Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFA5142F7BD11EEBEDA2F12017001B1.roa
File: 8AFA5142F7BD11EEBEDA2F12017001B1.roa (raw, json)
Hash identifier: wExtdcNIuLRA/5luedCgViiZEg2t6lKEfr8RS0+7VKE=
Subject key identifier: F0:8B:EC:C3:CF:5C:29:FD:78:AC:21:B0:3C:DE:C0:7E:E3:DD:51:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFA5142F7BD11EEBEDA2F12017001B1.roa
Signing time: Thu 11 Apr 2024 04:39:55 +0000
ROA not before: Thu 11 Apr 2024 04:39:51 +0000
ROA not after: Sun 19 May 2024 04:39:51 +0000
asID: 138915
IP address blocks: 154.90.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43785 (0xab09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:39:51 2024 GMT
Not After : May 19 04:39:51 2024 GMT
Subject: CN=6617699b-162c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:d7:9d:91:8f:12:c2:c9:61:53:4a:79:dd:
df:a9:ad:20:4e:44:ea:46:34:f3:b8:a7:82:8f:8f:
81:de:db:a6:40:0c:ef:55:a9:c2:2d:f7:5b:ff:75:
23:4b:76:f0:f4:d3:26:34:30:56:5c:56:9c:42:02:
01:b6:9d:48:8b:0a:e4:78:4f:4d:4b:9d:8f:eb:4d:
02:4b:e6:d5:7f:33:85:5d:7c:08:67:77:71:21:1c:
51:a5:24:a5:41:82:b8:1c:55:b4:bc:1b:ba:f8:ef:
8c:f5:e0:18:3c:b6:09:a8:82:69:b0:02:14:69:cc:
e3:ca:65:4e:14:a2:60:ee:c9:75:9d:42:4b:50:c6:
80:54:1f:d1:1e:77:3a:cc:03:bc:da:ca:da:e7:4e:
f8:8b:29:7d:98:50:47:54:a1:95:4c:f9:de:78:3a:
5f:07:f6:c6:04:63:39:0b:f4:6d:53:8f:f5:f8:3c:
14:28:8e:fb:41:53:c4:f0:65:42:e4:61:c1:5b:b2:
99:66:c2:e6:8a:92:ab:e5:61:03:6f:83:f6:e1:60:
65:b0:9a:6c:44:15:98:55:63:12:f1:d4:bf:3d:28:
77:08:67:12:68:0a:06:e3:2e:5a:44:f5:f0:5d:b8:
09:fc:c8:b6:95:01:4a:35:b4:a8:59:c6:55:9f:1d:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:EC:C3:CF:5C:29:FD:78:AC:21:B0:3C:DE:C0:7E:E3:DD:51:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFA5142F7BD11EEBEDA2F12017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.48.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a8:d7:61:63:10:9e:30:73:92:fa:05:30:4d:74:63:d3:a5:
32:2e:9b:59:54:24:c6:28:8b:da:ae:ac:5b:0c:6a:fe:2e:f5:
8d:60:c7:e4:fc:72:75:9c:23:f6:9c:0a:43:5c:2e:2a:55:a6:
71:9d:9a:44:c1:2b:af:ea:a1:bf:6d:e4:99:ad:b4:fc:16:c9:
bb:e9:b2:a0:d5:ef:08:98:d6:ba:ee:04:21:76:39:89:8d:60:
25:09:2a:49:31:66:2f:a6:e2:60:55:1f:9e:be:d1:23:a5:ba:
b1:a2:44:9d:68:06:e5:88:47:f8:aa:c0:c1:5c:71:70:d7:bf:
d7:4f:f8:df:d2:96:62:e0:f9:8b:dc:19:53:f1:0e:1c:18:d3:
5d:9d:cb:ee:7d:50:ea:9e:84:19:09:5a:bd:17:41:c1:a8:71:
1b:a3:92:f1:9f:ec:01:01:91:17:36:43:f9:d6:56:80:6f:cd:
c8:db:d0:f6:08:fe:eb:15:79:4c:68:b9:67:dc:ea:bd:19:09:
ea:a6:ad:fd:a8:c4:e2:a4:f6:63:dc:ed:18:34:71:87:ad:ec:
80:88:e4:63:3a:6f:da:95:91:bd:e7:34:78:95:61:68:1c:7a:
24:86:cb:49:3e:28:b5:42:f7:44:3a:5d:15:83:51:4f:1c:d4:
1c:52:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org