Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE1F6AEA44111EF9710E064762E951A.roa
File: 1AE1F6AEA44111EF9710E064762E951A.roa (raw, json)
Hash identifier: CmFOErM8PMVT+CligjYmwJWRYu0NXZls6L59quHLDFI=
Subject key identifier: 70:B0:42:CD:81:FA:92:FC:5F:20:6A:66:68:DF:FD:94:96:6F:2B:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE1F6AEA44111EF9710E064762E951A.roa
Signing time: Sat 16 Nov 2024 17:35:00 +0000
ROA not before: Sat 16 Nov 2024 17:34:57 +0000
ROA not after: Sun 22 Dec 2024 17:34:57 +0000
asID: 18779
IP address blocks: 154.203.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69055 (0x10dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:34:57 2024 GMT
Not After : Dec 22 17:34:57 2024 GMT
Subject: CN=6738d7c4-f136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:98:e0:ce:d2:a2:1f:a7:f0:4e:e8:be:e0:
71:85:84:2f:49:9e:e7:89:c1:f5:eb:67:05:52:e1:
f0:e6:71:95:dc:e7:87:a5:e2:f1:41:d2:da:41:ce:
dd:2c:4b:c3:a8:32:61:e0:fe:61:91:fa:87:f7:7a:
6b:ed:5c:3f:ec:1c:2a:b9:a1:c0:0c:0a:f6:6b:86:
f2:dd:d5:10:7a:44:dd:cf:c3:e9:24:f1:2b:09:84:
41:8a:9c:b6:26:e7:d7:ef:57:b6:96:d9:55:77:38:
8f:6d:cf:cd:3a:4a:95:79:9f:29:fb:00:9a:41:3b:
73:8d:32:70:63:70:96:9c:ec:b0:36:f4:d2:78:6f:
13:50:bc:69:0b:9e:57:62:d4:9e:14:af:a3:41:40:
86:8f:06:f9:b0:c0:04:1d:8c:85:69:33:51:98:21:
e2:d7:2f:ac:6b:37:0c:99:1e:91:ba:7c:22:5d:bd:
38:d1:60:a3:b0:33:0a:9a:3e:ed:2a:9f:c2:b5:ca:
6e:23:da:28:15:aa:10:05:48:a1:1b:62:83:21:d9:
28:c1:c4:97:51:0c:f7:c3:6f:35:10:02:3e:28:07:
7a:35:8d:87:e3:31:d6:14:0e:63:ea:c9:d6:0f:4c:
48:95:70:57:87:ff:78:9b:ce:5b:05:41:14:1e:45:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:42:CD:81:FA:92:FC:5F:20:6A:66:68:DF:FD:94:96:6F:2B:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE1F6AEA44111EF9710E064762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.51.0/24
Signature Algorithm: sha256WithRSAEncryption
15:95:07:48:7e:95:9c:29:ba:4c:e8:12:35:a3:cb:3f:8a:1c:
9f:80:28:8f:15:30:e6:ef:82:90:e7:ae:e9:e0:bd:7d:03:eb:
d4:9e:3d:88:7f:71:26:f0:89:53:69:bc:9e:f0:23:99:8a:89:
4e:06:3e:4f:ed:24:72:3d:55:7e:bb:75:4f:b0:c7:05:50:19:
90:77:fa:3e:68:2e:a6:31:10:fe:f8:af:24:87:04:f5:a4:96:
40:24:de:84:c0:55:18:a4:12:13:e6:47:0c:4c:b6:ff:63:b2:
70:e6:eb:f1:f5:76:da:79:df:50:41:31:36:dd:f2:1a:49:e7:
6c:d8:0b:e7:d6:63:2c:cf:9b:39:ad:eb:19:02:0a:37:c2:e7:
a6:ed:49:85:e0:c2:f6:f8:be:9a:b9:60:9c:a2:3a:cd:21:3f:
30:d7:02:a1:90:42:4f:5c:6f:a9:80:2d:cb:69:f8:03:6c:58:
87:5a:73:ed:03:08:c4:ea:f1:e3:7c:b6:ad:a5:a8:0e:b0:b4:
30:64:e0:e5:75:a5:e2:93:a6:5d:c9:9b:5f:7e:59:8a:06:80:
db:b1:4d:4e:a7:45:fc:51:82:9c:0b:f5:fe:f1:71:e7:bf:fc:
7a:f1:d0:4e:f6:3b:71:b6:0e:c3:60:dd:14:3d:16:4a:0d:70:
37:4d:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:32 2024 by rpki-client on console-ams.rpki-client.org