Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3031105871A111EF96A2936A762E951A.roa
File: 3031105871A111EF96A2936A762E951A.roa (raw, json)
Hash identifier: jn0OA2jXSpx0bE1AHD/MHDRsDahgkx762PUvwkKUmwU=
Subject key identifier: 8C:C6:5F:D2:DF:01:BB:EC:23:D4:EF:83:14:27:7C:A0:C3:73:46:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3031105871A111EF96A2936A762E951A.roa
Signing time: Fri 13 Sep 2024 07:24:18 +0000
ROA not before: Fri 13 Sep 2024 07:24:15 +0000
ROA not after: Sat 30 Nov 2024 07:24:15 +0000
asID: 136970
IP address blocks: 154.197.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60798 (0xed7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:24:15 2024 GMT
Not After : Nov 30 07:24:15 2024 GMT
Subject: CN=66e3e8a2-ac8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:dd:14:de:72:1d:f5:74:81:db:c1:5e:24:
9f:aa:3a:31:3d:35:30:bd:26:03:9e:d4:da:8a:6a:
cb:a7:e3:40:21:e3:3e:16:d9:92:ed:10:5e:e4:08:
df:20:4b:1b:5c:4e:c6:50:58:72:d3:89:b1:e2:22:
01:67:f8:bf:8f:4d:19:48:b6:e0:29:e7:4a:9f:30:
47:f4:42:ca:c9:92:94:a0:70:48:b7:f6:cc:02:ad:
ec:eb:b0:f7:d3:b5:6b:d5:f3:4e:48:2a:fc:6b:0d:
c8:e7:e6:2a:7e:20:51:80:92:fb:e4:a3:b6:b1:68:
aa:79:6f:8c:cb:49:bb:fc:f9:e0:71:e3:78:32:8b:
49:ea:f0:ed:05:ce:55:08:f3:5d:17:a8:ad:3b:7d:
da:54:c5:2d:6d:27:1d:72:31:c0:ed:ce:27:f5:f6:
90:1e:c9:2d:f5:ec:d8:2d:da:60:45:d0:aa:64:16:
53:52:a4:22:f4:2e:c1:67:f6:ac:1f:8c:a6:e9:75:
2b:4e:70:b7:a2:22:cc:98:9f:28:cb:7e:32:24:a3:
74:16:fc:3e:c1:f4:4d:a2:93:43:ea:d6:64:74:51:
dd:42:cd:0d:bc:44:20:68:f0:df:87:4d:a7:38:ba:
b5:ea:02:9e:07:1e:f0:c9:88:dc:d1:7a:cb:d2:ad:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:5F:D2:DF:01:BB:EC:23:D4:EF:83:14:27:7C:A0:C3:73:46:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3031105871A111EF96A2936A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:bb:1d:8c:7b:0e:45:fb:14:8a:64:f0:53:80:f9:c3:21:68:
82:24:2c:af:47:d7:2e:3d:68:c2:86:cc:a7:10:57:82:6a:a8:
38:0c:2a:55:b1:bc:57:68:3f:1c:af:36:98:3f:0d:4f:4f:9b:
27:d0:c4:f8:93:03:07:70:f5:1e:4a:dc:ae:87:62:32:56:e0:
09:6b:08:86:1f:33:d2:1e:23:4d:bf:92:e3:48:cd:d8:9f:da:
55:df:02:52:51:f6:c9:fb:c7:43:f6:fe:5f:af:b3:68:0c:38:
92:62:f5:39:68:f9:d1:0a:21:dc:e3:b0:b5:68:d3:ee:04:e1:
16:35:d8:97:e8:ed:f6:e4:b6:20:85:eb:7a:90:85:b9:60:e7:
73:ff:1c:f6:01:01:7b:52:90:0c:0d:56:5f:7c:75:3f:d9:98:
8c:53:04:c0:9b:40:63:94:e1:bb:a2:aa:f3:27:d1:2d:10:ba:
c1:c2:b7:73:1e:23:26:51:a8:89:8e:18:dd:5b:9b:67:bf:94:
05:b4:83:be:50:86:a8:7d:25:c7:38:21:d6:bc:c2:61:c2:58:
4f:3b:70:e7:c1:1d:b7:3c:4f:9c:fc:19:d2:fe:2b:1c:69:77:
df:9a:0d:1a:42:d4:0a:ff:8d:3b:a5:b8:ce:81:00:1f:ec:05:
33:1c:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org