Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEB8C0766611EFA6D5924C762E951A.roa
File: 1BDEB8C0766611EFA6D5924C762E951A.roa (raw, json)
Hash identifier: mhqUT2L+Si3aKQiWJGzRLczTJ9x3Pefi8mEd4U8ge5w=
Subject key identifier: CB:37:83:6B:E8:30:AC:53:30:8B:7D:28:04:42:7C:1D:E4:7F:2E:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEB8C0766611EFA6D5924C762E951A.roa
Signing time: Thu 19 Sep 2024 09:04:00 +0000
ROA not before: Thu 19 Sep 2024 09:03:57 +0000
ROA not after: Sat 18 Oct 2025 09:03:57 +0000
asID: 136744
IP address blocks: 154.196.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61545 (0xf069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 09:03:57 2024 GMT
Not After : Oct 18 09:03:57 2025 GMT
Subject: CN=66ebe900-111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:77:57:ed:31:c9:49:31:e3:c7:9e:cf:3c:
c8:2f:d2:61:04:a4:12:0c:2b:05:a4:37:15:22:bc:
15:d5:95:8a:d0:77:0e:5a:a5:82:a5:35:b3:4e:a4:
88:e1:0e:7b:e1:a2:f9:51:cc:30:9d:63:f7:18:00:
b3:c3:30:2e:18:d5:cf:92:a6:6b:df:22:9e:0a:37:
84:a7:a3:9f:8f:59:62:d9:b3:d8:e7:20:2e:68:94:
05:5b:f5:cc:63:3c:b3:23:c1:33:e4:ac:16:bd:bd:
5a:e7:42:e5:be:10:fe:75:84:cf:54:05:f2:ce:fa:
f1:e4:97:bc:99:58:0a:0a:5d:4c:b1:90:28:69:b4:
26:f1:9b:52:7d:f3:c3:d1:d5:d9:4c:dd:f7:e0:bf:
4e:ce:39:be:ee:b3:36:36:0a:25:d6:43:77:e8:39:
4e:89:df:90:35:ea:5d:43:b5:63:74:fd:65:4e:fb:
9a:0c:d5:6d:6e:a5:65:d1:da:e7:ea:51:09:02:91:
5c:5e:bd:27:85:3e:84:36:96:38:b6:9a:93:e6:9f:
83:97:7f:77:e2:d4:f9:49:b2:bb:31:35:2f:12:98:
3b:98:cb:4c:20:81:51:cd:65:5b:fe:b7:f1:bf:45:
fd:aa:96:96:72:52:52:ac:fc:13:e8:84:ac:62:10:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:83:6B:E8:30:AC:53:30:8B:7D:28:04:42:7C:1D:E4:7F:2E:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BDEB8C0766611EFA6D5924C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:43:19:37:9c:0f:55:8e:f3:02:70:42:6f:e3:01:57:40:ad:
89:88:98:70:67:50:32:e1:53:7c:87:7b:f5:76:40:b8:f1:5e:
02:6f:14:0d:36:bf:0f:c2:6c:65:ad:ea:20:c4:65:42:01:b8:
fb:1e:98:e7:a0:5a:01:29:ac:ef:5a:36:2c:a3:8b:00:dc:18:
a4:bd:0d:27:3f:28:f2:91:5b:eb:e5:86:7e:66:9b:5c:d0:a4:
33:98:fc:82:7f:c3:45:c6:fb:37:61:be:0e:15:dc:e1:5a:88:
64:e8:49:fb:df:da:23:9b:31:ee:94:b9:47:3c:d3:49:d3:72:
13:b3:3a:71:25:64:88:da:46:81:b0:a9:e2:ed:1f:1c:b9:cf:
d5:93:66:f2:43:0a:29:c4:dd:24:c1:12:12:19:c6:71:33:6f:
3c:e0:f9:b0:47:3c:25:5c:9a:5c:28:87:0d:2d:3b:b6:4d:50:
89:9c:24:5a:3f:1b:1e:a9:84:43:de:6e:1a:65:e5:75:1f:da:
1f:ef:6d:50:54:eb:86:34:e7:95:eb:b1:02:6c:a8:32:fc:8f:
19:f7:f6:76:46:d5:ce:87:16:90:eb:96:51:27:9e:4c:de:5b:
bc:32:d5:09:79:df:e7:e1:c6:68:1f:8c:e0:84:88:68:a7:69:
12:74:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org