Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128410B2951111EF8F651F8D762E951A.roa
File: 128410B2951111EF8F651F8D762E951A.roa (raw, json)
Hash identifier: np0SW1dfdhsyMQKINGMAlTwwXpNezUF0lP1ksSOE+hA=
Subject key identifier: 82:0F:E2:4C:6D:0C:BA:6B:CE:88:AB:09:EC:3A:33:7B:2D:4D:70:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128410B2951111EF8F651F8D762E951A.roa
Signing time: Mon 28 Oct 2024 09:43:23 +0000
ROA not before: Mon 28 Oct 2024 09:43:19 +0000
ROA not after: Sat 30 Nov 2024 09:43:19 +0000
asID: 6079
IP address blocks: 154.197.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66249 (0x102c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:43:19 2024 GMT
Not After : Nov 30 09:43:19 2024 GMT
Subject: CN=671f5cbb-8b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:eb:bc:bd:d2:5e:c8:f0:bf:f5:23:78:30:
28:1e:db:fe:21:bc:45:0c:33:62:69:9d:21:81:33:
31:44:2a:07:53:4a:8e:08:b9:f5:73:70:18:fb:d1:
a7:96:6f:24:27:64:12:d3:03:1e:f7:a6:20:40:60:
30:10:31:8b:a0:2c:fb:7e:92:95:6e:ab:ac:5f:3c:
c1:5d:c1:b4:ae:18:58:e8:f0:5d:34:fa:00:3f:61:
cd:5c:c3:34:7a:5b:50:01:66:db:3f:ff:19:a4:50:
22:11:97:a2:ee:3e:dc:d5:11:64:e8:1c:fd:eb:06:
5c:d4:8a:2b:4f:0d:42:10:6c:96:69:bf:80:bf:6b:
b0:90:d2:41:65:01:ed:cb:22:20:6d:a8:ce:3f:00:
16:07:a9:68:12:59:8c:3c:33:b0:ac:b5:36:ec:a7:
24:bc:83:82:b8:08:83:c3:ce:db:4b:ae:73:8a:c3:
5e:3b:ad:04:42:3c:96:7e:a6:5d:a9:a8:15:d2:04:
19:00:0f:b3:85:f6:af:a0:1c:f7:54:00:86:cd:49:
0d:0e:ed:4d:d8:40:05:fa:5e:0c:d2:df:0f:55:29:
b5:3a:fc:ca:ba:27:fa:73:6f:e6:0d:0f:e2:21:5c:
c5:e3:c1:9d:59:74:23:ba:6a:76:24:b0:5b:21:62:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:E2:4C:6D:0C:BA:6B:CE:88:AB:09:EC:3A:33:7B:2D:4D:70:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128410B2951111EF8F651F8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a6:e5:36:61:69:50:ab:a8:94:39:f3:9d:91:4c:9b:89:3e:
0d:7e:d7:a1:cd:cb:1a:bb:5d:a9:f7:2a:02:4d:6e:74:1f:c8:
8f:75:e2:80:71:8b:a4:46:a8:c9:a0:41:23:e3:38:d1:15:35:
56:9c:05:9a:c9:b0:ca:3c:48:29:1d:1d:f3:cc:e0:a3:d4:90:
41:6c:a4:67:49:33:4e:c7:e4:b8:aa:b3:e5:cb:8e:56:02:eb:
5a:14:99:7d:c0:86:0f:68:c5:93:c3:2d:fb:e0:a8:da:86:8e:
56:22:33:75:c9:a2:80:fe:18:bc:92:8d:f3:ff:eb:30:f0:1d:
c8:4c:92:ab:d4:4e:e6:38:9f:fa:31:e7:04:ab:b9:4b:4b:49:
64:25:2e:29:f7:b4:d2:d5:35:a3:e6:b1:cb:71:05:67:b8:0b:
e4:c9:52:35:bf:8f:d4:fa:16:d2:0f:a1:22:f9:af:92:4f:4d:
0c:69:2c:16:96:cb:cc:44:a8:94:f5:af:a4:1a:d2:3b:e6:bb:
60:4d:cd:0e:a0:9a:3e:30:81:58:59:71:2a:6a:95:a7:28:24:
06:10:bf:b8:11:ed:76:dd:62:bd:96:82:b2:80:13:a3:53:d4:
da:19:a5:fc:70:e6:fe:5f:b7:e9:df:01:42:04:af:a6:af:ba:
91:7c:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org