Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147FF990768911EFA60E34A3762E951A.roa
File: 147FF990768911EFA60E34A3762E951A.roa (raw, json)
Hash identifier: cKeMfukZt+TDkSoXCtVk5jfEhepzEr/tZxM4bJFxldY=
Subject key identifier: 47:05:12:E6:F9:B2:34:9D:D5:11:FA:FC:22:9D:05:99:59:FF:85:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147FF990768911EFA60E34A3762E951A.roa
Signing time: Thu 19 Sep 2024 13:14:20 +0000
ROA not before: Thu 19 Sep 2024 13:14:16 +0000
ROA not after: Fri 08 Aug 2025 13:14:16 +0000
asID: 133861
IP address blocks: 154.204.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61589 (0xf095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:14:16 2024 GMT
Not After : Aug 8 13:14:16 2025 GMT
Subject: CN=66ec23ac-16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:37:5a:50:17:3a:85:d2:4f:c4:1a:da:1e:
ca:f4:75:1a:68:97:40:b2:bd:6e:3b:bf:51:f5:82:
9b:15:03:bb:7a:43:61:f2:7f:31:34:6d:28:f9:3d:
d7:4e:f2:3a:05:fd:ba:6c:44:16:df:90:58:a5:70:
18:98:58:04:b9:85:53:7b:bf:a7:ec:c3:9f:ee:f4:
50:23:9f:42:59:e5:40:0c:a1:0b:f6:99:d2:bf:65:
28:f9:4f:f5:e1:12:2b:8d:d5:1f:10:0d:dd:5b:a5:
31:32:f5:d8:24:ef:1c:5d:ff:68:79:fa:87:ed:d5:
f0:28:a7:8f:6d:a7:42:42:b4:56:18:e9:89:76:ca:
0e:36:1e:ec:02:63:e9:81:e0:07:f5:29:7c:23:f9:
c3:63:af:ac:d9:1e:7a:34:c4:21:10:d2:5d:57:8d:
71:c5:9e:ef:b4:41:67:e7:41:65:a9:1c:cd:56:24:
c7:6c:c2:02:65:d8:26:83:7a:19:ee:1c:e2:a2:c2:
6f:9a:f2:51:15:59:8d:48:13:f3:84:0a:da:5b:51:
10:fb:27:c2:97:6e:44:cb:49:98:63:a7:66:d8:34:
be:5a:1a:0e:4b:57:da:c9:b0:8e:0e:e2:12:ca:0e:
65:0e:9d:24:60:21:fc:30:9f:c1:c6:5b:bc:f7:1c:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:12:E6:F9:B2:34:9D:D5:11:FA:FC:22:9D:05:99:59:FF:85:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/147FF990768911EFA60E34A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d7:70:26:c8:84:07:db:6d:3c:dd:58:53:2a:4d:55:84:2e:
36:03:b7:3a:9e:a6:d6:61:26:2d:e9:bb:40:c2:ae:fa:8d:0f:
a2:24:f5:b2:b6:8a:eb:51:3b:0e:03:8a:9e:24:e7:65:27:63:
64:5e:7e:42:14:4b:c8:80:b1:80:c7:21:7a:bf:03:ca:7b:13:
b9:0f:b8:31:00:26:d4:48:9d:60:b2:3f:50:98:83:c0:da:bf:
4a:f7:8b:39:bb:70:bf:10:7a:1c:bc:de:e2:e2:4f:61:de:96:
c4:40:66:14:ed:95:ea:ee:2e:f3:e9:a9:7a:bd:34:22:80:19:
a2:46:e1:37:aa:e7:11:bf:2d:dd:3c:9d:50:65:86:38:dc:80:
f0:e3:23:fe:a8:73:6b:71:c8:0e:89:bd:4d:56:ad:3f:30:d0:
66:26:7b:35:7d:ca:14:cf:7a:bd:9b:50:7c:7b:01:58:f5:00:
4b:3d:90:d1:4b:f5:e2:8b:0c:51:70:03:d4:2f:4e:0f:7f:38:
89:1c:da:f1:bb:61:19:ad:4f:80:ec:8f:46:01:c1:f7:36:d6:
b6:5c:d0:10:7e:ac:15:80:75:85:37:36:75:e6:bf:8c:95:34:
a1:e8:e6:02:69:14:f5:ae:a6:c9:89:c3:b3:da:c9:20:a4:03:
d2:28:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org