Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/047FE080A31311EFBEB6DE8A762E951A.roa
File: 047FE080A31311EFBEB6DE8A762E951A.roa (raw, json)
Hash identifier: Wc7NcflzN7GMkc/IjOQdskxwzxEwUUaXafslGRqq0Lc=
Subject key identifier: 23:91:A8:F7:36:96:61:21:79:9B:3B:6A:27:F7:F0:02:E2:F5:41:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/047FE080A31311EFBEB6DE8A762E951A.roa
Signing time: Fri 15 Nov 2024 05:32:35 +0000
ROA not before: Fri 15 Nov 2024 05:32:31 +0000
ROA not after: Sat 30 Nov 2024 05:32:31 +0000
asID: 6453
IP address blocks: 154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68908 (0x10d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 05:32:31 2024 GMT
Not After : Nov 30 05:32:31 2024 GMT
Subject: CN=6736dcf3-3181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:c4:f3:40:c8:cd:bb:30:70:26:31:c5:c0:
a1:91:70:5b:60:4f:30:af:9f:82:0e:74:6f:a3:bf:
43:da:39:97:cd:c6:5d:6d:97:cc:d0:42:3c:61:4b:
8e:cc:ae:62:20:48:e0:d8:ca:65:a2:d3:0a:51:3b:
da:c0:59:dc:4b:12:d0:68:b9:e5:1f:88:91:cb:cd:
ee:10:a4:3e:9a:09:6d:69:2e:b3:bc:ce:cd:68:8c:
79:92:47:ef:b9:ef:42:9f:cf:c1:f7:b4:f7:21:3a:
c4:26:34:38:1a:8e:6d:c7:f4:9f:1c:07:66:d6:c8:
10:2c:9c:8e:7c:43:12:4e:f2:91:94:99:ee:86:c3:
01:76:dc:93:2f:6e:98:46:0f:07:ba:a4:14:32:18:
5b:ca:2d:2c:1b:c2:01:57:1e:63:37:89:53:be:73:
ca:02:54:2f:2e:d1:77:02:12:e5:9c:d8:6e:d7:49:
3d:8d:30:84:e8:2d:d7:80:15:4f:d7:be:66:d0:1a:
97:f5:ef:e4:f4:42:ff:66:eb:94:8a:49:5f:01:01:
fd:c0:26:8d:68:0d:d0:6d:21:57:ce:3f:27:5e:e0:
43:36:2e:09:ea:91:5c:11:04:17:ab:2c:ea:73:63:
c0:3e:e0:6a:9b:c1:3c:11:af:e0:8d:3c:8d:28:18:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:A8:F7:36:96:61:21:79:9B:3B:6A:27:F7:F0:02:E2:F5:41:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/047FE080A31311EFBEB6DE8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b5:07:2d:a8:9d:8e:9d:e5:ce:4c:fd:94:c1:14:45:fc:c5:
5f:de:3c:2d:fb:0b:f7:91:de:74:57:22:9d:1f:4d:b1:1b:0a:
ad:34:df:0b:e0:5f:7b:d4:4a:4c:1b:dc:11:f2:c0:25:2e:c5:
b2:aa:ad:e5:f6:08:5e:10:0c:90:3e:32:a8:2e:8f:3b:2c:ca:
a5:15:2f:2c:b5:32:4b:b4:75:4b:bf:dc:47:4d:8e:61:1e:81:
b5:98:c5:29:21:9d:53:6b:30:c9:9c:74:65:27:23:08:df:1a:
2e:53:e4:5a:42:7b:9e:72:b3:3e:d4:9a:7b:22:d0:a4:9e:93:
c7:25:67:71:4c:e0:b9:57:ae:8c:75:f2:e2:39:70:b7:86:83:
fc:cd:bb:8c:89:28:5f:7f:24:1c:05:92:92:4d:d1:96:b6:4a:
b2:55:4b:dd:d5:e1:1f:76:cd:fc:78:5e:8c:33:00:b6:57:fc:
b9:77:7b:30:75:f9:10:91:bc:75:8c:c1:59:7a:4f:e2:73:86:
32:26:9f:57:1d:30:53:4e:e3:bf:92:21:e9:66:c5:b0:58:f6:
17:2b:56:43:a1:8d:a4:d2:2a:cb:a9:74:52:59:71:f7:af:96:
92:8d:13:3e:c1:64:dd:63:6d:a4:4c:4e:fe:f3:33:71:eb:de:
c7:14:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:41 2024 by rpki-client on console-ams.rpki-client.org