Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A3327E0CE811EF9CFC7615017001B1.roa
File: B1A3327E0CE811EF9CFC7615017001B1.roa (raw, json)
Hash identifier: ZLEUPaaaWMHEkQvTpx5NQUn3px8CZmdQHQ0glNkvRfg=
Subject key identifier: 2E:33:88:D7:FE:EC:66:7F:E4:C7:41:B6:32:6A:F6:F7:E3:27:40:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B570
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A3327E0CE811EF9CFC7615017001B1.roa
Signing time: Wed 08 May 2024 03:11:42 +0000
ROA not before: Wed 08 May 2024 03:11:39 +0000
ROA not after: Thu 01 May 2025 03:11:39 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46448 (0xb570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:11:39 2024 GMT
Not After : May 1 03:11:39 2025 GMT
Subject: CN=663aed6e-d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:60:36:5e:47:41:95:3a:9e:d9:c5:66:a9:
01:1e:18:1c:64:b5:29:4d:84:c0:a0:5b:bb:e3:fe:
aa:e6:e6:20:c8:98:d9:13:92:a2:d4:73:ab:7a:ac:
37:27:c5:e1:21:5e:00:ae:df:56:3e:91:d0:c4:a1:
ca:ed:06:41:98:1c:46:2d:5a:9e:d7:82:e1:45:e0:
8e:cd:21:00:5a:89:4a:05:97:52:66:a1:22:e7:4e:
e3:69:3b:68:49:f7:5f:58:dc:c1:02:7c:33:13:a8:
fc:ef:d2:6f:eb:8c:f8:b4:23:25:9c:73:d8:b8:e3:
f8:de:69:b0:a2:f0:7d:01:9f:cc:24:ab:dc:1e:ca:
f3:06:9a:b3:93:80:c5:1a:80:b2:18:22:9d:7f:a1:
65:1a:ff:7e:b4:99:17:bf:95:35:af:d0:5b:65:3b:
26:e2:36:d6:07:63:ec:ed:c8:5c:31:29:63:18:3c:
f2:89:48:49:7b:3b:e4:e1:a2:d0:a5:76:12:11:06:
c1:b4:6b:3c:32:be:f8:07:39:43:ba:84:bc:d0:f3:
73:7e:db:cb:fe:46:53:e0:66:34:8d:4a:6c:f6:75:
7c:f6:e6:c5:0d:95:81:d6:a1:4a:90:48:56:1a:ea:
6f:1b:a0:87:5b:6b:ca:be:14:54:bb:2e:a5:5f:4c:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:88:D7:FE:EC:66:7F:E4:C7:41:B6:32:6A:F6:F7:E3:27:40:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A3327E0CE811EF9CFC7615017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
07:93:dc:1e:c1:f1:46:fb:ce:6f:6b:5c:28:11:3a:1c:d9:c5:
0c:a5:dd:a8:44:b8:fb:14:15:96:a8:e3:b5:f1:ec:0e:97:ec:
0b:fd:b0:dd:69:97:b6:c9:0d:18:28:77:29:c5:40:e8:9a:9b:
ab:13:13:4b:00:ac:1c:ac:00:72:44:71:89:6b:8a:01:bb:c2:
b6:82:c3:11:3b:de:75:e8:fa:88:33:d8:5a:72:96:0c:55:fb:
f4:8e:2e:45:93:38:54:79:47:b7:ff:34:73:23:d0:fa:d0:39:
31:85:d8:5e:3c:57:d5:cf:b8:0d:f4:95:ce:44:58:be:53:a2:
f9:b8:a3:d0:32:09:4b:41:fc:6b:59:22:41:71:a2:00:50:36:
dc:88:b5:a9:97:57:49:03:25:9e:7a:ba:70:5c:65:57:d1:6d:
6f:a1:13:52:7c:11:71:e5:9f:54:52:a2:20:bf:24:22:58:00:
b6:2d:a2:54:fa:44:8f:f2:76:fa:26:e0:46:c0:1a:65:87:59:
e9:e5:6a:49:dc:23:32:d8:78:96:f1:7a:3b:91:bc:2d:75:b6:
67:24:cf:bc:94:8a:05:6c:c6:84:96:34:d7:38:74:78:2d:ca:
8a:df:6b:b7:85:34:ff:fd:64:3b:de:df:37:7c:fe:24:8e:89:
f2:1c:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org