Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13F61B54A9BE11EFA7A10B6A762E951A.roa
File: 13F61B54A9BE11EFA7A10B6A762E951A.roa (raw, json)
Hash identifier: CIr3yVtmYpVYoYwIHVZsWJ5sjUEdrKKA7tRM1rJY8V8=
Subject key identifier: EF:4E:67:71:FB:A1:F3:D0:4B:91:63:83:E3:81:2B:13:01:1F:D6:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13F61B54A9BE11EFA7A10B6A762E951A.roa
Signing time: Sat 23 Nov 2024 17:12:12 +0000
ROA not before: Sat 23 Nov 2024 17:12:07 +0000
ROA not after: Mon 02 Dec 2024 17:12:07 +0000
asID: 44559
IP address blocks: 154.210.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70066 (0x111b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:12:07 2024 GMT
Not After : Dec 2 17:12:07 2024 GMT
Subject: CN=67420ceb-6499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:ad:7c:61:96:c5:e4:49:ce:c6:e3:7d:e0:
28:82:e7:c2:1b:ea:2a:53:97:50:5e:a4:74:a3:92:
f9:23:61:ee:4b:21:d8:24:e3:4d:2d:47:11:26:e5:
4e:0a:75:0c:c6:d0:01:17:4d:78:4d:39:50:5e:38:
c7:a4:f7:c0:d6:17:e1:66:35:22:c8:ee:cf:38:50:
4f:bc:01:6c:b0:56:e2:a2:03:bf:97:3a:31:c8:93:
53:01:d8:02:d1:fb:92:3e:d2:7d:18:01:0b:3d:b9:
0a:99:59:84:93:ed:e5:75:e8:54:f2:1a:58:20:a8:
5a:1b:2e:df:f3:9f:01:db:b9:44:57:b8:79:8c:bf:
00:a0:f9:f5:b2:c6:ac:16:a7:2a:f6:75:b5:b9:d3:
c9:93:48:5b:bc:30:4d:f9:97:c7:f6:b9:28:35:7c:
24:fe:ef:e0:24:b7:74:00:f8:8d:0a:82:4e:03:fb:
d5:cc:eb:3c:13:2a:8a:42:1d:13:a1:95:89:d3:4f:
b7:44:83:57:18:cb:9d:17:8a:69:11:a0:a4:b0:0b:
8f:4c:e8:41:c2:36:6f:87:3d:75:4e:f7:58:3c:b0:
ee:36:6a:ef:88:f6:6b:6f:23:4b:ca:f2:db:52:b4:
43:07:cd:ea:72:af:81:63:ff:bd:94:e3:00:21:bd:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:67:71:FB:A1:F3:D0:4B:91:63:83:E3:81:2B:13:01:1F:D6:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13F61B54A9BE11EFA7A10B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.88.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:29:05:cb:ed:d5:5e:4c:b5:10:88:d5:2d:d5:02:2a:f9:
83:87:1c:8f:7a:4f:f3:0d:c9:1a:8e:ea:fd:a2:e7:52:41:84:
88:08:40:96:3b:31:82:d3:ff:0a:ed:fa:68:10:d8:06:35:50:
f0:b3:c7:da:93:ea:b4:46:5c:e2:86:f5:22:a2:db:4e:f2:6e:
f9:d6:c3:cb:23:7a:25:25:96:0a:c2:3d:c1:21:d3:14:08:66:
2d:c7:29:2e:9f:51:56:39:23:08:96:df:dd:b9:48:c9:12:e2:
0d:13:bc:80:39:8e:e9:9d:ea:e8:64:86:14:7d:dd:76:59:0b:
38:d6:11:71:4a:35:e6:2b:5a:14:30:3c:e5:59:93:e7:f2:ba:
ce:3a:5b:98:11:b5:d2:42:10:47:94:bf:de:7a:d3:78:dc:7a:
a4:95:eb:4c:12:a9:d9:e3:86:97:27:15:e1:af:80:36:5b:c5:
0a:cd:b6:69:38:52:6a:88:76:81:9e:ac:85:1d:bf:a5:a2:04:
71:49:94:ca:5f:42:bd:30:49:a2:bd:03:4f:24:c3:e9:3c:5d:
54:16:f5:da:dc:85:17:7f:68:7c:a8:78:82:3e:57:32:c7:db:
8f:3e:b5:14:c7:6f:6c:ac:1b:f1:ce:97:71:a3:10:41:7c:6f:
0c:ec:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:57 2024 by rpki-client on console-ams.rpki-client.org