Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D8D5ACFD2811EEA9166B34017001B1.roa
File: D4D8D5ACFD2811EEA9166B34017001B1.roa (raw, json)
Hash identifier: AvokbNrLtD4fFQTjLD6hqwhp9YfmZHV2GeIZzow8rOU=
Subject key identifier: F2:28:89:2F:FE:87:F2:8D:D4:F7:79:E6:A5:87:BA:84:03:D9:0A:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D8D5ACFD2811EEA9166B34017001B1.roa
Signing time: Thu 18 Apr 2024 02:10:31 +0000
ROA not before: Thu 18 Apr 2024 02:10:27 +0000
ROA not after: Fri 21 Mar 2025 02:10:27 +0000
asID: 211392
IP address blocks: 154.83.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44515 (0xade3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 02:10:27 2024 GMT
Not After : Mar 21 02:10:27 2025 GMT
Subject: CN=66208117-76f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:34:69:9b:91:66:4d:43:b8:2a:b9:2b:dd:
57:7f:c5:d7:b7:c9:11:7f:49:c4:3e:be:d2:74:2b:
be:e0:36:20:7f:3a:8e:11:97:74:65:85:06:87:88:
79:e8:05:59:21:b1:5c:ff:e6:25:fa:03:8a:ce:4c:
00:62:74:42:c8:78:c4:bf:f4:6f:c8:6b:12:69:4f:
a7:a6:5e:80:26:d3:87:3f:64:9a:b2:5e:f0:e1:c9:
f2:37:67:0f:46:b9:fa:7b:bf:cc:19:1a:35:64:aa:
81:b8:a5:46:1c:03:4a:ec:88:2f:ec:4a:52:2b:fe:
d1:3b:e2:c0:9d:e9:a0:bf:4b:80:e4:3d:8b:8b:4a:
c8:27:82:51:6c:db:38:47:dd:05:51:17:da:45:ea:
6d:87:8c:1c:14:f3:e4:fd:37:2c:1a:73:17:72:a8:
b8:ac:be:6d:e7:e0:9b:49:80:9f:83:fa:f6:17:f2:
33:16:af:8d:44:52:76:45:a1:61:85:ce:65:5f:8f:
af:2f:82:75:3f:ae:a9:c2:74:75:60:03:89:46:2d:
ec:65:1c:f4:6d:52:7b:04:d7:02:d8:d8:5b:e6:81:
14:a8:87:06:72:72:f6:bc:2c:57:82:46:d6:04:dd:
1b:c2:11:27:8a:a2:49:55:03:9f:4c:b1:1e:a7:f6:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:89:2F:FE:87:F2:8D:D4:F7:79:E6:A5:87:BA:84:03:D9:0A:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D8D5ACFD2811EEA9166B34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.23.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5d:d4:72:a7:99:e3:18:7e:d0:fb:b0:14:ab:d5:45:21:3d:
12:f7:85:2d:b3:08:34:1a:2e:78:aa:cc:47:9f:87:a1:57:50:
ed:3d:85:c0:c6:ba:64:c8:56:50:87:87:46:76:96:95:d2:de:
1a:5f:ea:16:ae:0e:ee:66:b2:bd:f9:ff:90:62:06:e3:58:f3:
b1:6f:78:06:11:cd:dc:13:ca:08:d2:cf:f0:f2:7a:19:e5:d1:
36:8f:e7:fd:b4:32:20:0b:70:fb:e0:18:99:28:d8:34:5a:a0:
98:0d:a1:ad:cf:11:1d:fd:99:b9:4a:1e:c2:3e:41:5d:2d:dc:
75:52:97:74:e5:c9:df:82:cf:a0:87:ff:c0:a9:94:6c:14:83:
6b:3b:b9:38:92:49:66:67:99:74:e4:be:08:1e:e8:ec:ec:ed:
88:43:eb:40:17:e1:27:99:49:7b:1c:00:0d:4f:79:df:4c:43:
b5:8d:c1:66:cf:3b:ba:93:a6:8b:f1:f8:19:e8:29:85:2c:d7:
d0:b2:c5:b7:79:c4:8b:91:f6:d7:e8:37:94:5c:f9:ae:13:ff:
86:dc:b2:69:26:4f:d3:5c:c2:d9:92:62:fe:eb:ab:ea:11:8b:
f3:71:f4:7e:6a:d1:5c:d2:04:70:e3:74:d0:d9:46:63:c4:e8:
42:1b:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org