Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8983DB30B06911EE9FAF0EC6775412E6.roa
File: 8983DB30B06911EE9FAF0EC6775412E6.roa (raw, json)
Hash identifier: vbfXpbYCnxWIFAz+7sDjfL58dloJOLXNGIUgdUfCdfU=
Subject key identifier: 56:11:F4:58:5F:D7:31:C9:4F:A7:A6:52:06:D9:5D:22:94:8D:1B:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 73D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8983DB30B06911EE9FAF0EC6775412E6.roa
Signing time: Thu 11 Jan 2024 10:09:42 +0000
ROA not before: Thu 11 Jan 2024 10:09:39 +0000
ROA not after: Mon 30 Sep 2024 10:09:39 +0000
asID: 211392
IP address blocks: 154.84.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29656 (0x73d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 11 10:09:39 2024 GMT
Not After : Sep 30 10:09:39 2024 GMT
Subject: CN=659fbe66-a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:b3:c3:32:b3:9b:f8:87:c5:63:97:bb:b0:
d5:85:8b:a9:67:13:d8:bb:6d:4c:43:51:97:ae:36:
46:1d:24:df:cf:cf:c0:38:da:f1:fc:96:18:90:cf:
d0:01:a9:e0:62:c9:b1:5f:e0:2a:54:29:0f:cb:8a:
b5:9b:b5:07:94:82:3e:76:95:b9:74:f4:03:63:54:
e2:08:13:3b:83:e0:6a:5b:6f:70:0d:84:9b:cb:bb:
1f:8a:c6:8b:cb:be:de:d1:c9:a1:03:43:a9:c4:87:
88:54:90:b1:a2:05:b8:43:1d:68:c8:c6:99:98:51:
01:db:b1:5f:c2:fd:7e:0c:e6:1a:62:29:2e:bb:0c:
08:19:34:b2:7e:c5:46:b3:71:f1:7f:97:b0:e0:85:
f9:c8:c5:c6:7d:3e:1d:dc:52:c6:6e:8a:7a:64:b0:
ad:c1:cc:47:8c:f0:1f:b2:94:8d:8b:07:e1:b5:09:
ff:87:f3:81:31:24:20:41:71:17:94:18:8e:52:b8:
91:ea:4d:24:02:7f:31:08:73:0a:8e:5e:d6:03:ac:
81:34:65:d5:fc:0f:a3:84:7c:c3:2c:df:8e:1d:f3:
de:b5:d0:26:f8:3b:cb:15:65:bf:a1:3d:d4:f3:f7:
af:20:a8:35:11:74:f3:7a:b1:5f:35:70:bb:74:10:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:F4:58:5F:D7:31:C9:4F:A7:A6:52:06:D9:5D:22:94:8D:1B:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8983DB30B06911EE9FAF0EC6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.22.0/23
Signature Algorithm: sha256WithRSAEncryption
20:b1:eb:f5:e6:4b:c1:8e:b6:85:1e:69:37:3e:c6:cb:70:38:
5b:9d:1f:ed:5d:78:d0:ac:60:4c:68:0b:43:74:a6:f4:49:7e:
b1:04:68:ef:ef:97:8a:9f:3a:9e:49:f5:e5:51:bb:10:72:cb:
e8:19:55:84:39:af:1f:f9:90:a2:bc:43:72:c4:19:b2:50:ee:
58:a1:1f:02:a3:9f:31:0a:fd:e5:f1:da:70:a0:4a:82:c7:b5:
49:c4:f3:b4:ed:67:e9:7a:29:09:04:84:e1:9f:48:b3:c7:88:
10:c6:8c:0c:0b:e4:eb:32:73:f1:1d:04:f7:f7:da:8a:50:8e:
60:10:f9:f2:bf:16:3c:8b:c2:2d:aa:72:c8:d9:e8:71:a6:0c:
5c:82:84:a5:48:8a:e9:c4:52:e0:3b:0b:c6:60:f4:66:7c:a4:
29:ef:e5:c1:1f:74:30:f6:2b:84:4d:5c:8a:cd:49:b9:d5:d4:
81:77:c5:a6:25:f8:ed:59:f0:f6:6a:5f:ea:f9:cc:ae:1b:19:
e8:34:0f:49:7c:f0:bb:f5:ae:15:a7:3d:d9:0f:93:87:a4:5f:
6e:c8:3d:e6:20:df:10:14:47:b9:43:a4:28:de:9e:df:34:3e:
5a:4a:85:5d:5b:89:eb:97:a5:46:6b:e9:2b:31:bc:b1:99:0a:
64:dc:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org