Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41040B1074D011EFADEDA459762E951A.roa
File: 41040B1074D011EFADEDA459762E951A.roa (raw, json)
Hash identifier: YtBeZUliUpfDIUSaplnGDJQ6EzSxFqbBA5V0Gip2YkI=
Subject key identifier: BC:D9:80:83:2E:A2:04:A5:36:CC:65:53:5B:69:AB:72:77:34:B8:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F01A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41040B1074D011EFADEDA459762E951A.roa
Signing time: Tue 17 Sep 2024 08:38:46 +0000
ROA not before: Tue 17 Sep 2024 08:38:43 +0000
ROA not after: Sat 30 Nov 2024 08:38:43 +0000
asID: 142403
IP address blocks: 154.92.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61466 (0xf01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:38:43 2024 GMT
Not After : Nov 30 08:38:43 2024 GMT
Subject: CN=66e94016-d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:a9:a0:0a:72:f0:1b:01:5e:7a:e9:8d:d0:
fc:7e:a7:2e:1a:f6:75:e8:6b:a1:fa:57:3a:5e:47:
a4:98:ea:12:21:af:14:56:58:9f:91:5d:b6:0d:70:
76:e8:f7:10:33:88:bc:37:99:fe:2c:ad:d1:90:8d:
24:ad:e3:1c:ac:b1:a8:de:75:a0:d3:85:5d:ff:0e:
a4:b3:a1:61:53:db:72:b7:80:62:67:bb:79:ae:2f:
f7:a3:fc:f8:4b:64:3c:6c:2b:dd:a6:37:56:f7:46:
25:4a:d9:e6:c9:cb:77:78:b1:6a:9c:52:68:6f:aa:
61:59:d6:ea:fb:05:d3:b1:a4:4d:d6:78:fa:25:11:
9d:97:89:21:2b:a0:22:f9:13:b2:f3:60:52:87:f1:
4f:18:1c:0a:36:86:03:df:e7:8d:04:1c:fc:36:5e:
09:44:2f:18:d9:25:eb:54:d5:8a:c3:43:92:2c:d9:
8c:de:b6:01:48:c5:6e:91:ef:93:10:ac:5a:ed:f0:
7e:73:c0:d3:c3:31:a1:1d:14:d3:6f:0e:62:15:24:
69:08:56:a7:2f:fc:6d:eb:06:50:98:fe:0d:4d:6d:
d7:26:cc:02:a1:39:42:e6:79:42:13:1e:84:ce:cc:
e5:45:c6:64:ca:d9:d9:db:68:92:34:2a:99:cb:54:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:80:83:2E:A2:04:A5:36:CC:65:53:5B:69:AB:72:77:34:B8:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41040B1074D011EFADEDA459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:45:27:28:63:d2:4d:27:55:c7:5d:f8:ff:ab:bc:25:56:ee:
b2:d1:0d:89:ad:60:11:6f:f5:92:c8:c2:15:e9:dd:77:02:77:
de:45:e4:25:ba:9c:61:b0:29:f4:2a:ff:a7:e3:a2:ad:f0:a0:
fd:80:41:15:ec:4a:aa:ce:1d:d1:58:ad:57:8e:47:54:1d:00:
81:00:c8:61:ae:f2:60:60:4c:98:54:af:9c:31:82:93:f9:7d:
08:1a:2b:10:d6:37:d7:9d:27:f3:3c:a9:01:1e:48:86:72:0a:
64:b5:a6:0e:4d:d7:f7:0f:41:d0:e8:63:4d:32:f2:88:9c:2b:
6d:c6:fa:76:64:cc:9c:c7:62:17:ba:91:28:eb:dd:0e:e3:42:
46:42:f4:14:6a:72:50:5a:ea:8f:b8:f4:8a:4f:dd:9b:9f:1a:
80:58:8b:78:40:30:c6:1b:60:22:8a:b4:c5:bb:f2:d5:a4:36:
bd:7d:a5:0b:3d:37:30:9c:20:20:96:d0:a7:2f:41:bb:df:e2:
46:3f:5c:99:bc:01:3e:43:cf:d8:c7:3c:ad:33:1d:54:e4:00:
db:87:02:da:c6:34:5a:a7:d2:6d:7d:b5:1f:0a:a5:a4:73:c2:
f0:e4:7a:4c:3e:fc:e3:82:52:d4:65:ff:c9:00:86:0d:7c:9f:
8e:21:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org