Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21419D4CA8EC11EFA6F3AB42762E951A.roa
File: 21419D4CA8EC11EFA6F3AB42762E951A.roa (raw, json)
Hash identifier: vXBoLyZCMSiig7IHAWxrYS4Y11oDSCHNd1nNd45TEys=
Subject key identifier: 17:14:AB:86:9B:5C:49:21:96:5E:35:92:89:B6:A6:AD:6C:BD:A5:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21419D4CA8EC11EFA6F3AB42762E951A.roa
Signing time: Fri 22 Nov 2024 16:09:20 +0000
ROA not before: Fri 22 Nov 2024 16:09:16 +0000
ROA not after: Tue 03 Dec 2024 16:09:16 +0000
asID: 62240
IP address blocks: 154.195.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69913 (0x11119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:09:16 2024 GMT
Not After : Dec 3 16:09:16 2024 GMT
Subject: CN=6740acaf-418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:1f:39:0f:ad:53:86:86:30:1f:53:61:0f:
f6:66:92:35:2d:e2:22:ad:b1:a8:89:c5:88:4d:23:
bf:1c:25:e3:dc:ac:19:d0:ca:12:f6:ae:8c:34:64:
1a:86:c5:3e:79:b0:69:0d:ef:ae:ca:0c:f1:39:63:
cf:86:46:bf:4c:77:1a:e1:ad:02:55:e1:60:f1:f0:
c1:54:09:50:46:91:41:af:21:6b:97:ac:83:a2:f3:
2e:ad:f9:dd:a3:53:04:cd:f8:0e:5e:ce:4e:46:9f:
21:51:f0:d8:c8:2e:eb:e5:24:39:c9:48:c9:82:8a:
c8:17:9d:87:0c:10:3f:09:21:c7:3e:19:ae:bb:dc:
0b:f6:e6:eb:da:9a:58:a6:18:30:6d:4b:4d:43:81:
e6:bc:83:af:0e:77:00:fa:76:0d:c2:8a:fa:07:a4:
50:04:8e:33:54:c6:8b:0e:a0:60:4b:0c:a6:ae:50:
dd:66:2b:c9:42:cc:22:85:7e:13:88:1c:34:5d:e4:
e0:3f:93:16:b1:38:26:59:0d:a7:92:4c:a4:7c:34:
69:0c:8b:dd:41:52:c5:1f:c0:35:71:eb:7b:e9:16:
c5:62:20:66:3b:2c:58:a0:4a:42:fc:f2:b8:5e:d5:
5e:33:d9:b6:4a:fe:d9:e0:af:a2:9b:52:2e:26:1e:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:AB:86:9B:5C:49:21:96:5E:35:92:89:B6:A6:AD:6C:BD:A5:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21419D4CA8EC11EFA6F3AB42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.135.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1b:ef:b9:4d:e6:a3:b0:e5:ae:ef:7c:a0:78:a2:78:e7:89:
0c:9d:69:27:25:5b:6c:3d:78:29:2f:18:c6:7d:8e:26:f8:19:
5b:54:fe:0a:0b:bd:b9:b7:ad:79:b4:19:15:ae:c4:d7:41:48:
2d:77:36:bd:f1:f9:a7:44:17:36:5d:1a:92:57:81:cd:e9:3a:
70:8b:ff:36:5f:0d:64:09:17:ed:99:77:a7:02:59:dd:96:b1:
fc:76:fb:eb:f7:41:2e:10:ea:8c:d3:1d:46:94:f6:d9:ae:3c:
0c:1a:86:1f:4f:4e:a2:a5:8a:4e:a3:1d:92:52:58:52:5d:ea:
e9:a0:47:37:1c:2c:01:92:eb:08:a4:29:94:60:55:88:42:65:
21:81:61:cd:89:4c:1f:bd:46:35:37:2c:2e:b0:f1:de:f2:7f:
0a:ee:ea:2d:b8:01:90:90:a4:00:39:8e:19:b9:be:78:05:79:
b7:72:65:25:b7:87:8f:27:86:de:e7:0a:92:45:48:2c:d3:b2:
8f:36:f8:51:84:ce:4c:50:a8:ef:26:35:d0:17:70:62:66:b3:
ec:19:d0:27:86:f2:98:f7:cf:cc:78:ea:9f:fb:e1:9c:50:c6:
02:14:11:e4:9e:a0:1a:28:ef:ea:16:98:5b:42:d9:85:6f:3d:
88:72:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org