Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29980636A8EA11EFB4BE6EB6762E951A.roa
File: 29980636A8EA11EFB4BE6EB6762E951A.roa (raw, json)
Hash identifier: be6z17nzSHKYnyjG7wDmlOdS5IfbHjJAd9+CqTu8oUo=
Subject key identifier: DD:52:D8:0A:13:14:F6:8D:51:AA:8C:9A:BF:30:6D:FE:E4:82:8C:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29980636A8EA11EFB4BE6EB6762E951A.roa
Signing time: Fri 22 Nov 2024 15:55:14 +0000
ROA not before: Fri 22 Nov 2024 15:55:11 +0000
ROA not after: Tue 03 Dec 2024 15:55:11 +0000
asID: 62240
IP address blocks: 154.195.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69889 (0x11101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:55:11 2024 GMT
Not After : Dec 3 15:55:11 2024 GMT
Subject: CN=6740a962-a82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:9f:39:9a:04:ac:23:5b:c3:24:2f:ce:b8:
bd:65:1f:2c:37:dc:ae:99:16:6b:98:14:48:d2:b3:
de:6b:45:e9:fe:8f:85:34:7c:30:7c:36:a1:0b:c2:
1d:83:7e:22:82:b9:ad:4a:6a:08:17:9d:6b:ee:8d:
75:16:40:08:04:df:a7:26:22:bf:bd:0d:0d:14:91:
90:ba:7e:a4:93:77:42:64:9d:4f:52:56:f8:bb:fd:
f6:52:fb:c6:d2:71:be:0e:4e:e2:3d:08:4f:e8:c9:
7b:85:5b:bd:f4:63:b7:3a:ae:83:3b:5f:6b:cb:85:
c2:a9:1b:1b:8f:59:f4:a4:88:d7:24:a7:f7:63:c8:
55:e8:17:30:d1:3d:82:44:c5:db:37:8e:d1:67:e0:
a5:b6:ed:21:67:31:27:08:2f:a4:42:81:59:74:d5:
9c:6c:a3:75:cf:f4:a0:3b:41:fe:ad:90:a1:aa:87:
92:c1:50:8f:9f:01:7b:49:ba:5b:2a:44:cd:a4:4f:
12:17:89:12:9f:e8:a6:7e:48:14:f0:98:95:93:bf:
8d:a7:75:bf:8c:29:58:50:9e:61:ff:c7:9d:a0:73:
0a:8e:de:93:14:df:b4:80:f3:95:88:1f:ac:89:30:
a5:4d:6e:fc:3d:a2:08:ee:bf:3d:53:68:57:7a:e7:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:D8:0A:13:14:F6:8D:51:AA:8C:9A:BF:30:6D:FE:E4:82:8C:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29980636A8EA11EFB4BE6EB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:88:b9:dd:5e:6f:30:11:93:cf:ac:d8:b3:f8:7f:e6:91:15:
29:81:24:3b:44:71:c6:79:a3:1f:c2:26:f6:8d:76:02:6e:a3:
c4:7b:a0:93:8e:1c:88:2e:d7:90:2c:97:21:0d:4a:e7:a5:0b:
6a:58:d2:4e:21:19:11:aa:e1:c6:64:7e:62:7a:94:f1:db:c6:
11:d4:86:39:46:38:16:6a:68:a0:f2:09:f0:ac:6d:ce:c8:f7:
77:ca:41:a2:1f:a1:b9:be:80:07:90:0f:9c:63:5a:72:a7:54:
0b:07:4e:71:61:b0:ff:da:2d:eb:31:cb:e2:a6:25:e5:47:b4:
7a:c1:47:f4:70:a9:f6:e8:15:07:33:b8:78:9e:75:f3:95:12:
d0:4d:59:e1:4b:6b:9b:6a:a3:60:4f:81:91:df:5f:97:11:da:
63:03:fb:78:10:a1:97:52:8e:56:7f:33:3e:0b:40:69:6e:7e:
37:de:91:49:03:c6:f4:64:8a:b6:9a:0a:42:ca:76:db:b2:0d:
5b:bf:96:a9:f8:02:0e:c3:e1:57:b4:11:a9:75:95:d0:69:2e:
3b:cf:17:ff:ff:0b:6a:c7:a1:e8:79:db:97:17:09:1a:11:9d:
be:e5:51:9a:9c:d8:b3:f4:5f:78:84:c4:b7:34:de:b1:13:c5:
9d:12:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:25 2024 by rpki-client on console-fra.rpki-client.org