Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D353F82A9C211EF8CD0CF84762E951A.roa
File: 3D353F82A9C211EF8CD0CF84762E951A.roa (raw, json)
Hash identifier: Mty++SIgzWlRXvxMO4nS/vg6S5a10HSWICR+roOxzxA=
Subject key identifier: 0E:5C:62:63:35:80:A2:09:DF:FF:4B:27:59:24:F0:A5:1B:C7:80:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D353F82A9C211EF8CD0CF84762E951A.roa
Signing time: Sat 23 Nov 2024 17:41:59 +0000
ROA not before: Sat 23 Nov 2024 17:41:55 +0000
ROA not after: Mon 09 Dec 2024 17:41:55 +0000
asID: 48529
IP address blocks: 154.206.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70088 (0x111c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:41:55 2024 GMT
Not After : Dec 9 17:41:55 2024 GMT
Subject: CN=674213e7-e15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:a6:80:7f:79:c8:e6:21:ea:5b:7a:41:f0:
9d:e5:f7:9c:af:d4:1d:a7:f4:74:6f:c7:d7:86:2f:
e9:08:89:90:6f:63:36:b1:f6:a4:af:5e:56:21:96:
c4:8b:56:48:94:9f:14:63:34:1e:0e:ae:d1:b0:e9:
1c:a3:eb:79:43:f0:39:5b:5e:d8:ce:03:d2:29:65:
5d:71:ec:55:54:6d:64:f3:f4:7f:68:a0:61:c4:b1:
69:29:9e:b1:3d:ec:26:34:67:76:40:37:92:92:4d:
65:52:23:f2:ba:c7:00:0f:68:ae:71:c7:91:03:96:
1b:08:1f:d0:d6:61:90:96:1f:60:60:91:cb:d3:12:
89:b4:72:b9:62:0d:98:78:49:68:9b:f1:84:6c:4c:
ea:21:79:11:64:3d:6b:46:88:5f:8c:99:95:53:66:
bd:e7:45:b5:6f:d7:1a:99:16:b5:1a:03:d4:54:ba:
d2:25:84:f9:5f:77:24:55:3d:15:49:a8:72:56:bd:
42:d7:d9:b0:3a:6a:73:98:5c:d6:18:89:d5:5b:0d:
ad:e7:d2:26:63:87:b1:2a:2c:05:52:dd:a1:2c:74:
3a:79:25:38:00:af:32:cc:55:7c:b3:8f:2e:82:9a:
80:98:cf:4c:dd:f9:9d:99:8e:7c:2e:ad:f4:07:7a:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:62:63:35:80:A2:09:DF:FF:4B:27:59:24:F0:A5:1B:C7:80:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D353F82A9C211EF8CD0CF84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:11:35:11:45:62:bf:c4:80:ba:a8:ee:1f:5b:8e:66:d8:25:
db:66:05:b2:94:d6:1e:ee:28:a1:4c:69:76:27:4e:52:81:16:
64:20:ae:de:21:55:70:19:1f:c1:c6:49:53:4e:bd:6a:d5:90:
22:0a:cd:62:97:c7:10:20:b6:95:bd:a4:56:81:28:07:06:c7:
ab:5e:f3:83:ee:7b:4c:00:f4:34:1a:44:a4:cd:49:65:c8:01:
5c:39:f3:2a:8d:f9:a1:e4:5b:71:8d:71:85:e7:14:bd:7b:46:
7d:c7:44:1a:0f:30:d1:21:47:28:43:4b:23:cd:37:86:9b:7c:
17:d0:ef:31:e8:50:df:92:d4:b2:84:8d:6a:f7:16:fa:b0:bf:
ea:cb:a2:58:8e:cb:56:b2:15:f5:b8:2a:bf:64:b1:26:07:61:
37:3e:a4:89:a5:cf:24:f7:16:23:84:f8:1c:2a:1b:01:f1:a2:
ff:ee:74:91:16:5a:b5:0a:ed:43:e4:3a:fd:8a:c5:3e:5a:dd:
d5:99:67:b6:32:fa:a6:dc:64:20:33:74:31:51:cc:1a:ec:68:
20:6d:cc:4d:5a:6f:d9:0d:be:68:12:dc:60:27:eb:24:56:6a:
20:39:40:b8:8e:11:c9:3f:f5:42:87:d1:03:69:0b:95:78:ca:
e7:d5:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:05 2024 by rpki-client on console-ams.rpki-client.org