Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0165707AA64E11EFB91F704F762E951A.roa
File: 0165707AA64E11EFB91F704F762E951A.roa (raw, json)
Hash identifier: Tq/l95yF9m1A1tAvsh8qXqLICi/4lwfqaTnyigMApXg=
Subject key identifier: 06:15:9B:C8:82:6A:C9:82:21:B0:CD:04:70:AF:99:93:DF:8F:DE:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0165707AA64E11EFB91F704F762E951A.roa
Signing time: Tue 19 Nov 2024 08:12:23 +0000
ROA not before: Tue 19 Nov 2024 08:12:20 +0000
ROA not after: Sun 15 Dec 2024 08:12:20 +0000
asID: 51396
IP address blocks: 154.213.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69402 (0x10f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:12:20 2024 GMT
Not After : Dec 15 08:12:20 2024 GMT
Subject: CN=673c4867-8892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:7c:4a:34:b8:4d:e6:c8:bb:17:06:7b:5a:
ce:00:54:f2:4c:64:bd:18:61:ed:21:50:be:22:72:
d9:6b:2f:87:9b:65:19:4e:7e:4a:bf:a9:fb:13:9c:
c5:78:10:dd:1c:61:55:89:df:af:0d:dc:e1:88:a4:
c1:92:9e:e9:3e:8a:24:25:c2:63:b1:b3:cd:0e:f6:
3c:c5:bd:c4:28:77:a3:b2:f5:c7:20:10:77:7b:fc:
28:49:8f:ac:8c:cb:47:39:4b:3d:0d:7c:17:85:42:
69:b4:2d:66:6d:f3:81:62:a6:69:3f:1c:cd:45:89:
11:a9:4b:55:94:11:93:aa:0e:82:53:fb:c5:fc:d7:
64:60:51:ad:d5:a8:28:bb:ae:0e:fc:31:8b:81:ec:
6e:20:79:44:c6:ab:56:b5:0d:c6:b9:19:ad:53:08:
2b:a2:6f:c7:e8:81:42:60:95:39:d3:ce:dd:8f:0f:
7a:03:ab:11:76:3e:3a:d7:b8:8d:f4:36:8f:e3:55:
e5:da:5b:4f:e0:25:50:63:71:ab:9f:6b:13:70:50:
54:18:9f:aa:69:06:40:83:fd:fb:a0:16:81:be:7f:
bb:ea:24:3e:01:ff:1d:6f:4a:36:5b:8f:8e:85:63:
ac:14:6c:22:7d:91:02:d0:18:6b:3a:2f:26:71:59:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:9B:C8:82:6A:C9:82:21:B0:CD:04:70:AF:99:93:DF:8F:DE:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0165707AA64E11EFB91F704F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.191.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bd:d2:75:21:8c:cd:c5:d6:8f:b8:ae:56:b1:3b:20:3e:48:
7d:74:a4:84:28:dd:1f:81:49:92:9c:3e:ef:59:6d:61:df:65:
a1:c3:3a:51:13:3d:91:8d:02:df:4a:bc:86:52:82:78:13:79:
c0:3b:eb:81:09:d3:ff:6e:d8:74:24:8e:7a:2e:19:89:f1:7c:
7b:9b:07:49:be:bd:8b:a6:36:64:c8:4f:cd:36:5a:1a:97:f2:
f1:f2:ae:9d:56:f6:a7:fa:69:7b:f6:6b:2f:a2:a7:cd:b3:4e:
15:7a:78:a7:f2:66:aa:05:23:ad:89:e5:cc:8e:7d:a2:b2:f7:
87:4e:c9:6b:2b:0f:b2:4b:e5:74:07:c2:a9:aa:1d:ef:f5:37:
a6:cb:73:43:15:6c:5a:74:42:b0:4e:5b:32:35:45:f3:5b:a3:
6e:8f:a1:c9:aa:45:9e:b0:06:39:17:4b:4c:56:34:cf:e4:f6:
1d:da:c1:0d:17:b0:9d:fa:35:97:b2:2a:1e:da:26:12:47:0c:
6a:c0:4b:4a:93:22:ab:5b:32:5f:78:f7:8f:7b:d2:a4:93:a2:
34:13:e3:3c:38:08:a7:eb:fc:ce:09:a0:15:dc:68:90:06:56:
fd:a1:d9:ae:92:74:a8:3e:1a:48:f8:bd:48:1d:db:e7:10:2d:
33:8d:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org