:07:32:63:1f:1b:c9:25:24:
ce:df:34:26:1d:28:16:38:dd:1e:9c:de:8e:a9:b0:7c:68:72:
83:81:f4:f8:48:9f:b4:9e:8d:2f:98:8a:9b:db:43:c1:2c:c0:
45:3f:48:f6:9b:51:9a:6c:67:a3:26:f3:78:15:19:4a:b4:e4:
47:4a:e4:e2:ed:3b:d0:34:d5:3f:77:ae:ad:52:9d:52:5e:75:
72:49:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org