Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8738C006150111EEB133002D4AD9E6FC.roa
File: 8738C006150111EEB133002D4AD9E6FC.roa (raw, json)
Hash identifier: 23XjF4GhkbBFF4+bHgyvW3b17J4V8H4W6l+9FGNjqrY=
Subject key identifier: 89:66:46:70:C6:C9:2E:3B:4F:E4:05:15:30:C8:7A:59:BA:D0:14:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8738C006150111EEB133002D4AD9E6FC.roa
Signing time: Tue 27 Jun 2023 15:44:40 +0000
ROA not before: Tue 27 Jun 2023 15:44:37 +0000
ROA not after: Sun 23 Jun 2024 15:44:37 +0000
asID: 201411
IP address blocks: 154.84.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11804 (0x2e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 15:44:37 2023 GMT
Not After : Jun 23 15:44:37 2024 GMT
Subject: CN=649b03e8-2965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:79:70:a2:c0:f9:7c:a2:05:1a:25:c9:e5:
11:35:ff:a3:8a:23:4a:6a:09:17:eb:78:7f:53:d4:
5a:bf:5e:6c:b4:c4:72:b2:02:de:54:c8:60:3b:5e:
7f:51:56:b5:df:ce:64:71:a3:51:5d:04:dc:c0:de:
3f:2b:7f:c2:c7:a4:25:4d:58:ba:a9:fb:0d:3a:4d:
36:e9:2b:c4:f9:01:09:bc:3a:ad:03:44:e0:2f:68:
91:93:20:1d:a8:17:d8:73:44:3c:9b:b5:28:3f:9a:
1e:20:06:39:98:90:bf:a2:54:8b:c4:ad:c8:4b:83:
b5:fe:fd:2e:39:5a:e7:98:f4:c4:6b:ab:17:77:cd:
9f:6c:0c:2a:ab:0e:c5:c7:42:ec:f7:1e:3b:00:9d:
07:91:22:0a:3e:db:84:af:45:28:97:94:9d:c2:31:
8c:a3:72:db:c6:fa:f4:17:d6:04:4d:40:cc:43:8e:
e2:00:ff:64:61:cc:03:06:6d:d0:3c:13:70:17:e6:
d0:a1:5c:bf:d2:28:4b:02:5d:c4:82:b2:4b:6f:3d:
e8:b2:8b:15:57:d5:6d:ca:75:7e:1d:56:0a:54:6d:
ad:99:ac:2c:d9:2a:ab:1b:56:86:38:15:ae:73:d2:
ce:a5:58:f0:89:c3:1d:1e:e6:ba:cc:20:48:0d:9b:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:46:70:C6:C9:2E:3B:4F:E4:05:15:30:C8:7A:59:BA:D0:14:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8738C006150111EEB133002D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4e:b8:79:7b:25:c6:41:cb:27:7e:b8:38:07:0d:17:85:f5:
15:7d:3d:cd:fe:ad:5d:7e:bd:05:62:16:51:be:47:59:08:30:
d9:99:75:29:4a:56:0d:94:2b:42:7c:0d:b0:43:14:58:9f:80:
89:0a:16:a7:6c:a5:aa:9e:d3:7e:da:07:f1:11:a2:94:12:19:
c1:ed:5e:6f:05:07:21:ab:04:58:37:fb:58:29:fb:e7:45:e0:
b8:94:0b:c2:e1:f7:08:a7:75:2a:ba:b0:be:f9:70:95:c9:cc:
e0:93:c3:c8:d5:47:4c:3a:9d:6a:85:0a:6c:42:07:6b:ba:7f:
5e:6a:d2:cf:45:54:02:66:8f:c4:5c:94:1f:a9:5e:45:7f:2a:
a8:30:c4:30:b1:0a:48:d2:04:49:b2:5a:21:80:63:25:8a:e6:
a9:11:7f:5a:a8:18:2a:9b:c1:0f:3f:33:23:9d:5b:5d:b2:24:
e8:51:6d:fd:9d:7c:df:14:74:8c:07:28:0d:60:84:34:6d:1e:
d1:9b:56:8f:c8:08:42:06:6b:7c:c0:77:7a:d9:db:12:ba:9a:
04:64:f3:b2:a4:82:56:ce:47:e9:00:59:3f:cf:f9:ec:e0:aa:
06:e2:e2:c1:ec:66:23:92:2a:63:29:33:77:60:e3:10:40:62:
24:7b:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org