Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307444F0141711EFA0830C24017001B1.roa
File: 307444F0141711EFA0830C24017001B1.roa (raw, json)
Hash identifier: LUloD/bCH/fyUPezyLvK6kQ9IVFkI3mf8Qd95OBgQog=
Subject key identifier: 9A:F5:42:A7:3F:E1:B0:48:11:B3:1C:B6:30:8E:DB:33:A4:41:6F:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B81F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307444F0141711EFA0830C24017001B1.roa
Signing time: Fri 17 May 2024 06:32:10 +0000
ROA not before: Fri 17 May 2024 06:32:07 +0000
ROA not after: Mon 12 May 2025 06:32:07 +0000
asID: 41095
IP address blocks: 154.196.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47135 (0xb81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 06:32:07 2024 GMT
Not After : May 12 06:32:07 2025 GMT
Subject: CN=6646f9ea-8dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:23:56:16:42:97:de:0e:1c:80:7c:91:fd:
8d:8a:ff:f2:80:1a:7f:08:5f:43:6a:67:4d:48:c5:
70:de:90:0a:5e:57:89:3e:2b:b8:37:3c:00:79:00:
fc:e7:f0:bd:18:ff:18:1d:62:8e:8f:80:03:93:4a:
13:97:8a:83:f6:46:31:c2:1b:47:d6:6b:71:cf:c3:
da:72:e9:da:f2:48:09:e5:df:12:4b:7e:ff:8b:27:
57:27:43:7b:a5:69:47:46:af:e9:3a:da:a1:af:31:
0b:30:66:c8:93:b5:70:f4:ca:67:f4:4d:0f:fb:eb:
ab:82:02:27:59:9d:49:b5:bd:a9:e6:fe:40:bd:76:
42:b6:f4:09:13:d6:6a:bc:5d:43:68:72:b0:57:e1:
f3:ae:01:9b:ab:cf:5c:43:dc:3a:b4:f6:5d:92:20:
08:cf:ac:e2:63:62:4c:89:e4:9d:54:27:2d:a7:25:
2e:1c:13:3b:ab:cd:a9:be:34:90:a1:bf:f9:a2:62:
92:8c:a8:91:48:30:cc:e8:d3:e8:96:a1:a6:2b:fe:
07:b2:af:1f:b1:af:2d:b2:2b:93:60:4c:a2:12:63:
27:50:4d:0f:83:4a:0f:22:2d:a1:6c:47:29:63:be:
bb:18:9f:6b:c8:42:ba:49:fc:3a:77:0d:ba:2e:b6:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:42:A7:3F:E1:B0:48:11:B3:1C:B6:30:8E:DB:33:A4:41:6F:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307444F0141711EFA0830C24017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
27:47:0d:89:34:c0:98:ca:e7:12:d1:50:95:ed:2f:c8:56:bc:
93:6e:96:8d:f4:8d:8a:76:3a:9f:4e:20:42:c6:15:51:1e:e1:
b5:19:38:a8:c2:d9:1e:03:fe:fc:77:ea:3f:a1:4b:be:02:ea:
62:62:8e:32:7e:05:db:d3:bd:35:e9:28:4a:93:3b:53:1f:ab:
b2:ce:94:76:30:a6:85:2b:69:66:10:50:3d:e3:d4:6a:61:8c:
06:ee:ac:3b:97:b2:6f:4b:60:27:a9:22:5e:52:b8:75:ff:c8:
03:b6:58:b5:e0:01:aa:c3:37:d9:c5:22:5f:f5:ec:1b:59:f3:
f7:d9:f9:b7:90:86:a0:a4:08:16:b3:e3:ed:b3:2d:2a:dc:0e:
e5:44:49:53:e4:6f:eb:95:c6:1e:8e:15:b0:ba:d4:a1:1c:2a:
3e:e3:5a:da:bd:36:fc:0d:f0:f1:20:17:82:a8:66:b3:2a:a0:
e0:ec:6c:34:e9:78:8a:56:e4:35:c4:a0:eb:2b:24:c8:ab:45:
98:cd:fe:54:85:22:4e:a1:04:85:51:47:5b:59:6e:dc:61:bc:
3b:21:96:c2:00:dd:0f:f0:60:64:c2:7c:9c:de:47:ee:fc:96:
e5:2e:51:1e:69:cf:9d:82:0b:d4:48:18:5a:f2:8a:ae:55:a8:
6c:cf:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org