Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C64652E6A5F11EF94FEBC46762E951A.roa
File: 0C64652E6A5F11EF94FEBC46762E951A.roa (raw, json)
Hash identifier: V27xu61nA952ND9sA9wtHFfzmWYqgB+uhEfCFFn5NuE=
Subject key identifier: E2:4E:26:AC:C4:94:6C:DE:4B:61:36:B0:0E:A8:96:5D:19:41:44:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E9FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C64652E6A5F11EF94FEBC46762E951A.roa
Signing time: Wed 04 Sep 2024 01:43:13 +0000
ROA not before: Wed 04 Sep 2024 01:43:10 +0000
ROA not after: Mon 30 Dec 2024 01:43:10 +0000
asID: 17561
IP address blocks: 154.207.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59903 (0xe9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:43:10 2024 GMT
Not After : Dec 30 01:43:10 2024 GMT
Subject: CN=66d7bb31-afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:b4:5f:2b:ae:ea:23:8e:4d:17:49:e9:36:
a2:27:a4:5b:f3:23:c3:69:65:13:ea:fb:ce:a1:bf:
78:c1:35:2b:bd:66:8a:ef:cc:02:02:ef:83:fa:c7:
db:46:3a:39:a9:22:f5:53:07:41:d1:6a:5f:cf:5e:
52:b9:5d:92:dc:e9:ef:9e:53:77:0a:6d:dd:e3:71:
49:a8:18:bb:30:cd:d2:70:94:90:4e:b7:10:3d:0c:
e8:7c:e9:c0:bc:30:91:6e:b3:2a:20:1a:26:88:e6:
4a:02:67:12:3e:a4:fe:e3:40:c3:76:35:b9:f5:4a:
52:42:75:f1:64:43:28:7c:12:01:33:d7:b2:92:e4:
f3:19:c6:ab:1e:a3:ef:ba:b4:8c:33:cf:ae:b7:dc:
dc:7c:c4:fb:b9:17:46:69:7d:de:83:22:17:a8:11:
a7:f5:ee:c3:cf:d0:19:1e:e3:d5:ac:6b:1f:4f:41:
84:8c:91:36:6e:1f:f6:b5:cf:46:ca:0f:23:ae:84:
be:a7:a0:14:f4:64:ef:6e:d4:3e:e3:d0:ab:1a:48:
aa:88:21:8f:ef:f0:e8:e5:ea:2d:79:74:10:22:18:
f1:28:da:fe:41:52:38:a6:bc:76:b0:12:ba:75:f1:
7a:b2:0b:e7:2e:43:69:9e:e9:5f:4b:2b:5b:8a:f8:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:26:AC:C4:94:6C:DE:4B:61:36:B0:0E:A8:96:5D:19:41:44:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C64652E6A5F11EF94FEBC46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:dd:cd:04:02:f0:24:53:5e:3e:f5:da:c3:75:07:9b:10:78:
f8:c7:96:fb:b6:5b:d2:28:e7:fe:0a:86:93:54:6c:1d:df:04:
62:9f:97:22:a9:96:a9:06:a6:5e:82:7f:8e:a0:63:93:dd:35:
ab:cb:06:2b:60:13:8a:cc:bd:16:ab:5b:97:6b:43:76:71:ad:
86:a5:93:df:b1:31:fe:62:0e:a3:46:31:b0:56:c1:ec:63:f6:
88:53:69:7e:dd:89:81:f2:69:96:65:e6:19:29:9f:c5:b4:dd:
15:46:3f:27:9d:9c:30:13:c4:a9:95:2f:34:44:a4:1d:1d:e1:
ee:21:1f:d0:6b:8f:93:8c:6f:51:ee:4a:15:d3:50:a2:36:49:
d5:90:0b:c8:84:7d:f3:88:5d:af:91:0f:84:f4:d6:13:40:47:
99:95:de:75:a5:4a:7f:d3:4b:66:06:d8:a7:9c:8e:d9:96:4c:
74:b3:2c:cd:da:78:29:b2:6b:d1:57:dc:88:16:22:b3:4e:ba:
61:f9:a2:d5:a2:f7:07:da:83:9e:12:2c:f1:dc:c2:09:e4:b5:
98:66:76:34:34:45:2e:56:e7:e9:44:c1:7b:68:cb:db:ae:1e:
be:bd:e2:99:91:a5:aa:98:df:0d:48:6c:18:a1:4a:0e:5f:9f:
20:cf:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org