Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9F17D673FE11EFB5ADDBB3762E951A.roa
File: BE9F17D673FE11EFB5ADDBB3762E951A.roa (raw, json)
Hash identifier: K02sIVHKbzIxjg9Kqa9Kp/diGZDu9T1mbELIAbk+wGE=
Subject key identifier: D2:E0:6A:38:3E:35:4F:0A:C7:CE:4E:02:67:74:DA:F7:D1:2D:61:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9F17D673FE11EFB5ADDBB3762E951A.roa
Signing time: Mon 16 Sep 2024 07:39:03 +0000
ROA not before: Mon 16 Sep 2024 07:39:00 +0000
ROA not after: Sat 30 Nov 2024 07:39:00 +0000
asID: 142403
IP address blocks: 154.83.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61331 (0xef93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:39:00 2024 GMT
Not After : Nov 30 07:39:00 2024 GMT
Subject: CN=66e7e097-11bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:8a:5c:06:38:8a:c1:8f:5c:f5:b9:96:36:
70:ca:b8:39:5d:a1:cd:5e:57:bf:e3:7f:9c:b7:01:
04:f0:41:c0:ef:a0:a8:14:c9:a3:90:9e:81:32:06:
f8:c4:8e:60:5e:f6:8b:52:79:85:84:2c:dd:c3:4e:
04:13:1e:3c:97:e3:fa:ca:9c:a9:8e:c7:74:36:ce:
e5:e0:40:46:6e:5f:8d:cb:c7:01:57:81:30:4b:e1:
95:f5:42:b3:e4:51:a7:0d:3d:4e:a8:c6:0c:24:0d:
d4:5a:72:3a:5b:4f:73:33:a6:3e:54:66:32:63:48:
c9:a4:03:19:04:85:30:a6:de:dc:c2:8d:d7:c0:3c:
6c:59:0b:f5:74:7a:aa:5f:9e:e5:14:e1:bb:9a:e0:
a9:8d:d1:7b:d5:d2:87:14:71:38:1b:72:a0:05:e6:
a8:bf:62:c8:3a:7a:0a:66:b1:bd:d6:57:ce:e2:1f:
18:8e:99:88:53:6d:23:c5:20:09:5e:42:30:44:de:
4c:20:32:75:6c:ed:af:71:d6:0b:3d:c2:76:da:d1:
8e:7d:57:6b:42:3e:1b:b6:bf:75:e8:a2:96:4d:82:
8e:35:27:f7:ef:8b:a4:3e:7f:39:99:2b:f4:cc:a9:
16:62:e4:64:f6:af:6f:08:18:d6:0c:26:b0:d1:09:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:6A:38:3E:35:4F:0A:C7:CE:4E:02:67:74:DA:F7:D1:2D:61:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9F17D673FE11EFB5ADDBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:95:26:e2:16:cd:39:fe:f2:f7:dd:23:c7:b5:7a:37:b7:b4:
ee:de:c8:78:dc:ca:0d:6b:e8:ea:11:fd:6f:52:98:9e:2e:a5:
b4:ff:f5:da:12:bc:46:a9:7b:e9:ea:f2:4a:bf:d0:cc:c7:96:
c0:5c:ba:87:22:be:33:e7:aa:d7:a8:4b:84:a0:60:fe:a1:6a:
df:d7:f1:07:6a:b0:5a:75:2c:95:26:a9:1a:19:48:73:60:66:
16:5f:cf:15:ae:23:78:9d:36:57:05:77:78:68:34:c2:21:69:
71:14:d5:4f:0e:8c:b6:f7:ff:bc:91:c5:55:72:4e:46:da:80:
39:21:89:71:19:c8:e2:f4:01:da:c8:40:9f:48:3a:8f:b6:8b:
54:7f:b7:49:8f:d3:63:aa:96:64:14:d4:82:ad:4c:57:1b:c9:
57:df:ac:44:c8:a5:50:e4:7b:c4:f1:97:b0:d9:ae:52:06:20:
30:f8:c9:75:62:f4:1e:f6:cc:be:b4:0b:59:27:41:74:91:25:
96:98:db:f5:71:a8:54:bb:2e:66:4a:0a:c9:a9:17:f0:cb:d7:
52:3f:1c:c8:7f:3d:db:52:bc:7f:11:52:5b:1a:fe:58:fe:09:
82:82:f0:33:c4:1c:9b:ae:eb:40:2e:6b:5d:45:d1:a1:9c:2d:
e1:e4:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:25 2024 by rpki-client on console-ams.rpki-client.org