Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801FB8A983411EFB66BCE55762E951A.roa
File: 3801FB8A983411EFB66BCE55762E951A.roa (raw, json)
Hash identifier: y/d0UHHwrW7TFSx3TSH3kKyiMZtKkMFwpiAUsNrodko=
Subject key identifier: 22:75:86:A3:74:1A:EA:E4:50:09:52:19:05:DC:1B:80:C0:AF:2A:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801FB8A983411EFB66BCE55762E951A.roa
Signing time: Fri 01 Nov 2024 09:32:32 +0000
ROA not before: Fri 01 Nov 2024 09:32:28 +0000
ROA not after: Sun 01 Dec 2024 09:32:28 +0000
asID: 54600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66751 (0x104bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:32:28 2024 GMT
Not After : Dec 1 09:32:28 2024 GMT
Subject: CN=6724a030-06c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:30:9d:21:cf:43:fa:af:1b:f0:9a:bb:8a:
75:48:bf:c7:85:84:18:77:28:6d:64:59:2a:33:f8:
62:7a:fd:10:fb:b2:53:f2:a7:7e:a9:a6:35:b9:7d:
92:38:6c:99:0a:5e:cc:48:93:bb:bd:de:73:f0:77:
4e:80:a4:7e:b3:b6:52:2f:f6:2a:cb:53:ce:15:46:
3e:f1:2f:29:4e:46:44:69:94:93:f8:bc:f1:b4:93:
fa:49:7a:a1:da:4d:a7:03:ab:99:92:4f:4d:a5:9d:
22:59:89:02:b5:47:76:bf:3a:13:8a:2d:45:cf:38:
d7:f3:2e:de:58:59:9b:58:d3:b7:5c:cf:aa:21:6b:
fb:12:4f:b2:21:54:06:d3:bf:bf:df:9d:a0:14:0e:
20:0d:b7:1e:50:12:54:31:f7:30:dd:2b:ea:45:b0:
00:58:a7:e0:59:21:6d:64:fa:a6:18:5c:0f:10:e4:
1b:a1:83:e0:a5:3e:9a:3a:28:4c:1c:dc:b6:21:5e:
03:10:23:8f:11:02:f7:1e:40:5f:01:cd:af:9b:29:
f4:db:f8:00:74:9e:43:b7:13:8c:46:56:07:00:e8:
1b:b1:70:9c:5d:45:95:5b:09:d7:a0:5a:e5:4d:68:
4c:76:1d:b4:51:3d:3d:fa:05:f5:75:fb:73:65:16:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:86:A3:74:1A:EA:E4:50:09:52:19:05:DC:1B:80:C0:AF:2A:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3801FB8A983411EFB66BCE55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:9b:cf:27:1b:98:a3:a4:32:f0:4d:e2:3e:49:bb:a1:9f:10:
8a:96:00:b3:b8:37:f4:61:4b:a9:3c:b8:a0:d7:ba:2e:8b:44:
f6:e0:31:32:26:13:df:e5:92:d1:14:89:e4:6f:36:4a:f2:ac:
aa:7e:43:f9:fa:b9:64:45:f9:59:74:92:cc:46:47:c4:72:ce:
4a:21:42:1d:46:90:0a:48:19:9d:a5:de:7e:3f:e8:5a:0a:5c:
a7:5b:e5:e3:a1:89:cc:0c:d8:be:8f:d7:ba:eb:c4:0f:9a:85:
f2:ac:aa:a3:ef:4a:3d:e7:01:88:03:82:f3:81:91:fb:99:42:
37:95:cc:b5:55:9f:d0:0b:4d:b9:6a:1a:13:1f:c6:5e:8d:fe:
74:4e:47:07:c9:4c:5c:f1:17:9e:e6:c9:33:a5:74:29:19:40:
92:b1:89:7d:8f:51:98:19:72:c1:c9:fa:7a:a3:94:17:1f:29:
67:c1:1f:ab:1f:c5:64:6e:71:2f:17:54:6e:44:90:d5:79:9b:
7f:6b:9c:08:36:2f:92:7a:ac:39:a8:9c:63:87:a5:17:0a:86:
17:8f:9b:94:fa:f8:ef:d0:a7:57:dc:a6:ad:ee:fe:81:93:8d:
0b:10:f7:86:42:77:a7:d8:d0:63:2d:c8:a8:68:ca:08:d3:91:
2d:a9:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:03 2024 by rpki-client on console-fra.rpki-client.org