Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4120C43AA64911EFB7CE53B1762E951A.roa
File: 4120C43AA64911EFB7CE53B1762E951A.roa (raw, json)
Hash identifier: do9+qEgmzhN4hzJuwfQqUSDv4CSdHkhHjXKvacVatVc=
Subject key identifier: DF:16:D6:8C:CC:30:24:A3:F8:EA:84:DD:AE:25:74:3E:6F:BD:96:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4120C43AA64911EFB7CE53B1762E951A.roa
Signing time: Tue 19 Nov 2024 07:38:23 +0000
ROA not before: Tue 19 Nov 2024 07:38:19 +0000
ROA not after: Wed 04 Dec 2024 07:38:19 +0000
asID: 57456
IP address blocks: 154.213.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69360 (0x10ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:38:19 2024 GMT
Not After : Dec 4 07:38:19 2024 GMT
Subject: CN=673c406f-3eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:46:cc:a1:98:8e:5d:e5:ef:c2:88:07:94:
10:45:c6:51:9e:7b:d8:17:2d:d4:c4:cd:7a:32:59:
38:82:de:c8:4e:f2:70:07:1c:af:4d:37:8b:64:5e:
0e:78:8d:b7:92:f0:a3:c8:f1:c0:34:c0:9c:8c:31:
ae:1b:d9:b4:4f:f0:71:0e:47:f2:7d:46:2f:5e:32:
c4:ee:a5:3b:4d:8d:9a:16:6d:a1:08:4d:f5:38:41:
93:c2:67:91:ac:89:6d:37:37:42:de:fd:65:65:33:
3e:08:91:ee:2f:06:e6:d5:41:75:e8:20:be:39:ca:
58:cb:0f:b0:1a:81:94:fe:64:91:c1:3b:38:36:dc:
12:1a:bc:08:2d:f3:a5:25:d5:27:f6:5a:c2:64:ba:
d4:50:05:93:5d:93:4f:d4:d9:9d:cb:62:36:7f:94:
37:be:10:8d:03:b2:2c:df:16:2b:ca:0d:91:0c:7f:
8a:1f:48:7b:bf:2d:7d:1b:f8:e5:25:6b:99:01:7b:
69:46:19:3c:7a:e0:33:4c:a7:e2:ea:56:69:35:39:
1e:e1:0b:7d:14:b1:2e:be:7e:5e:4e:45:c0:19:da:
27:cf:77:85:2d:82:76:ed:53:83:e3:7c:b7:0a:cb:
02:42:b8:5b:45:2b:3a:10:c7:23:b3:83:0e:87:74:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:D6:8C:CC:30:24:A3:F8:EA:84:DD:AE:25:74:3E:6F:BD:96:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4120C43AA64911EFB7CE53B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.164.0/23
Signature Algorithm: sha256WithRSAEncryption
66:9a:b4:af:ff:7d:2e:54:76:1e:0d:f1:91:76:87:70:45:45:
06:1e:45:81:a5:cd:e4:31:e9:01:7e:d1:1c:97:df:7a:44:87:
39:ab:ce:71:fe:b9:f1:a0:ad:94:a8:81:d2:af:42:94:f6:bf:
6f:40:be:de:c5:90:f9:a0:fe:8e:97:bb:2d:24:0e:a8:0c:92:
4b:c1:bb:f8:7e:2c:9c:70:53:0c:b5:19:0c:be:a1:dc:5b:30:
6f:bc:45:e3:98:35:8c:a4:8b:4d:4c:f0:dc:ad:32:01:b9:2b:
fb:41:36:56:6b:c6:15:2b:95:d7:df:13:d0:a6:66:cc:27:ae:
9a:7f:f0:7e:d5:d1:6a:81:92:8b:f4:09:70:3a:a0:25:39:52:
47:ef:9b:b3:39:d0:c7:ae:4e:c3:25:00:67:73:ef:c3:5c:05:
68:fa:5d:c9:67:94:e6:82:6b:4e:91:44:55:06:b3:9e:6a:13:
67:b6:14:8a:86:a8:7e:21:99:d5:eb:f6:3c:fe:06:02:74:b0:
c0:0a:73:ba:cb:0f:17:36:b4:0c:b4:39:bf:34:72:9b:41:e8:
85:7d:d9:31:00:32:ff:8e:f6:dd:04:21:c7:13:b0:e0:06:cb:
60:df:59:be:3e:99:ed:48:6c:ac:b4:6a:42:43:c3:68:a9:9a:
53:31:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:19 2024 by rpki-client on console-fra.rpki-client.org