Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42982374A26311EF9DCA90A3762E951A.roa
File: 42982374A26311EF9DCA90A3762E951A.roa (raw, json)
Hash identifier: DPfIT6ofY/55qxHRz9s+Hu02RmfHPNGjJT6iX64bVbw=
Subject key identifier: 06:5F:80:9B:AC:0F:5D:08:E8:47:B0:B0:71:83:ED:B5:41:FA:80:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42982374A26311EF9DCA90A3762E951A.roa
Signing time: Thu 14 Nov 2024 08:34:27 +0000
ROA not before: Thu 14 Nov 2024 08:34:24 +0000
ROA not after: Fri 13 Dec 2024 08:34:24 +0000
asID: 138915
IP address blocks: 154.206.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68858 (0x10cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:34:24 2024 GMT
Not After : Dec 13 08:34:24 2024 GMT
Subject: CN=6735b613-4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:36:63:69:27:7e:41:29:ac:32:11:ef:08:
11:dc:81:ee:53:67:09:5c:cf:68:62:44:a5:65:ee:
39:49:30:8d:82:19:80:88:5a:7c:26:a8:f7:e2:26:
17:63:9c:ff:bd:91:e9:f3:44:33:31:3b:15:26:61:
9d:a0:94:84:24:17:43:d9:a4:49:5c:c8:d5:8f:e3:
12:6d:ff:03:11:7e:af:4d:c1:12:23:83:44:4c:a0:
37:98:87:a6:2e:68:22:5c:fc:22:23:a1:36:b7:24:
78:33:4c:eb:ac:a1:9f:a3:e2:68:9b:23:78:c8:c0:
1c:41:f4:11:4a:50:85:af:62:d1:5c:37:3e:0b:60:
95:58:2a:bc:71:65:05:b2:74:a0:eb:0d:f3:1f:d1:
12:82:3f:22:ef:34:ff:f5:b4:fe:9a:10:86:03:50:
b8:31:8e:1b:d8:ed:ce:a7:1a:23:52:23:3d:73:a5:
f5:30:36:0b:95:cb:49:0f:7a:2f:6b:c6:a4:26:1e:
e3:8a:2a:da:51:64:a6:30:87:cf:e7:b2:d0:e9:51:
3f:83:f6:56:4d:28:04:65:f2:c8:ad:e1:3f:6a:c6:
b9:be:82:bd:84:55:2c:49:f8:a6:78:bd:22:48:3e:
92:ad:c8:0b:4f:a6:fa:a2:37:34:3b:69:84:a6:13:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:80:9B:AC:0F:5D:08:E8:47:B0:B0:71:83:ED:B5:41:FA:80:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42982374A26311EF9DCA90A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.58.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:e7:57:71:fb:39:31:95:4a:a5:ab:43:a7:36:92:b3:d9:20:
07:2a:1f:82:60:7b:35:af:fe:e0:6b:7d:07:35:35:38:ee:87:
af:90:20:57:e5:e6:c8:55:13:15:c7:30:f6:32:29:67:ea:c9:
7e:64:4c:18:96:e3:ba:9b:64:5d:ea:a6:64:54:7f:89:e3:1c:
24:74:57:b0:9a:65:3b:b5:38:a5:10:2e:dd:c4:dc:4a:6a:dd:
c3:37:f3:f1:23:aa:57:81:92:f2:fb:cf:8d:07:0d:38:04:fe:
cb:b0:85:cd:e7:fe:50:b3:d7:59:44:58:6b:cb:ef:6f:77:a3:
b6:b3:98:6f:7b:ac:cd:61:a3:2b:43:8c:67:86:c1:a8:57:d7:
f8:bd:db:02:87:a9:b7:42:32:10:2c:68:e7:80:46:42:dc:c8:
a2:11:50:f3:5f:83:6a:c1:86:4d:26:b3:20:9c:f7:46:1c:65:
b3:0d:7e:2e:95:f0:bf:51:a7:7d:9d:37:a6:c0:ea:1f:1b:ea:
60:38:75:85:41:0b:6d:21:cc:e6:7c:23:9b:d5:d6:fd:d1:fd:
67:7f:4c:88:0a:13:4f:b8:35:e5:ef:9e:3d:cb:5f:ef:7c:e2:
dc:d9:41:09:a9:53:1d:ff:76:49:68:58:ec:99:02:ba:9c:ba:
40:2e:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:28 2024 by rpki-client on console-fra.rpki-client.org