Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2340F328AE1E11EEB7C4479F775412E6.roa
File: 2340F328AE1E11EEB7C4479F775412E6.roa (raw, json)
Hash identifier: lF/+Tjjecqp++4L24BvGt2o6T6L6S/cuwvs0HGW5+2g=
Subject key identifier: 0B:45:1E:D5:CD:14:6E:59:44:15:A3:F6:0D:B5:44:99:DC:0A:5B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2340F328AE1E11EEB7C4479F775412E6.roa
Signing time: Mon 08 Jan 2024 12:04:56 +0000
ROA not before: Mon 08 Jan 2024 12:04:52 +0000
ROA not after: Tue 14 Jan 2025 12:04:52 +0000
asID: 138965
IP address blocks: 154.222.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29376 (0x72c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:04:52 2024 GMT
Not After : Jan 14 12:04:52 2025 GMT
Subject: CN=659be4e8-4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:06:11:cd:ad:c4:98:cd:fc:4e:be:4e:17:
18:bd:f9:97:23:db:56:21:62:dd:50:fd:b8:cb:91:
a0:b0:7b:d7:3a:04:8c:27:b9:33:7e:4c:16:e5:bb:
c0:d5:a2:f4:84:16:8f:90:e7:3f:76:de:0a:a4:e9:
58:b2:a1:5d:d4:66:3d:ed:a4:d4:58:73:1d:43:65:
54:cb:98:eb:d6:2c:5d:59:0b:fb:9a:44:e5:aa:cd:
3c:b6:6e:85:51:a6:9f:ed:ba:57:ad:a0:2e:0e:87:
a3:ec:e7:0e:77:db:9a:57:4c:19:66:51:bf:eb:ed:
bf:df:4a:e5:f9:fc:21:64:af:6a:9c:34:ad:1e:24:
ae:51:5a:52:cf:6d:e8:d4:af:ec:15:36:5f:26:17:
0f:cf:95:5b:ae:13:4b:b0:8e:ca:af:e6:57:5b:9a:
a3:79:c3:34:1d:b2:48:2e:1e:4c:2b:09:fa:6a:97:
a7:de:41:7c:b2:88:9b:e0:a6:e5:0c:69:de:5e:7e:
2d:d6:70:9c:07:c1:3c:00:90:29:af:ca:f7:32:c1:
2c:4d:74:a8:b1:61:62:2a:10:e3:ed:93:ea:fe:83:
98:4a:1d:a2:ef:d5:f3:87:e7:43:15:ee:68:cf:3e:
1a:d7:9f:54:40:11:04:74:c0:1b:9f:91:c5:cc:4c:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:1E:D5:CD:14:6E:59:44:15:A3:F6:0D:B5:44:99:DC:0A:5B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2340F328AE1E11EEB7C4479F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1f:2f:8f:9b:fd:41:05:bc:de:1c:50:5e:6d:46:7a:f3:bd:
5d:11:91:f6:0c:2a:61:d0:70:ae:8e:23:4c:6c:f1:77:ce:39:
23:e3:a7:a4:96:ad:ad:46:bb:60:66:9c:f1:4f:d9:e2:55:12:
64:b5:93:53:02:62:74:6e:4b:8b:54:22:bd:f6:99:29:ae:37:
31:ce:81:a7:70:35:98:7a:17:59:30:2c:01:8c:0c:0b:0b:5d:
0f:13:83:ea:9a:2e:c4:ec:8a:15:cb:c5:43:3c:eb:33:d9:31:
44:57:b2:a4:da:83:0d:0c:8e:55:b0:16:42:11:b7:a9:07:67:
80:c3:4d:c8:79:cd:b1:f7:ea:3f:20:64:40:25:10:94:e4:a1:
9a:f0:69:06:15:9e:35:20:e7:a7:88:cf:33:2b:20:83:92:b4:
da:45:7d:e6:df:eb:83:7c:1e:24:0a:38:65:10:7c:c7:fd:75:
0f:96:9e:a4:47:c4:45:d7:45:c4:68:25:dd:b5:82:77:5b:73:
ea:f6:83:19:64:21:13:8d:f7:7c:92:16:db:33:af:c5:ac:56:
2c:c3:85:35:32:f9:aa:5c:d1:02:17:40:fc:02:b4:a6:42:51:
30:5e:c6:85:d1:64:c2:2d:97:c6:8c:20:47:9b:9a:8e:1f:4b:
20:5d:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org