Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B86603C736611EFA0875FBB762E951A.roa
File: 2B86603C736611EFA0875FBB762E951A.roa (raw, json)
Hash identifier: jVg88QxXNYqFSSli8KkhWX296DaIzvkP+455qVaXSaw=
Subject key identifier: FA:B9:B2:C3:AB:70:9C:1E:6E:AF:F8:FF:80:D9:7A:15:6B:75:E2:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B86603C736611EFA0875FBB762E951A.roa
Signing time: Sun 15 Sep 2024 13:26:53 +0000
ROA not before: Sun 15 Sep 2024 13:26:49 +0000
ROA not after: Sat 30 Nov 2024 13:26:49 +0000
asID: 142403
IP address blocks: 154.209.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61198 (0xef0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:26:49 2024 GMT
Not After : Nov 30 13:26:49 2024 GMT
Subject: CN=66e6e09c-8488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:e3:f9:7b:ff:67:50:48:fb:4f:7e:6d:8b:
2d:b4:f5:28:70:8f:38:6f:3f:5f:a4:f6:d6:09:d0:
19:55:09:c7:be:dc:1b:50:28:4f:81:4b:fe:57:e7:
01:67:18:b0:19:23:36:9b:25:66:08:78:8c:e8:e3:
ed:ee:0a:8f:56:f0:8d:80:3e:bb:05:a6:1a:67:9f:
b5:c4:c0:61:70:84:cc:b2:6b:52:bf:36:c2:c3:2c:
c6:90:4f:17:20:76:18:ac:d2:a6:42:8e:2a:c5:df:
54:eb:f5:e6:32:f2:68:94:ec:85:7c:dc:f5:34:8e:
a4:78:75:59:ba:ec:77:b6:7a:ee:80:02:42:0b:96:
f9:a4:7e:a4:dc:38:96:40:35:cc:62:ab:68:54:c2:
8f:b2:17:0e:ab:81:3b:64:ff:ba:0c:c7:28:47:4e:
fa:bf:a0:31:64:43:6e:0c:bf:39:78:6a:70:d7:3c:
d3:6a:60:2b:b9:11:70:64:55:10:99:cc:72:40:c1:
8f:11:64:9d:97:3b:78:c5:85:7b:eb:51:72:29:b6:
53:4e:a2:2c:5d:2c:47:ca:98:72:95:47:0a:4a:d1:
b9:60:26:09:4d:dc:f0:68:b9:03:31:e3:fe:c2:7d:
d1:0d:ca:79:2c:8a:8f:9b:e2:b0:a9:e7:2b:57:b0:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:B2:C3:AB:70:9C:1E:6E:AF:F8:FF:80:D9:7A:15:6B:75:E2:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B86603C736611EFA0875FBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.5.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a9:72:40:84:e6:0a:6c:95:f0:8d:b1:83:8d:7c:ff:66:ba:
cd:23:f2:51:0a:e9:97:13:df:58:43:51:85:b8:a3:00:e4:7a:
df:b3:de:96:34:21:64:a9:4f:e8:2f:36:57:38:2b:a7:b0:bd:
40:84:c3:30:89:58:9e:af:36:c8:0d:99:b7:7f:c0:a1:d9:22:
cd:4c:5e:8a:6e:d4:5c:3a:88:a2:02:06:f9:48:55:44:0c:b5:
cd:2f:b5:26:03:5c:07:5a:c1:62:ef:3a:95:97:85:1a:d2:25:
8a:80:75:36:4f:14:b9:49:17:6b:3a:f8:36:69:f4:94:dc:08:
d3:7a:ee:e1:f7:8d:a8:4b:2a:89:36:f1:69:1d:58:a5:51:9e:
93:de:00:67:3c:eb:e1:57:0a:b4:83:cf:2d:aa:3e:ab:15:2f:
97:0e:ea:77:29:d4:64:4c:a1:0c:71:3e:58:f3:2a:2a:9c:7d:
e1:58:58:a0:28:34:bc:02:0a:d0:97:75:99:5a:33:2f:cf:78:
eb:c0:ed:9a:f0:4a:74:4c:3c:25:17:ac:ce:d8:4e:4d:7a:3d:
b9:57:47:b2:b7:b9:1f:ac:bd:8b:bb:18:2e:38:a6:c5:36:d6:
d1:59:a9:29:d5:21:c2:d9:0f:69:db:92:40:2e:a7:50:19:db:
38:65:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org