Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/057999288F8F11EF8DFF655C762E951A.roa
File: 057999288F8F11EF8DFF655C762E951A.roa (raw, json)
Hash identifier: lrvZa909tu3H2bi69or0Z6MuKDAtVuqu/LFrwhsrhBk=
Subject key identifier: 97:C4:15:AA:48:5A:85:B2:5B:2B:79:0B:7D:3D:64:21:D9:43:DB:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/057999288F8F11EF8DFF655C762E951A.roa
Signing time: Mon 21 Oct 2024 09:29:51 +0000
ROA not before: Mon 21 Oct 2024 09:29:47 +0000
ROA not after: Sat 30 Nov 2024 09:29:47 +0000
asID: 142062
IP address blocks: 154.203.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65634 (0x10062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:29:47 2024 GMT
Not After : Nov 30 09:29:47 2024 GMT
Subject: CN=67161f0f-6c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:5c:ca:0c:c5:d1:aa:2f:ec:50:fb:43:32:
bc:96:d0:3d:e6:4a:c6:2a:7f:51:08:76:96:a2:cc:
36:5e:dd:41:7c:ce:4d:2f:f8:79:0f:ec:6f:36:2c:
98:47:6f:84:9e:10:08:cd:ac:c6:fa:13:5a:89:16:
51:11:67:c8:a6:2e:4f:e0:43:ea:c9:af:0b:a2:76:
8d:ca:49:16:80:91:52:ae:0e:1a:72:69:20:ce:39:
90:2e:d4:9a:91:de:f6:8e:8b:be:52:3a:bb:30:3d:
95:d5:c5:d8:bc:83:cd:aa:26:75:b5:3d:a2:42:e8:
2b:dc:d4:83:88:ff:09:d3:1a:c4:85:88:82:11:af:
03:6b:5a:5d:ad:6b:8c:c2:a3:29:a8:88:1d:b8:f4:
a9:1c:b1:b3:43:a6:bf:e1:64:8e:71:8e:f9:f1:90:
0f:7e:61:09:48:7f:b0:b8:c9:2c:6e:4e:a6:9c:2e:
58:71:d9:d6:e8:f7:23:e0:d9:f0:2b:3e:fd:ee:4f:
43:b5:92:e5:76:32:aa:33:83:ff:20:ff:00:0f:65:
ed:0e:c7:1a:a5:db:61:d7:90:18:02:24:dd:8a:54:
51:2d:28:ff:73:eb:93:a4:ca:cf:a6:e1:01:72:e3:
96:74:96:3b:f8:b1:2a:ea:40:a4:bb:cb:22:39:1b:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:15:AA:48:5A:85:B2:5B:2B:79:0B:7D:3D:64:21:D9:43:DB:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/057999288F8F11EF8DFF655C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.96.0/19
Signature Algorithm: sha256WithRSAEncryption
87:fc:fd:bf:55:0a:69:35:a0:11:ae:e1:5d:de:3e:bf:19:a6:
18:35:60:f1:32:06:8e:8d:4b:ce:68:8a:db:9b:2d:94:2d:18:
d5:46:d5:70:db:00:48:73:1e:2d:d2:82:1b:7b:f5:57:98:b0:
4a:b9:4d:ea:1d:de:8e:ba:77:8c:d4:3e:f0:46:5f:b2:1b:67:
4f:fa:1b:a4:67:ab:f4:f9:95:db:25:3d:ac:e4:59:6c:d2:57:
4c:5e:d2:4c:61:c9:04:21:88:27:62:a8:74:72:2c:e5:55:40:
1c:76:86:58:0a:f1:c7:f2:00:e7:bf:e8:ff:53:0a:ca:e8:42:
8d:0d:5a:47:ae:b9:92:ef:2c:0a:64:9b:ee:28:ae:82:7c:36:
9c:56:bd:55:87:47:69:a1:2c:47:77:4a:4d:c6:9d:0f:e5:e4:
05:6a:97:21:11:3d:58:e9:ed:41:65:7c:c9:0c:9e:0c:0d:3f:
68:20:47:99:41:f3:76:90:92:62:e3:56:4d:47:7e:77:93:3a:
82:31:0a:5e:fd:cd:af:38:4d:0c:a9:0e:4c:26:96:74:9c:cf:
c8:b9:6e:7a:0b:60:95:f3:5a:79:c3:f6:45:f5:bb:a7:f2:e0:
ff:d3:98:fc:ee:9a:d3:91:be:03:f5:df:07:4e:c5:11:97:1e:
07:cf:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org