Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C26436032BA11EF97C74FA8762E951A.roa
File: 1C26436032BA11EF97C74FA8762E951A.roa (raw, json)
Hash identifier: M085ID+luD4AGkruWTItgYv4Xi4FgPaocbwmrDlXf9w=
Subject key identifier: 72:68:E2:44:6E:7C:D1:E7:A0:D6:44:5B:95:46:64:9B:11:BD:92:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C647
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C26436032BA11EF97C74FA8762E951A.roa
Signing time: Tue 25 Jun 2024 06:13:59 +0000
ROA not before: Tue 25 Jun 2024 06:13:56 +0000
ROA not after: Fri 03 Jan 2025 06:13:56 +0000
asID: 40065
IP address blocks: 154.84.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50759 (0xc647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:13:56 2024 GMT
Not After : Jan 3 06:13:56 2025 GMT
Subject: CN=667a6027-3e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:61:a8:6c:44:8d:dc:38:62:3f:31:8b:e6:
22:b4:43:9d:60:12:2b:10:cb:c3:01:6f:4b:e5:8a:
10:74:eb:50:43:9e:5b:6b:de:27:a0:99:10:fb:00:
a9:2b:a6:02:bb:34:82:b1:3e:f3:9b:2b:eb:66:65:
6d:98:3c:21:c6:d7:7c:ab:90:97:f1:1e:9f:1a:6c:
8c:c2:30:fa:39:e0:44:8a:7b:7d:af:e3:03:6a:c7:
8f:b2:63:d1:91:6a:29:8f:30:a3:5b:4e:76:bf:2b:
b5:72:79:63:49:17:2b:8d:18:1b:d8:31:fa:30:4c:
20:e3:de:e6:fb:ff:cd:d0:88:a1:55:14:29:22:5b:
c6:19:e7:8a:9b:21:e6:e6:22:cf:76:c4:92:15:29:
55:0f:88:88:e2:50:94:f6:64:de:93:ca:c7:56:17:
c1:6e:7d:7c:3c:a4:94:00:32:66:53:ec:f7:e3:97:
a2:8d:11:cf:e6:fd:74:4f:57:fd:5f:1e:fb:7f:b2:
ed:5e:f2:a2:6b:1f:04:d9:f7:83:69:34:45:77:85:
bd:99:f6:e6:de:34:d9:78:ea:d8:3c:03:4b:40:35:
71:17:cb:57:ef:21:e4:1e:ea:19:45:8d:ab:5f:70:
52:05:1c:ed:3e:41:e5:3e:e1:35:07:12:67:18:c9:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:E2:44:6E:7C:D1:E7:A0:D6:44:5B:95:46:64:9B:11:BD:92:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C26436032BA11EF97C74FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:28:04:04:70:0e:5c:71:87:5f:fe:1b:92:3a:a3:8b:f3:89:
47:d0:e1:df:0a:70:15:72:2d:2c:44:11:23:b7:6b:8c:a5:72:
fa:c8:68:52:bd:c6:db:68:01:97:2d:27:9e:85:1f:7d:a2:8d:
a4:9d:56:ad:a2:e4:60:ac:bb:a8:ed:9e:b8:e6:96:66:77:ae:
52:c3:d9:90:5b:f8:fd:ec:22:b8:a4:3a:ef:63:c0:0a:ef:63:
34:2c:97:90:25:23:48:4d:99:41:21:0d:53:ed:2d:c9:33:1c:
2f:69:36:f5:ca:3b:8f:93:e8:04:31:a7:6e:59:5c:22:17:3f:
3d:30:c6:38:05:e9:92:0f:f1:7e:8d:b1:bc:11:19:2f:80:5d:
70:fb:42:3b:fc:b5:b4:b2:32:ab:11:51:8b:96:39:7d:c5:bb:
08:1f:22:9b:fb:10:a9:5c:13:53:6b:54:67:25:c4:14:a8:62:
0d:dc:ae:9a:f1:d5:25:8c:a9:b0:f8:cd:29:61:d4:4c:b6:da:
28:f4:15:c6:58:bc:d2:de:a1:9c:2f:30:19:3c:26:ec:48:4e:
7b:07:de:c2:3a:0e:b6:ff:5e:b7:82:d0:32:04:b9:5e:b4:a3:
92:fa:3e:ac:07:64:e8:fc:05:87:b7:7b:8a:6b:39:4f:ab:c4:
5c:f5:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:23 2024 by rpki-client on console-fra.rpki-client.org