Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82D5150736911EF9558AC52762E951A.roa
File: B82D5150736911EF9558AC52762E951A.roa (raw, json)
Hash identifier: OFGK0qqvdw5ghM82S3w+FYwzofKVAhjD1bKbNGGGjl0=
Subject key identifier: 68:5C:87:CC:82:6A:C8:5C:45:01:3A:35:F7:50:E7:DB:D8:4B:D6:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82D5150736911EF9558AC52762E951A.roa
Signing time: Sun 15 Sep 2024 13:52:17 +0000
ROA not before: Sun 15 Sep 2024 13:52:12 +0000
ROA not after: Sat 30 Nov 2024 13:52:12 +0000
asID: 142403
IP address blocks: 154.83.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61242 (0xef3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:52:12 2024 GMT
Not After : Nov 30 13:52:12 2024 GMT
Subject: CN=66e6e691-1c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:2e:e3:f9:bc:9d:f3:29:06:99:c4:74:25:
7d:e3:bf:53:15:a8:e2:58:8d:83:50:c5:71:ad:04:
48:61:3f:e4:87:1c:8c:27:cd:a4:88:6f:ef:76:e4:
9d:43:6c:37:53:48:cc:ae:f4:ba:c2:78:14:3b:c8:
5e:75:fa:58:0b:a7:86:9b:fd:9f:9f:29:b6:19:71:
c7:39:d4:29:12:cc:a6:83:f8:8d:e0:a9:5c:00:a2:
ed:e0:e5:19:3c:72:56:3c:f9:2f:df:db:ad:7d:7c:
ff:91:5d:68:c2:85:68:3d:f6:c5:b2:e6:b0:e3:4f:
f4:f5:e2:90:49:2d:46:23:1b:b4:0a:7b:c3:e1:26:
b1:c9:4e:80:ab:f6:d0:42:2b:9f:96:3b:7d:c9:0e:
44:f4:da:08:58:55:96:7a:b9:a4:8a:32:bf:7b:52:
f7:a8:30:61:c1:5e:9f:a2:43:4f:4f:c3:ce:b1:b3:
cd:3d:aa:e6:ee:51:36:db:93:ab:24:d4:ea:4f:b6:
2b:44:4e:50:be:a0:2c:86:9d:1a:dd:b5:9b:38:b9:
85:a4:b2:25:36:4a:8a:c7:cd:b1:0c:67:0a:40:f9:
36:af:fe:c7:65:3b:eb:98:84:ba:e5:57:c7:26:c4:
d5:b2:6e:70:fb:bc:9e:e8:d9:52:05:67:83:3e:1a:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:87:CC:82:6A:C8:5C:45:01:3A:35:F7:50:E7:DB:D8:4B:D6:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B82D5150736911EF9558AC52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:60:d6:64:43:c9:b5:20:99:a8:01:b5:d8:fb:f7:da:e9:b1:
57:20:a0:bc:4d:39:20:81:6e:ff:8d:e3:32:be:66:dc:84:d9:
81:4a:10:b2:f0:67:79:5e:1d:02:bc:c2:7d:e4:1e:fe:ec:19:
67:96:1b:ee:88:0f:b6:2b:83:c6:b3:45:8a:3a:45:64:77:1e:
d7:d1:b6:2f:08:87:32:75:eb:65:c9:87:da:23:c0:7e:c4:a9:
22:56:6b:28:bd:25:a5:fb:23:67:06:24:69:8d:ef:27:1e:79:
4b:d1:65:79:8e:b9:7e:b7:6c:5a:ad:3c:bb:16:92:8d:45:d0:
2d:a6:4b:3e:34:f0:38:c8:6c:55:60:14:34:c0:e5:d8:7f:be:
f7:a3:a7:64:65:a7:5a:67:ea:4c:e8:18:9f:ef:56:6a:1a:63:
8f:2c:3a:1f:d6:c7:8e:d5:0c:fa:69:3d:cc:a4:2f:48:8c:82:
ba:44:f0:14:73:5b:07:bc:9b:00:a2:bc:57:e5:05:88:fd:9d:
fc:10:9d:a4:68:54:ab:d2:93:12:f4:cb:45:52:d7:e8:85:29:
9c:0e:d0:2d:f0:12:55:cb:53:40:29:79:5b:68:33:41:70:38:
3a:0f:d2:37:c3:b2:f9:b6:60:bf:ef:90:a7:59:6b:2c:e3:6d:
0a:13:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org