Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E87C96EA8E311EF847B4489762E951A.roa
File: 0E87C96EA8E311EF847B4489762E951A.roa (raw, json)
Hash identifier: 0z01r84Y79sx26OpHf3VLRaoAGvMKt7H6aqZ6W/kIbE=
Subject key identifier: 9E:5A:CD:ED:31:8D:08:D1:39:7D:CD:48:62:54:10:86:63:4F:D3:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E87C96EA8E311EF847B4489762E951A.roa
Signing time: Fri 22 Nov 2024 15:04:23 +0000
ROA not before: Fri 22 Nov 2024 15:04:19 +0000
ROA not after: Tue 03 Dec 2024 15:04:19 +0000
asID: 62240
IP address blocks: 154.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69803 (0x110ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:04:19 2024 GMT
Not After : Dec 3 15:04:19 2024 GMT
Subject: CN=67409d77-de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:47:2b:09:ea:c6:17:da:3c:de:39:68:f1:
11:34:b9:20:c0:bb:39:fc:db:78:8f:b6:45:77:a0:
2f:37:73:3b:37:4d:80:69:e8:d7:ca:7e:62:67:92:
2b:dc:36:60:13:0b:ce:ae:8b:65:81:ce:de:c0:76:
8f:6c:d1:32:d8:89:2c:d1:9b:34:72:e8:07:64:3a:
48:a3:62:46:89:a8:e6:41:18:e0:46:76:a5:eb:1c:
ed:df:82:15:e2:3d:68:ff:c4:ec:61:b4:55:bb:ac:
f8:6e:01:fc:f3:3b:c7:d4:31:9b:c3:54:dd:5f:08:
d3:8f:bb:d1:78:cf:a1:78:19:91:b5:05:4d:b0:dc:
5d:19:88:55:8d:7a:da:d7:fd:12:30:64:1a:66:7c:
38:63:80:80:5e:09:b2:4e:35:77:5e:6d:b4:97:be:
51:ac:ec:db:0c:0e:8e:3c:e6:21:96:17:65:80:ae:
ee:72:bb:17:49:35:ff:76:21:91:3d:dc:90:0f:81:
57:4f:7e:e2:4a:0f:4e:6c:e3:eb:73:52:a4:5f:27:
ad:dd:26:22:9a:7d:a7:ed:9e:c2:38:b2:01:8d:f4:
2e:20:af:88:51:be:ff:d7:b9:42:78:f0:34:07:fd:
e9:b4:6b:b4:7d:ad:53:0d:9a:8d:b2:18:56:ea:99:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:CD:ED:31:8D:08:D1:39:7D:CD:48:62:54:10:86:63:4F:D3:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E87C96EA8E311EF847B4489762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.87.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f2:7a:8b:83:f7:0a:4e:6f:49:5b:42:02:45:50:10:32:77:
0d:1e:bc:79:1e:8a:db:52:9e:f1:27:18:ca:8a:0c:64:ee:34:
b4:e0:9e:23:c1:ce:0a:7b:4f:14:1f:74:27:41:29:b5:05:31:
95:69:0f:a0:12:42:14:6e:cf:bf:5c:39:58:d8:39:39:e9:f8:
e6:79:26:61:a0:01:60:f9:34:41:ed:33:a1:a0:75:b8:7d:71:
80:9c:12:00:e0:bc:55:bc:3e:1c:a1:1e:a7:9b:c7:8c:8e:5a:
24:7b:59:f1:7c:77:ac:0d:b3:74:b3:d7:c7:70:39:98:bd:db:
73:58:3f:4a:8b:09:ee:54:f9:ba:d9:d2:76:e9:b3:cc:70:19:
04:32:5d:48:b2:0e:40:e7:26:a1:c3:17:70:f5:55:fd:b8:13:
5e:2c:5d:24:74:79:56:97:04:7d:dd:00:fc:83:64:f8:60:74:
c6:f6:d1:8b:b1:e9:d0:fe:2a:77:85:d7:4a:3c:db:33:a7:30:
5f:0c:d9:2a:26:bc:0d:9f:f9:2c:aa:b4:19:98:14:bb:4c:f2:
f1:19:c2:e6:91:6d:08:ce:3c:7d:83:85:28:09:f2:2c:bb:ed:
7e:75:79:70:c0:ed:73:5f:64:fe:cf:0b:2d:b8:c2:1a:a9:0e:
b5:ee:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:55 2024 by rpki-client on console-ams.rpki-client.org