Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113B54229D1811EF9C1D8AAE762E951A.roa
File: 113B54229D1811EF9C1D8AAE762E951A.roa (raw, json)
Hash identifier: PeCnQOdDsDkgsl2Pnd/Lk3K+GVRLk1O7klujaxDCAnw=
Subject key identifier: B3:BB:09:1F:E4:1D:03:C3:AC:6A:BB:AB:BF:69:BA:00:C5:2D:38:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01095F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113B54229D1811EF9C1D8AAE762E951A.roa
Signing time: Thu 07 Nov 2024 14:53:37 +0000
ROA not before: Thu 07 Nov 2024 14:53:33 +0000
ROA not after: Wed 11 Dec 2024 14:53:33 +0000
asID: 203020
IP address blocks: 154.209.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67935 (0x1095f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:53:33 2024 GMT
Not After : Dec 11 14:53:33 2024 GMT
Subject: CN=672cd470-0456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:99:2f:11:a7:67:c1:1e:02:59:e2:69:b9:
b6:b4:f3:17:b5:36:04:aa:d9:43:54:6d:5c:ad:8d:
17:a1:df:0d:38:a2:a2:4c:89:39:3e:08:3b:8e:1e:
c2:e1:e0:ec:8a:47:ef:9d:fc:b2:1d:ff:4d:21:f0:
df:85:d2:c1:48:9e:98:fe:7b:ab:10:84:6f:39:f1:
60:cc:a7:5f:b8:74:91:2b:e4:4e:51:0e:ce:79:5b:
3b:27:b8:74:75:82:5e:c4:12:f8:36:a6:ae:39:de:
42:eb:f5:74:cc:bc:e2:98:65:52:92:c8:e4:f6:61:
03:cb:dd:a1:9a:84:43:3d:8a:58:30:32:dc:f9:9f:
ba:3e:bd:f3:8e:f6:ce:75:01:e2:5d:a9:3e:52:6e:
97:9a:0b:d0:75:d9:a8:86:34:11:34:ca:05:50:2a:
76:1e:a5:a9:59:8b:0e:8f:41:e3:66:e7:84:4f:d8:
3e:c4:03:8a:cb:2f:f1:6d:e2:98:79:2b:d4:fb:58:
b6:f7:da:37:18:81:e3:f9:f5:c8:ed:2a:e6:95:38:
f2:5a:b6:2a:fc:d2:3c:4b:e3:06:fc:a8:89:cd:64:
33:5a:30:c4:2f:35:09:99:97:1b:ae:35:74:1f:8b:
4e:69:46:4d:14:d3:a5:e3:c1:74:83:b6:42:c2:cb:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:09:1F:E4:1D:03:C3:AC:6A:BB:AB:BF:69:BA:00:C5:2D:38:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/113B54229D1811EF9C1D8AAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:13:3c:de:4b:ff:b8:26:08:ae:f0:5c:79:a7:c9:2a:3c:95:
cb:66:f9:11:e3:d4:0d:cd:bc:33:fe:a6:ad:91:f5:64:08:a0:
30:74:89:0d:81:65:d0:ac:24:d1:0c:ab:64:8d:0c:c2:d7:f2:
94:be:8a:ce:dc:6d:10:96:dc:86:43:b5:c1:fd:a2:bd:26:09:
62:f8:e2:fd:a0:08:23:85:09:d4:b6:cf:b9:e0:01:63:cc:43:
2e:e4:75:cf:4d:5b:ee:ac:6b:fb:19:2d:14:09:93:57:ae:b8:
97:da:e5:ca:c9:65:8d:5a:39:5d:64:e4:64:b0:f2:2a:e7:b9:
4d:e3:a1:db:a8:aa:54:da:d0:ca:37:16:fb:81:c7:92:47:66:
00:32:c6:93:57:e9:f9:0e:10:68:41:d1:ed:44:5e:aa:3d:1c:
56:0a:a4:3b:d9:69:d5:2a:f3:ea:70:ba:1b:38:dc:ba:d5:ca:
40:09:57:f0:d0:36:a0:e7:9b:71:5b:a4:1b:f9:1d:b5:74:95:
1e:22:22:ae:b7:79:69:5a:64:b4:11:44:ab:41:8c:65:f4:b4:
ca:c8:ce:ce:e2:96:2b:a9:ec:24:7a:f5:b3:c2:b1:f4:2d:e6:
3f:6d:2a:4b:e9:e4:0e:a0:0c:d3:2a:88:14:08:06:29:f9:39:
30:1f:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:54 2024 by rpki-client on console-ams.rpki-client.org