Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A81E7CA73F11EFB82A3FB3762E951A.roa
File: 08A81E7CA73F11EFB82A3FB3762E951A.roa (raw, json)
Hash identifier: 4/cGLWigBPkuteEpl4Fh0d3rgFCbW3C2OP9y3fcBhrs=
Subject key identifier: 2F:21:EA:5E:51:E5:A0:14:E4:85:9F:52:82:B4:EB:11:C0:2F:53:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A81E7CA73F11EFB82A3FB3762E951A.roa
Signing time: Wed 20 Nov 2024 12:57:44 +0000
ROA not before: Wed 20 Nov 2024 12:57:40 +0000
ROA not after: Sat 30 Nov 2024 12:57:40 +0000
asID: 142062
IP address blocks: 154.212.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69555 (0x10fb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:57:40 2024 GMT
Not After : Nov 30 12:57:40 2024 GMT
Subject: CN=673ddcc8-f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:8b:b2:aa:3f:20:ba:14:7e:51:1e:fe:48:
6a:aa:5d:79:63:a9:f6:8c:2e:72:ac:4b:1e:41:4c:
30:9f:86:0b:b8:1a:d1:87:16:a7:ee:31:00:a7:9b:
fa:51:3c:4c:b9:3a:71:31:60:54:7c:57:06:04:75:
3d:ca:e2:58:8f:61:8e:2b:47:81:f0:a5:ef:1b:a6:
b6:e4:27:93:93:c6:d5:3b:b5:99:14:aa:dc:9b:35:
a9:0d:83:70:a4:ee:9a:8d:86:d1:99:50:b3:d0:ce:
a0:58:3c:e3:78:92:7d:28:e4:7a:07:8c:4c:b5:2b:
ed:a8:80:f1:e6:e8:a5:f9:93:6a:b2:3a:4d:c1:8d:
6d:56:2f:88:6c:20:4c:28:a7:c0:23:30:5d:f8:27:
67:3a:76:67:81:b6:e9:11:4e:c7:5d:53:a3:c8:6a:
c9:ac:e6:f5:f7:82:c2:ae:b4:89:36:83:14:2f:67:
74:1f:f9:ca:1a:6c:e9:0b:01:60:b5:51:06:69:83:
44:1d:40:76:b5:34:5e:a4:3f:65:03:61:b5:e2:0d:
76:9b:79:ed:48:f3:a0:dd:84:1a:d6:54:8a:d0:92:
e9:13:21:b5:60:3b:3c:af:e2:8c:b1:42:4a:22:b6:
5e:a7:89:91:c8:a3:fa:71:e2:12:54:b9:b6:ef:7e:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:21:EA:5E:51:E5:A0:14:E4:85:9F:52:82:B4:EB:11:C0:2F:53:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A81E7CA73F11EFB82A3FB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5b:79:ff:76:b9:26:9c:39:c9:d6:c6:0c:21:90:7a:ed:55:
56:e6:f8:e4:48:63:44:7e:72:70:88:0f:9a:0c:c7:86:cb:86:
40:f5:5c:e8:33:d2:5e:ab:ea:0e:22:85:8f:3d:91:f2:d4:3a:
44:13:f9:d4:30:b5:bd:3d:dc:4e:a1:30:e7:fa:fd:67:6e:ef:
65:98:c0:98:22:9d:13:8b:21:ab:ee:45:a2:9e:1a:45:a5:97:
70:92:8a:5e:79:0c:17:8f:75:17:7a:ca:3f:04:c4:de:d9:d3:
61:19:ba:a7:26:e7:b6:b1:cd:12:f5:23:af:f1:14:87:3a:47:
5e:4e:fb:91:35:c1:69:6b:e6:fb:01:bb:2f:c9:8c:fa:57:ce:
87:d4:7c:17:7b:bb:f7:aa:87:de:f1:1e:80:1f:d2:fe:eb:f6:
72:f1:c3:d6:68:5b:22:f8:12:d0:e7:df:f6:12:d2:a5:3b:6c:
47:b3:16:fd:4d:ae:70:d8:33:2b:04:2a:97:4d:0b:cf:5a:b2:
c0:95:88:e2:5b:53:a0:3e:0a:a7:cf:1a:b6:d9:44:fe:71:0d:
71:86:c0:f4:a3:6e:59:50:7c:99:c6:89:d7:a0:19:4a:b5:9f:
e1:46:19:12:5b:67:69:ae:01:33:bd:7a:6c:4e:c0:3e:19:68:
7f:77:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org