Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1236F406B34B11EE9702227D775412E6.roa
File: 1236F406B34B11EE9702227D775412E6.roa (raw, json)
Hash identifier: d/D+gF9G2hFysR7QIiPOuA9G8MqH2jOJT5AY50w9/mw=
Subject key identifier: 3B:98:04:71:54:30:FA:D9:5C:61:F9:FD:D5:3D:51:BA:C2:6B:A6:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1236F406B34B11EE9702227D775412E6.roa
Signing time: Mon 15 Jan 2024 02:09:10 +0000
ROA not before: Mon 15 Jan 2024 02:09:07 +0000
ROA not after: Fri 13 Dec 2024 02:09:07 +0000
asID: 8796
IP address blocks: 154.205.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30032 (0x7550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 02:09:07 2024 GMT
Not After : Dec 13 02:09:07 2024 GMT
Subject: CN=65a493c6-2682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:bb:0a:b9:20:ec:0a:4c:39:2f:82:e8:e5:
d1:27:18:19:e6:f3:bd:8e:8e:66:1a:c8:d6:b5:37:
24:97:b6:bd:75:4e:2d:eb:a1:f4:dd:3a:c4:b1:bb:
e8:68:6c:8d:36:e6:b4:b5:a5:fd:72:ea:1a:b7:1c:
ab:a7:e5:3a:8c:1f:47:30:b9:d6:7a:02:c9:42:1d:
6b:b2:89:de:a0:e7:55:28:5c:13:c1:b5:bc:bf:5f:
66:9d:71:18:38:14:56:72:b8:51:da:a0:ec:0b:61:
7c:ff:57:70:96:db:1b:82:be:35:89:e8:8a:0c:43:
dc:a0:a2:9f:5d:50:45:37:01:90:c7:a1:68:53:e0:
da:9b:e3:d1:0c:2a:35:94:3b:17:7c:0e:f5:72:a0:
cb:eb:3b:ca:d1:c1:4a:85:09:84:3e:b1:67:6b:21:
7f:7c:bb:a7:6b:63:77:55:96:de:a4:eb:51:c4:d8:
8e:4d:b5:f6:a3:4b:78:0c:9c:2d:3d:09:87:b7:3a:
14:8b:9d:ac:0e:ea:60:ec:42:8c:b2:4a:85:d8:e6:
bb:d8:bd:a1:30:c4:f0:dc:c6:c9:75:03:e3:11:43:
50:81:c1:11:3c:87:78:f5:8b:15:06:a1:15:f7:9a:
89:f5:4e:ff:77:84:86:93:29:af:b2:a0:2d:5f:e3:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:04:71:54:30:FA:D9:5C:61:F9:FD:D5:3D:51:BA:C2:6B:A6:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1236F406B34B11EE9702227D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:69:93:66:b0:a4:44:a2:bd:ba:a8:71:e1:9c:d5:6e:8b:07:
5e:9b:7e:7e:fa:d1:0c:62:e1:25:49:6d:41:bc:ef:3a:53:21:
0a:25:de:c5:cd:9b:b7:0c:3a:09:71:e5:6b:cd:41:db:4a:33:
2d:d8:ce:a5:d4:f0:ae:d6:2b:7a:81:8c:54:f5:59:41:ce:b9:
c6:69:8b:bf:b9:98:43:a9:b4:89:8e:cb:4f:3f:3e:94:71:03:
b2:e6:02:7f:bf:28:68:f7:a9:8b:76:26:3a:e3:3d:9b:c8:1c:
da:67:91:9d:ce:47:28:d3:b6:25:5c:08:13:cf:f5:9b:27:5d:
09:b4:b2:ed:36:08:16:9e:09:42:f7:9b:b8:c6:b0:d6:ac:e6:
70:10:ec:ce:1d:a4:29:d0:a1:ff:1a:84:e6:64:61:b4:1b:ba:
d3:ca:23:a4:bb:a1:cb:a7:29:7c:b8:b6:fb:41:40:a1:9a:ff:
42:39:f3:79:cb:3e:a4:88:82:63:c5:92:8c:d7:8c:b4:11:c9:
5e:1c:29:f1:45:58:31:3a:dc:60:08:3c:1c:1b:32:c8:0e:82:
5b:a7:a2:8c:ff:31:4f:5d:9a:5e:44:ff:60:11:bd:a7:a8:cf:
f3:bb:34:25:fa:38:1a:93:3a:72:d8:ff:01:ba:85:18:e9:5f:
c8:61:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org