Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89BF995AB34211EEBA5FD864775412E6.roa
File: 89BF995AB34211EEBA5FD864775412E6.roa (raw, json)
Hash identifier: UDFRB1lCMUGVKUGRrwAqZnf+IFgcu8wHAuLMCwJ/R1w=
Subject key identifier: D1:0D:77:B9:72:6F:23:54:46:85:88:BD:28:DA:4D:EC:09:31:DF:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7512
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89BF995AB34211EEBA5FD864775412E6.roa
Signing time: Mon 15 Jan 2024 01:08:06 +0000
ROA not before: Mon 15 Jan 2024 01:08:02 +0000
ROA not after: Fri 13 Dec 2024 01:08:02 +0000
asID: 140227
IP address blocks: 154.205.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29970 (0x7512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:08:02 2024 GMT
Not After : Dec 13 01:08:02 2024 GMT
Subject: CN=65a48575-011b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:2e:76:21:2d:1a:1c:ec:a9:32:e1:ee:a9:
43:b1:f2:d7:8d:03:1e:f1:03:76:2e:db:21:9a:64:
2a:b9:aa:10:85:8c:67:d0:b2:10:b3:f1:2a:7f:f9:
81:76:7b:38:f6:e9:97:21:40:3b:68:dc:8c:55:3b:
a2:c6:8d:16:d8:ca:78:57:03:f6:7f:a7:72:f9:94:
e1:c2:5a:16:77:b1:1e:6f:43:e6:56:40:e4:12:03:
49:85:c2:74:08:31:27:42:74:b0:1a:f3:53:3e:7b:
86:f9:8f:7c:c1:68:2d:77:27:62:86:3d:16:35:61:
83:27:81:ad:05:9b:41:51:0a:ba:07:94:41:6e:c6:
33:cb:86:86:e6:65:19:7b:14:7d:4a:86:ec:51:44:
bb:f3:f3:22:ec:89:5f:64:f4:c8:72:c4:ff:e6:60:
ce:ab:30:dc:80:70:1a:c9:cc:22:d2:3b:79:66:93:
d7:d8:d2:d0:9a:14:9b:e4:89:7b:7c:c3:e7:3a:00:
3b:a4:e2:11:c0:ad:46:fd:c0:02:c5:a9:c7:61:07:
e9:a4:13:5d:03:f0:60:6e:4f:85:63:1e:ae:17:da:
81:91:f6:ec:0c:e9:84:8d:bf:70:0f:15:6b:da:41:
1f:fe:0a:00:66:8f:68:d8:cf:5f:d5:c4:e0:f7:63:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:77:B9:72:6F:23:54:46:85:88:BD:28:DA:4D:EC:09:31:DF:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89BF995AB34211EEBA5FD864775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.209.0/24
Signature Algorithm: sha256WithRSAEncryption
54:db:83:9c:be:80:5f:07:f7:6e:77:77:a7:b3:1b:cd:b8:20:
bb:db:a7:a7:8d:64:c2:62:84:4e:b5:c8:08:2b:01:9d:b9:ef:
05:8f:d9:a7:ef:37:9f:15:8e:59:ce:bf:f4:41:7d:77:43:0e:
31:c2:bf:22:07:a8:13:65:92:df:6d:5f:77:5d:8e:00:8a:6a:
85:7f:05:b3:09:73:94:3e:80:4c:6e:ba:00:a0:bc:93:57:20:
a4:24:4b:10:2d:24:96:33:65:16:2a:21:94:8a:3a:88:58:32:
c0:54:99:5f:63:84:9a:51:17:d3:b0:6d:33:fa:4d:c9:0d:a2:
b2:74:12:0e:dd:1c:c0:f7:27:a9:d9:29:f1:90:a9:d7:72:a1:
62:bc:55:b5:94:ee:8f:0b:0d:78:ed:7b:df:cc:94:bb:7a:87:
69:44:ae:74:b6:aa:5a:89:43:f2:93:ff:14:33:34:3e:28:d8:
47:37:71:38:30:48:f4:f3:73:c4:fb:0e:a3:a1:c0:df:60:f0:
2c:f8:23:8d:77:a3:2a:26:77:e4:ac:bc:f9:39:8c:fb:a5:e9:
9b:88:13:e6:ba:f4:44:15:66:63:69:f9:39:03:03:21:f6:29:
19:f5:0e:5e:29:be:c8:ab:98:3f:02:c4:f2:d6:77:ba:51:aa:
a2:56:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org