Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938F2A22E9A711EE97E12568775412E6.roa
File: 938F2A22E9A711EE97E12568775412E6.roa (raw, json)
Hash identifier: hhwJvaOz2vkbUQ5WQ9ikhV5hqPdFudftCHWCYn/gpk4=
Subject key identifier: FA:6C:AD:3A:58:84:92:95:83:D2:2D:57:A1:0B:0E:55:1C:13:1A:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A65A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938F2A22E9A711EE97E12568775412E6.roa
Signing time: Sun 24 Mar 2024 06:27:24 +0000
ROA not before: Sun 24 Mar 2024 06:27:20 +0000
ROA not after: Fri 21 Mar 2025 06:27:20 +0000
asID: 209242
IP address blocks: 154.83.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42586 (0xa65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 06:27:20 2024 GMT
Not After : Mar 21 06:27:20 2025 GMT
Subject: CN=65ffc7cc-42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:c3:a3:ca:b2:28:b5:95:62:c5:5a:f3:84:
8f:19:47:5a:d9:cf:b8:e2:f9:49:60:09:1a:b2:0b:
ab:3e:33:c7:4b:ad:49:69:d0:9e:39:ce:6e:ba:72:
c9:2b:e5:46:34:ca:d7:a7:bf:a9:54:9c:62:07:ec:
0a:78:72:38:dd:c7:63:58:5f:f3:6f:98:b8:57:47:
02:c4:ed:06:35:8d:a6:54:ad:22:69:e7:6c:dd:e0:
46:a8:92:ce:65:ac:18:12:ba:d0:0a:ae:ce:a0:32:
9c:25:e2:0c:d2:11:60:78:23:4d:da:ae:71:3e:c0:
27:d1:e5:a2:5c:dd:50:c6:af:57:0a:c1:5e:fb:2d:
7c:6f:13:d9:36:48:18:0e:05:04:eb:cc:d3:d1:13:
43:06:9a:b9:fe:dd:29:91:ec:4a:3b:36:36:f6:f2:
5a:3f:86:64:92:1d:87:23:c1:f1:29:4b:0e:57:ee:
3d:65:7d:f3:f9:25:79:48:31:54:d9:8a:1e:02:da:
69:bd:6f:c3:b9:a9:99:6f:9d:cf:1e:d2:27:b4:bf:
3f:a6:ed:2f:d1:c6:be:c0:f2:b1:78:47:e5:5d:d5:
ae:e9:c4:ec:9d:84:37:a9:b0:ec:0a:25:8e:91:e0:
a7:f1:50:34:f3:93:01:5e:bb:3d:81:75:1a:27:9d:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:AD:3A:58:84:92:95:83:D2:2D:57:A1:0B:0E:55:1C:13:1A:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/938F2A22E9A711EE97E12568775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:d4:60:2a:91:8b:d9:18:7f:83:56:ac:a4:dc:c9:d6:39:00:
f0:84:5d:a1:9a:3a:87:69:7b:33:cd:b6:90:2d:42:c2:0e:17:
5a:60:8c:5f:7a:90:f3:73:7a:b5:ed:48:08:0e:8c:64:21:eb:
88:57:a2:34:85:7d:5a:36:6b:be:a0:58:ff:14:33:7c:e8:4e:
f3:21:ed:6e:71:aa:47:3b:94:e3:af:1c:6e:69:1a:9f:90:9f:
2b:40:54:0f:2c:56:54:c3:72:95:d7:01:1c:15:cb:23:85:30:
99:2a:d2:10:e4:ee:b6:cf:08:95:9c:40:e3:02:bf:ab:04:a9:
d8:82:e6:28:33:4b:b8:5f:88:2a:ef:70:d6:9a:69:1a:38:58:
e1:49:7a:c8:42:33:ea:25:d1:b5:cf:f5:e8:ea:61:f5:4b:12:
33:68:a8:ff:e2:15:ad:d8:4b:5b:3b:f0:d8:13:9c:09:d4:58:
ac:01:1b:36:df:0a:50:92:e8:df:c5:12:0c:c3:b1:1b:a3:05:
c9:88:16:c0:7c:a3:99:f0:e3:cb:a8:72:90:ce:e8:af:a7:b8:
7b:ad:08:f6:13:bc:7e:46:ba:bf:20:1c:e8:5f:c7:d2:68:c3:
23:c2:13:cc:15:4b:07:f8:d5:72:b6:2e:1e:b3:09:21:d9:c1:
51:09:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org