Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E06A01A7B2111EFBAC675A0762E951A.roa
File: 3E06A01A7B2111EFBAC675A0762E951A.roa (raw, json)
Hash identifier: IPxLNvdjK8jIAQVVYWAnroRdJwwEzpTz/VYJXXs24tA=
Subject key identifier: 03:65:0A:72:39:00:37:1E:85:C8:9A:9C:A1:78:27:C5:20:45:F9:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F352
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E06A01A7B2111EFBAC675A0762E951A.roa
Signing time: Wed 25 Sep 2024 09:33:38 +0000
ROA not before: Wed 25 Sep 2024 09:33:34 +0000
ROA not after: Tue 30 Sep 2025 09:33:34 +0000
asID: 211392
IP address blocks: 154.84.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62290 (0xf352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:33:34 2024 GMT
Not After : Sep 30 09:33:34 2025 GMT
Subject: CN=66f3d8f2-95fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:98:c0:71:40:8e:f9:1e:26:71:a2:9b:73:
30:48:10:42:1b:5e:4b:74:83:6c:64:d7:6c:d4:1c:
58:6c:ed:64:39:6a:a5:fc:2d:91:72:18:47:b2:6a:
27:c1:26:3e:c6:47:40:59:76:0f:1b:ba:19:c1:d6:
6e:2e:0e:61:08:85:8e:42:67:c9:73:7f:14:84:0f:
09:91:c8:a1:3a:3f:c7:bf:fd:71:9d:85:3f:93:16:
eb:c7:84:e9:eb:b0:1c:b7:21:a4:98:21:e0:2c:b9:
db:c4:54:e9:34:f3:99:7c:c6:4f:c1:8b:57:d4:34:
8b:9e:0f:25:a4:1c:2d:94:75:2f:55:52:14:95:11:
60:e3:fb:22:16:52:34:63:e4:c0:17:b3:e3:59:79:
65:fc:c4:cb:e5:2c:ec:fc:d6:dc:10:f4:87:d4:aa:
67:4b:65:14:57:0f:72:a1:88:36:da:20:66:09:86:
ae:16:f4:2d:58:07:9d:5a:07:d7:06:af:20:87:d9:
09:55:e9:5c:da:81:ce:a1:db:da:21:79:e5:ba:31:
d5:ab:67:7f:c7:e7:f8:dd:b9:30:c9:04:a9:b8:90:
ca:a6:5a:f9:ab:2b:dd:90:4a:ce:91:a4:01:47:9c:
43:28:f6:9e:c5:1d:b7:d2:b8:81:8e:af:25:ff:2a:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:0A:72:39:00:37:1E:85:C8:9A:9C:A1:78:27:C5:20:45:F9:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E06A01A7B2111EFBAC675A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.20.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:af:76:73:bd:16:2b:1c:d3:5c:d1:e1:19:0f:af:f8:62:93:
d4:7e:b6:46:da:cf:b3:88:0e:ee:c5:70:a9:65:16:b9:7a:17:
30:e0:20:1a:8e:3d:95:8e:6f:ce:92:b2:ae:3b:c4:83:a1:11:
c0:1c:a0:fc:47:5b:04:4d:21:37:b2:28:82:c3:eb:93:ba:53:
bd:03:22:dc:20:ee:40:6d:38:86:b1:f2:09:06:26:cd:3f:e7:
60:1f:80:82:f3:f5:e0:a2:d0:88:9f:63:08:91:e5:56:1a:7b:
03:d8:bc:1d:78:0b:91:c9:d6:31:9c:fb:75:58:ee:ed:2b:b4:
aa:cb:a7:21:6b:b6:54:87:13:b0:1f:2b:36:63:8a:47:c5:40:
c0:58:e9:9b:b6:f1:31:a9:85:84:a9:b5:4c:e9:5e:6d:09:c4:
36:59:47:c6:e7:11:ad:5e:23:be:b6:dc:7d:cb:90:4a:1a:67:
19:81:5f:37:84:8e:29:76:a0:ca:ca:49:36:02:f6:9f:f3:3a:
da:01:75:54:eb:b0:fd:ba:41:7e:ee:d0:95:8f:0e:b2:86:f7:
63:d5:a0:3b:69:51:29:8b:df:69:60:9d:c8:c6:85:36:8d:1a:
61:cf:ce:ef:aa:1b:df:b3:13:8c:fd:0b:92:62:15:4f:97:35:
33:d2:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org