Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0957FE1E5411EFBF721DF17CDC24C2.roa
File: 1F0957FE1E5411EFBF721DF17CDC24C2.roa (raw, json)
Hash identifier: pMI4DELHMoa1/16QR9GOybmIhJgdFcPxQn+PP8zccFM=
Subject key identifier: AF:32:9C:6D:AD:0B:D3:35:F6:D8:2F:F9:31:EB:68:FA:D0:52:0E:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0957FE1E5411EFBF721DF17CDC24C2.roa
Signing time: Thu 30 May 2024 07:13:32 +0000
ROA not before: Thu 30 May 2024 07:13:28 +0000
ROA not after: Sun 26 Jan 2025 07:13:28 +0000
asID: 28087
IP address blocks: 154.196.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48140 (0xbc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 07:13:28 2024 GMT
Not After : Jan 26 07:13:28 2025 GMT
Subject: CN=6658271c-b33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:7d:d3:dd:92:89:74:7f:2e:df:43:4e:1c:
d6:0c:3c:c0:6a:da:a5:ff:66:1b:63:56:f9:36:a6:
8a:6e:75:fe:50:47:9d:7f:26:cd:fc:fe:cf:33:71:
c5:2c:a0:70:b7:ab:d9:46:58:2d:d3:74:f2:6a:d2:
79:a2:4c:c7:a4:98:30:1b:b3:ac:d0:3a:89:0b:57:
93:8a:84:44:18:c4:d1:dd:15:8f:c2:75:65:df:8c:
f6:e9:5e:b8:10:7e:45:e2:db:37:fb:71:18:66:ce:
c6:20:ad:09:a8:8f:ac:af:d4:19:95:36:d1:13:47:
18:05:4d:32:7d:5f:1e:2c:1d:8d:a6:6d:01:bc:9e:
88:5c:3a:32:fa:f0:73:33:55:b3:2c:e6:82:a9:bd:
10:56:33:18:2f:ef:8b:e1:0e:a8:3a:cc:ff:da:b5:
24:37:34:2f:d5:49:d8:cf:b1:c0:54:2d:ab:51:57:
42:40:ee:c4:c3:74:fb:af:9c:27:24:1d:87:b8:23:
9e:84:09:49:5a:9d:3a:12:e6:cd:b0:f4:65:9c:0d:
5a:e8:05:01:87:cf:00:13:6a:c3:ee:bd:3e:71:67:
62:d4:6e:88:07:14:b8:be:92:ed:2c:7b:7c:6c:3b:
50:44:0e:90:76:d6:53:61:9d:4f:b1:59:c8:d7:d0:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:9C:6D:AD:0B:D3:35:F6:D8:2F:F9:31:EB:68:FA:D0:52:0E:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0957FE1E5411EFBF721DF17CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:88:2b:6c:9a:c2:45:74:f5:99:7b:d3:d1:a1:f4:f9:10:3d:
35:b9:0b:26:ed:3c:75:6f:5e:ff:38:87:b3:67:85:14:44:5c:
08:61:54:a0:fb:0c:ec:ca:06:89:0e:1b:fc:f4:a0:04:de:79:
2e:ce:6c:fe:a0:b4:71:77:90:1a:f6:fb:85:5a:a6:8c:9d:f5:
fb:73:50:14:44:9b:d6:d1:03:b9:d0:4e:6e:50:25:8b:97:ee:
ce:5a:c5:e2:ee:10:82:26:35:6b:a5:1e:7d:5f:da:74:d1:02:
c7:d3:be:81:30:b4:ed:f1:a9:3a:bd:8d:fc:88:26:e9:98:89:
7c:7d:86:0a:78:49:5f:4c:22:a0:99:e8:5e:7b:9e:82:62:ac:
6d:c2:df:f1:73:7f:54:65:ab:7f:bf:ef:02:27:e4:39:ba:87:
0d:78:4d:94:9c:ae:69:37:33:a2:59:f1:98:89:2a:0f:ca:49:
ef:d4:b0:aa:94:e4:85:09:4c:6a:09:41:38:41:5e:14:38:a9:
b2:65:fc:52:44:80:28:28:db:e0:07:ea:3f:71:90:30:d8:60:
b2:a0:54:a6:cc:44:04:38:9e:be:a6:c1:07:de:3b:cb:d3:9f:
1c:db:22:ad:ee:b0:69:12:2f:8f:db:f0:48:7f:cb:e0:0f:1e:
ff:3b:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org