Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EE2F1C6A5F11EF88140449762E951A.roa
File: 42EE2F1C6A5F11EF88140449762E951A.roa (raw, json)
Hash identifier: Dm27t90spRaxiXwiqIvHKhm4P5ylI+Yvu93skF0q3qg=
Subject key identifier: 99:80:B3:C2:A3:DA:42:56:49:65:84:D4:77:96:6C:E7:B0:83:6A:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EE2F1C6A5F11EF88140449762E951A.roa
Signing time: Wed 04 Sep 2024 01:44:45 +0000
ROA not before: Wed 04 Sep 2024 01:44:31 +0000
ROA not after: Mon 30 Dec 2024 01:44:31 +0000
asID: 17561
IP address blocks: 154.207.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59905 (0xea01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:44:31 2024 GMT
Not After : Dec 30 01:44:31 2024 GMT
Subject: CN=66d7bb8d-579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:5b:12:a6:55:34:e3:57:3f:00:f1:f8:8e:
7d:c4:6f:91:38:88:8c:bb:bd:69:87:01:22:dd:33:
88:17:a8:81:9f:36:61:fa:cf:8a:59:60:99:a5:8e:
a3:2f:ec:15:58:3f:8c:1a:3b:1b:a5:d9:1a:fb:4f:
b0:58:70:20:52:73:46:0e:95:b4:c7:cb:03:a2:85:
a5:f9:bc:c6:8c:e4:7a:26:3e:27:1b:4e:ac:6f:69:
bf:5b:84:75:c2:19:23:30:2a:24:37:c4:80:61:60:
c8:de:86:41:7f:78:55:dd:5f:3b:93:be:04:41:dc:
0f:87:8b:55:12:40:71:db:24:98:b0:4f:0a:24:d9:
f7:5b:62:45:d8:49:4e:68:ea:15:3d:a2:e0:14:6b:
97:b8:f2:38:5b:e1:1e:09:ab:c5:0b:d9:ea:ee:19:
3c:0c:4c:57:2c:42:37:52:30:4c:54:e3:9c:00:36:
5c:9a:5f:6a:39:ce:9f:b9:8c:a1:e5:a3:8d:18:50:
39:29:39:70:5f:e3:70:7d:6a:2f:45:ae:34:1a:b7:
17:1c:fb:62:cf:d2:d7:3c:d9:3d:34:dd:0d:74:15:
ca:db:f8:fe:ba:35:7b:51:89:04:7b:12:70:8a:a8:
13:2f:00:99:95:f7:8c:47:cc:57:93:0b:65:f0:4d:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:B3:C2:A3:DA:42:56:49:65:84:D4:77:96:6C:E7:B0:83:6A:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EE2F1C6A5F11EF88140449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:37:bc:97:b8:3d:b8:f4:29:e7:aa:28:8f:41:c3:3a:9e:1a:
4a:6e:f7:4c:93:7c:60:3a:d9:72:e3:61:8d:e3:b3:95:88:b5:
de:b0:69:1f:91:38:36:27:e4:fe:a4:1d:a9:2b:1f:e9:8c:20:
06:86:4f:88:dd:0f:97:1c:14:23:c3:2f:94:8a:52:f1:27:8a:
2c:69:3e:f7:41:60:94:b2:f1:0e:a3:ff:4a:09:a5:d4:0f:52:
e7:c9:d9:18:46:7c:f1:0e:e1:35:5c:d5:2b:ab:6f:fc:e8:a8:
79:b5:d2:fb:19:34:8d:6f:5f:dc:fc:81:79:ed:46:70:4e:d4:
46:0e:53:f9:56:c1:a4:15:b1:b9:f9:85:91:1e:e6:38:06:ab:
70:47:2c:ad:58:16:42:3b:8d:46:ef:92:00:ec:a4:b6:06:71:
b8:3c:c3:87:40:2c:3b:e9:6f:bf:2a:6d:52:5e:fe:b7:c1:7b:
0a:42:8a:ff:d2:41:d3:84:13:3e:28:d7:94:85:94:f4:af:df:
28:62:7b:a7:1e:71:07:e2:02:8c:b4:68:ef:d3:f7:09:38:3a:
65:fd:72:2a:fa:a3:f7:d8:4d:2a:61:e6:c3:18:58:d8:96:a5:
1d:56:3b:3c:4f:09:11:62:eb:bb:9b:13:b5:b3:13:63:47:1d:
3e:28:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org