Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3774849021AA11EFB2A8983E7DDC24C2.roa
File: 3774849021AA11EFB2A8983E7DDC24C2.roa (raw, json)
Hash identifier: BLNbszW0QZyS3ZT6XEGCxT5CFdwiw5SuJHPH0l9sCW0=
Subject key identifier: 9B:41:81:07:79:01:23:AE:56:2A:CB:53:FA:80:4A:33:B2:A9:08:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BE68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3774849021AA11EFB2A8983E7DDC24C2.roa
Signing time: Mon 03 Jun 2024 13:07:23 +0000
ROA not before: Mon 03 Jun 2024 13:07:20 +0000
ROA not after: Sat 14 Jun 2025 13:07:20 +0000
asID: 209242
IP address blocks: 154.197.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48744 (0xbe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 13:07:20 2024 GMT
Not After : Jun 14 13:07:20 2025 GMT
Subject: CN=665dc00b-3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:8c:db:f6:22:1a:29:38:31:06:4b:7a:7f:
6a:f7:10:b4:4d:2d:77:d5:98:68:5a:29:64:c0:a2:
f1:af:ab:f1:b8:b6:e6:fb:eb:ef:92:fc:b0:6b:54:
14:93:41:30:3e:1c:92:21:71:a9:32:60:63:25:8b:
94:34:e8:7c:c6:b9:d1:d9:9b:26:d9:dd:e9:c8:ef:
da:5c:6e:cf:31:e1:b3:fd:92:66:2e:8d:69:48:a4:
24:c9:08:e3:76:8d:ec:51:ab:f8:4a:59:fe:88:48:
24:31:5c:af:b7:5f:55:8c:58:e1:35:f7:0f:4f:ca:
73:3d:d5:6c:b6:62:72:8d:c0:9f:c5:a1:18:5c:22:
cc:49:82:d9:6b:18:b7:f2:5a:68:5f:17:ea:63:a3:
4a:9a:d7:de:72:a7:71:c7:e3:1c:79:23:fe:19:f4:
ce:75:86:d1:33:cb:52:97:81:f2:bd:d2:39:1c:c0:
3d:07:81:2c:6d:31:20:7a:e1:d4:1f:ec:13:00:87:
3b:88:bb:b5:4c:89:01:54:48:c9:d9:d0:b0:e4:b3:
10:dc:79:ee:36:eb:92:76:20:95:5f:f0:7e:9a:e4:
bb:b7:9d:26:c4:7b:47:cb:5d:58:9d:21:eb:5d:5d:
33:a3:10:8c:36:04:6b:0d:ae:68:14:a5:66:64:cd:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:81:07:79:01:23:AE:56:2A:CB:53:FA:80:4A:33:B2:A9:08:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3774849021AA11EFB2A8983E7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3c:93:fe:d1:f9:ac:3c:39:2c:87:e7:28:d1:85:1b:22:91:
cf:bf:80:06:53:ce:f9:9d:24:31:6d:a9:b0:7b:d4:cf:ae:ac:
88:fd:3a:65:87:12:ab:90:12:12:64:a4:34:53:4c:38:a8:2f:
b1:80:a7:c2:80:5e:4f:9c:21:53:af:36:8d:34:be:1d:26:aa:
99:40:23:d5:32:03:00:f5:21:25:63:19:57:7d:e3:ed:66:f7:
51:db:90:c2:06:95:96:bf:95:64:e2:2e:90:08:86:57:c0:0e:
3c:22:45:04:cf:b5:bb:92:ab:7e:b3:cd:df:a7:b9:13:99:74:
96:7b:53:59:e5:07:cf:a8:2c:3d:0f:09:64:08:01:28:cb:db:
a7:4c:15:54:72:8c:2b:a8:83:31:33:49:6b:df:84:d5:e3:aa:
15:1a:94:1f:61:7d:a4:dc:1d:cf:de:69:5e:7e:12:e0:3a:81:
13:8e:b9:2d:9d:df:15:fa:71:22:af:9b:ed:a7:24:ca:b9:56:
d3:d8:89:fa:87:d9:a7:5a:02:9f:8e:6b:1e:60:19:76:6a:19:
1a:63:f4:de:cf:5f:e2:95:e0:8b:61:ee:8e:f9:54:90:dd:6a:
97:5d:fe:08:f0:bb:a9:30:c2:d3:99:7d:ed:7e:ce:34:08:d4:
41:3a:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org