Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02C2A8449EAA11EF953E5F8D762E951A.roa
File: 02C2A8449EAA11EF953E5F8D762E951A.roa (raw, json)
Hash identifier: YOqTRngBeLz5snzG1dRe7pETLwFKa8JqA+xIFQv2sa8=
Subject key identifier: 84:1C:98:E3:82:7E:92:5C:0C:67:31:F7:63:08:41:72:6F:02:79:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02C2A8449EAA11EF953E5F8D762E951A.roa
Signing time: Sat 09 Nov 2024 14:50:50 +0000
ROA not before: Sat 09 Nov 2024 14:50:46 +0000
ROA not after: Mon 07 Apr 2025 14:50:46 +0000
asID: 267834
IP address blocks: 154.198.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68111 (0x10a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:50:46 2024 GMT
Not After : Apr 7 14:50:46 2025 GMT
Subject: CN=672f76ca-91ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:13:f0:40:37:2d:da:a4:dd:e1:16:bc:a5:
dc:05:19:5a:df:91:28:7b:58:0b:71:6a:15:70:d7:
cf:dd:30:b1:78:a5:ff:00:d3:5b:9e:79:2a:98:28:
07:5b:68:06:a1:33:ca:ba:fc:57:a1:e8:3f:7d:8f:
2f:d7:8b:25:a0:9c:8e:6f:09:64:9b:14:e9:b0:9e:
24:d5:26:e9:d6:8d:b4:0c:62:85:7f:23:3f:29:51:
58:9b:3a:42:66:9f:61:a7:90:bf:60:f6:10:25:8d:
00:46:31:6f:e7:75:15:f2:5c:dd:72:5a:06:14:31:
c9:4f:f0:96:bc:ae:c2:72:e4:e8:09:44:a8:56:f2:
b1:51:cf:6b:24:26:8e:34:c1:d7:1c:48:bb:0f:12:
1f:75:45:31:7d:f2:1f:b9:7a:06:7a:86:4e:52:70:
0c:45:73:b1:5a:a9:05:ae:c5:6c:8b:33:d4:f4:41:
c7:ab:d0:1a:af:fd:47:42:7e:f8:33:b0:98:87:fd:
12:28:e0:27:bd:57:17:4e:b5:50:10:9d:00:ee:34:
5a:f4:07:ad:7c:04:0d:f1:05:22:0c:1b:99:44:f7:
39:e1:37:15:11:b4:66:59:b2:2d:77:2f:89:1e:ef:
6f:f1:5e:9e:1b:75:e5:f0:00:89:9b:a8:b6:3f:dd:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:98:E3:82:7E:92:5C:0C:67:31:F7:63:08:41:72:6F:02:79:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02C2A8449EAA11EF953E5F8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.57.0/24
Signature Algorithm: sha256WithRSAEncryption
af:92:6d:e5:49:67:5a:10:1a:fb:84:e9:86:f1:61:ea:0c:e2:
ad:d7:73:12:16:46:86:82:fa:22:06:50:ad:f5:06:b1:ae:27:
85:f6:4e:6d:18:b4:e8:4c:b8:29:41:0e:9a:9e:7a:83:82:39:
e9:ef:b6:c0:b0:a1:19:e7:27:f7:a2:db:c8:0b:e6:e1:27:33:
c1:d9:42:ec:1d:72:8a:68:36:a9:c4:84:af:df:44:9b:19:69:
98:20:f6:6f:29:44:f3:ab:b7:1f:2d:b5:a8:16:89:fd:81:c0:
58:a6:50:4f:e4:a6:b6:43:66:55:3c:31:bc:55:38:ca:6d:6a:
75:ad:b4:6d:ad:bb:1d:11:bf:22:d7:20:84:76:cd:ca:36:9b:
c5:46:07:d2:4b:12:f1:7b:47:e2:3f:eb:45:d3:c1:d6:1e:ae:
af:9f:c5:10:28:e8:26:15:fa:1c:2d:94:c3:6f:d9:d7:fa:ab:
06:d4:b5:c1:da:e6:63:66:24:33:1a:5e:75:31:3b:27:95:33:
7a:54:cf:b3:8b:94:fa:04:91:34:9f:9c:28:5c:46:88:9f:35:
b4:c0:f7:b8:7b:01:19:64:d2:da:6a:23:6e:2e:2a:d0:ff:58:
cd:9b:04:c4:51:2b:bc:f8:64:fd:aa:04:59:40:21:2f:bb:8a:
40:38:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org