Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A20A87C5F1711EF967C3898762E951A.roa
File: 8A20A87C5F1711EF967C3898762E951A.roa (raw, json)
Hash identifier: ZugcAqG/tBkkOzjK+V+2U8mZMkV8NILu3BREyNaQLbI=
Subject key identifier: B8:98:DA:3F:11:2D:0E:CC:E1:72:AA:D8:33:6A:04:CC:CB:6A:80:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A20A87C5F1711EF967C3898762E951A.roa
Signing time: Tue 20 Aug 2024 17:13:38 +0000
ROA not before: Tue 20 Aug 2024 17:13:34 +0000
ROA not after: Tue 21 Jan 2025 17:13:34 +0000
asID: 63199
IP address blocks: 154.223.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58182 (0xe346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 17:13:34 2024 GMT
Not After : Jan 21 17:13:34 2025 GMT
Subject: CN=66c4cec2-b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:b2:fa:91:60:9d:9f:85:cf:9e:a6:06:bf:
ee:0b:6f:ad:d0:a9:23:27:c0:5b:5d:d7:4c:4e:57:
a7:82:5d:ed:99:25:8a:89:31:9f:e8:50:ff:bc:b7:
78:56:23:8c:e7:e4:1c:55:95:52:54:91:67:2f:32:
c2:1a:68:6e:b7:3f:aa:1f:f7:ee:70:e8:6c:fb:19:
da:6c:12:57:16:65:4f:5d:32:57:96:5a:32:59:03:
0b:2d:6e:46:ae:97:db:1e:b9:6e:78:08:23:9d:ce:
c3:9b:7e:77:3f:5e:15:de:1b:3c:cd:47:c4:0b:76:
90:c7:7d:39:13:0b:6e:67:06:dd:70:c2:ad:75:65:
c4:71:ea:04:de:df:ca:93:61:07:24:d7:2a:34:51:
59:bb:ec:26:d6:0f:92:e3:9e:b1:d7:59:8b:ef:e6:
7e:f8:c6:6b:4c:8f:64:ea:ed:fa:84:2c:7c:72:f0:
04:92:24:74:ef:d0:67:7e:8e:ab:28:45:80:45:b9:
55:ca:5b:68:3b:3c:e4:9f:50:62:6e:34:68:11:58:
22:be:83:6b:26:fb:ac:2b:e0:dc:e6:d1:81:fd:31:
ab:f4:96:8c:7b:76:bc:89:0a:75:9a:f0:d4:8f:4c:
ff:12:8a:e6:af:29:aa:89:3c:a2:82:8c:19:c1:c3:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:DA:3F:11:2D:0E:CC:E1:72:AA:D8:33:6A:04:CC:CB:6A:80:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A20A87C5F1711EF967C3898762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.82.0/23
Signature Algorithm: sha256WithRSAEncryption
73:88:f6:05:4c:09:b6:9d:8e:0d:aa:c9:25:5d:0b:8b:90:b3:
75:fd:e8:58:fc:1a:5c:54:49:79:8b:23:51:99:3f:16:fb:83:
6f:2d:33:3b:c5:d9:12:ea:1b:57:a9:00:11:d3:01:b3:b1:d9:
79:21:21:e5:06:cf:d6:c2:4b:6a:c6:e9:17:95:8f:c5:f1:77:
8d:52:3d:79:44:9c:02:e4:7a:0f:e6:70:55:96:44:dd:03:aa:
c3:92:71:dc:7c:9f:bc:59:78:13:6c:46:d8:f3:99:0b:dc:85:
0c:52:15:22:2f:2d:a1:f9:be:25:07:53:04:19:3e:c7:53:80:
5c:f8:b8:a3:12:df:61:2e:da:33:61:97:d5:de:4f:30:13:48:
2e:64:3a:15:bc:0d:39:ae:6f:11:68:b5:4b:12:56:34:20:69:
7d:d8:ef:5e:bd:61:57:7c:92:b5:49:57:59:10:6d:7e:c1:0e:
81:81:37:5a:20:d0:5e:bc:dc:78:00:9a:db:ca:37:d6:a5:8c:
f2:17:1b:f2:1d:2f:9e:c5:68:0b:d8:9a:4d:8c:1c:a5:c9:11:
7e:1a:d3:26:7a:19:9f:c1:2f:95:5c:5b:a7:81:a3:7b:d0:4b:
ed:c1:63:9d:d9:f4:fd:18:c1:84:c5:3d:c7:b4:92:2d:7f:74:
e1:94:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org