Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422321DA976611EF865F1245762E951A.roa
File: 422321DA976611EF865F1245762E951A.roa (raw, json)
Hash identifier: UTriH7o2MIc1pnJMNaMntnVVRj8rdauQj25XB+wHzOE=
Subject key identifier: 78:DB:0B:8A:6B:61:3D:9C:73:14:F1:65:5D:76:50:FD:51:6B:91:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01047E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422321DA976611EF865F1245762E951A.roa
Signing time: Thu 31 Oct 2024 08:58:13 +0000
ROA not before: Thu 31 Oct 2024 08:58:09 +0000
ROA not after: Sun 01 Dec 2024 08:58:09 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66686 (0x1047e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 08:58:09 2024 GMT
Not After : Dec 1 08:58:09 2024 GMT
Subject: CN=672346a4-bb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:f4:db:da:98:9b:82:6d:b2:5a:9b:3f:25:
fa:25:53:63:45:e0:0a:57:9f:03:37:e3:bb:df:77:
39:9f:2c:f6:49:79:9b:44:4f:bd:2a:2a:8c:8e:45:
ec:7e:d9:0e:9f:aa:f3:14:86:3a:90:af:f3:79:21:
4d:00:f4:24:b7:c8:c3:b6:0b:fd:2d:f9:12:94:67:
52:30:16:6f:9a:f1:bf:6a:19:66:3f:53:02:44:c2:
8d:21:96:b5:73:53:1f:a6:48:02:bc:8d:13:88:8f:
43:bf:e9:d4:25:88:07:ab:7a:1a:94:89:63:f5:03:
17:e9:7a:b8:21:25:c7:73:76:7a:a5:27:59:1e:a8:
ae:49:c3:e9:31:35:24:c6:77:04:d2:89:21:2a:65:
5d:dc:9b:b8:14:1f:73:ca:17:44:b4:8d:db:a2:08:
ca:f9:d1:ce:52:10:06:e5:db:ab:ad:6b:55:e9:a2:
5f:d4:d7:56:a9:3a:14:21:34:0f:4c:3a:f9:71:2a:
c8:eb:f6:6d:ac:0d:a8:2a:94:c8:f3:77:d5:0a:97:
c0:ed:e2:7a:2c:00:65:27:ed:25:91:03:f8:46:55:
9d:8e:7d:bc:98:aa:83:d6:52:61:da:34:9f:a1:d6:
50:70:55:70:a5:12:0b:1e:fb:48:d8:95:dd:52:e1:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:0B:8A:6B:61:3D:9C:73:14:F1:65:5D:76:50:FD:51:6B:91:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/422321DA976611EF865F1245762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
55:a5:9f:23:3e:c7:ba:2f:33:1a:f6:1e:89:ec:d4:45:02:59:
da:8d:0a:4b:05:d0:85:82:95:06:f1:7d:50:c7:6b:e2:d7:1e:
ea:e6:f1:6a:24:bf:52:b4:99:cc:fe:06:88:e7:ad:af:48:42:
f6:45:c0:be:4c:7d:fa:e8:06:05:2f:07:f9:a9:3a:c0:ec:fb:
a2:93:b3:b2:ac:0e:63:07:f4:c2:c4:65:19:1d:73:55:95:bd:
1e:37:48:1d:e0:0f:03:ea:6c:4d:1d:44:6b:51:f3:29:77:4a:
c5:43:13:4b:fa:2b:e4:29:bf:e1:05:c8:d8:f3:ad:4d:ed:9e:
0a:bf:4b:af:6f:e8:43:e8:21:ec:f1:e8:55:02:cd:93:18:4b:
36:e4:b7:3f:6e:d3:ef:c7:f3:45:1c:e9:be:72:8b:9a:e7:97:
48:25:59:e1:aa:25:ab:35:a6:48:d1:5b:4b:59:c2:e5:c6:aa:
83:8f:e7:e4:3c:39:ac:30:28:1c:3e:23:78:09:ff:9f:b3:12:
9e:ce:bb:c7:95:2e:8e:d9:08:2f:4c:75:52:77:03:80:6b:c6:
a2:3d:97:3a:56:51:e3:de:f8:da:59:9d:cc:09:4d:82:d8:e5:
b9:74:cb:18:51:4a:fe:49:1e:1a:c2:09:a8:55:79:18:31:d1:
18:8b:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org