Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C78027B1F11EFB303D791762E951A.roa
File: 1C9C78027B1F11EFB303D791762E951A.roa (raw, json)
Hash identifier: KHqXBJSvIJL51N+AuWjnVsQLYjvH3ANkXlmf0wRH3jI=
Subject key identifier: 44:AE:5B:EE:F3:94:20:82:F8:29:CC:EE:AA:6D:22:99:B8:7B:84:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F336
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C78027B1F11EFB303D791762E951A.roa
Signing time: Wed 25 Sep 2024 09:18:23 +0000
ROA not before: Wed 25 Sep 2024 09:18:19 +0000
ROA not after: Wed 18 Dec 2024 09:18:19 +0000
asID: 47890
IP address blocks: 154.214.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62262 (0xf336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:18:19 2024 GMT
Not After : Dec 18 09:18:19 2024 GMT
Subject: CN=66f3d55e-4e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:5d:c1:30:81:19:44:bc:62:22:30:50:8d:
fe:9a:bf:4c:d2:b9:48:d1:a2:ca:c6:8d:54:0f:a9:
75:b3:e4:9d:34:c6:53:e5:a6:55:94:38:4a:82:8a:
7e:ef:64:80:73:bf:83:97:c5:28:e5:53:a2:11:0f:
01:65:d1:12:75:2f:87:df:ee:0a:ea:cb:e6:7e:a4:
11:9c:3f:e7:ac:15:07:89:e2:2b:28:22:57:39:78:
2a:41:83:fa:bf:ef:06:67:87:9e:c7:0a:72:58:31:
14:cf:b6:1b:ae:d7:cd:85:c8:8e:67:95:48:98:e8:
a1:07:4d:75:60:a5:f5:ce:c2:d5:37:4f:c8:21:aa:
8b:51:9e:bc:a4:2c:03:c3:dc:c9:2b:87:20:d8:06:
76:1d:86:79:00:b9:e5:ed:ae:d8:58:49:e1:b4:3c:
05:a3:88:fe:17:0a:86:53:29:19:23:2b:b7:62:91:
eb:93:6e:0f:08:ae:af:00:1c:65:31:09:bb:86:fd:
47:3e:38:4f:76:a5:b3:ba:a7:e6:22:74:ce:43:7d:
8b:10:0d:4e:e0:a5:5a:99:09:65:19:02:0b:e5:cf:
a8:04:02:43:71:f3:cb:cd:59:66:14:7e:5b:0c:9b:
69:14:86:c3:08:97:78:4b:17:c1:c5:2f:3d:d6:bd:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:5B:EE:F3:94:20:82:F8:29:CC:EE:AA:6D:22:99:B8:7B:84:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C78027B1F11EFB303D791762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.213.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:9d:39:32:b9:ca:d8:c0:de:6d:17:5a:97:bb:d8:b5:64:
67:ec:08:50:49:9d:d7:7f:85:e6:e1:40:27:ed:5d:40:3b:32:
b2:b0:31:e9:18:9f:35:e2:e5:46:c8:0e:63:76:5e:ed:af:c2:
91:bf:2f:ef:c7:4d:9c:3f:11:34:8f:98:a8:dd:7e:57:03:0b:
44:e7:8e:1f:42:d8:7a:93:f7:99:58:7e:10:08:22:5e:fa:20:
d0:70:60:4b:42:5c:8d:78:3d:6c:de:0e:2a:c9:16:d8:68:d9:
8e:36:54:c5:f5:fb:5a:79:a5:b0:6b:80:32:e5:e4:0b:eb:95:
8f:24:d8:86:61:35:9a:ef:ee:80:f7:18:a8:5f:e0:71:51:70:
f5:fa:46:75:a2:6f:c4:db:59:df:a5:12:8e:4a:d4:1e:d5:d0:
0f:cc:42:5b:60:ca:aa:9c:5f:07:e4:02:87:69:2e:61:6c:cf:
c0:d6:f9:f9:35:e8:15:de:11:fe:e4:d3:e7:8d:b0:28:3f:ea:
05:93:56:e9:97:36:0e:82:3b:d9:94:0c:95:05:a9:8b:4b:31:
76:82:21:05:1c:af:d8:cb:e7:c1:00:30:87:f3:ce:dc:d7:f2:
84:58:6b:ca:c0:b8:3b:64:c7:12:b5:c0:dd:8a:f6:76:45:95:
0e:b4:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:43 2024 by rpki-client on console-ams.rpki-client.org