Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB67D66726F11EFBF1C8979762E951A.roa
File: 4CB67D66726F11EFBF1C8979762E951A.roa (raw, json)
Hash identifier: TRSJgELw5EMFVRAjt7g80flAbre4ShbfcxbGXKRPpuo=
Subject key identifier: 83:70:D8:58:76:E2:98:71:E6:82:91:BD:EE:FF:5D:6B:51:5C:FC:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB67D66726F11EFBF1C8979762E951A.roa
Signing time: Sat 14 Sep 2024 07:59:43 +0000
ROA not before: Sat 14 Sep 2024 07:59:39 +0000
ROA not after: Sat 30 Nov 2024 07:59:39 +0000
asID: 142403
IP address blocks: 154.83.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60962 (0xee22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 07:59:39 2024 GMT
Not After : Nov 30 07:59:39 2024 GMT
Subject: CN=66e5426e-2cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:4b:f7:17:15:4d:7c:0b:75:68:13:f1:ad:
82:bc:d2:d6:1e:09:5f:4f:47:bf:69:a5:4a:86:4c:
15:d5:d1:ac:62:58:bb:5a:8b:b3:ee:bc:13:2c:2b:
b6:7c:39:46:f4:ce:6b:93:c0:a7:81:9f:bb:ec:fe:
1d:24:e2:ee:01:47:bb:ab:5f:1b:ab:22:e0:3e:2d:
76:b7:a5:22:30:7d:81:a3:9b:c7:98:b9:7e:89:61:
01:9f:6c:39:d1:69:09:f3:38:38:ee:53:c4:2c:b2:
72:43:6b:07:35:93:10:1b:84:98:8b:26:43:35:66:
ce:b7:69:0e:eb:a4:fb:84:48:b1:03:53:38:44:62:
71:0c:f1:ed:1c:47:9a:34:04:a1:e3:19:16:f1:cb:
56:d9:f1:89:7c:b0:4f:42:c4:25:d0:0b:f0:bb:f8:
98:1d:4f:6b:63:ad:1f:b3:ff:3f:bb:67:77:ad:84:
53:e6:36:b4:46:86:0c:f0:d7:90:f3:3e:75:40:9e:
1e:88:aa:55:2b:db:ca:09:15:a0:60:89:24:0a:d1:
0d:47:a6:f1:56:37:3d:63:5e:10:50:29:68:54:d0:
9d:7a:18:e3:4c:55:5c:e4:ef:d4:7d:7c:68:00:11:
ee:d7:ac:f5:90:ea:40:c5:f2:65:f3:b4:17:ef:63:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:70:D8:58:76:E2:98:71:E6:82:91:BD:EE:FF:5D:6B:51:5C:FC:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB67D66726F11EFBF1C8979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:96:e4:c6:14:0b:07:50:c6:e6:4a:8e:5d:d9:3c:fd:7e:15:
5d:6d:1a:db:a1:a4:27:7f:d2:8a:e6:74:40:03:a9:e0:d8:3b:
f4:72:11:8b:36:95:83:7a:50:5a:4c:1d:92:5e:24:2a:2b:89:
3e:11:b9:cd:ec:b0:3d:e3:2d:14:d6:7b:77:73:ad:65:c4:d5:
a5:2b:b3:30:cc:47:61:0b:ec:f4:8a:e9:b3:b2:84:c9:5e:33:
57:ff:e3:f7:c4:f6:95:04:12:9c:ad:a1:6f:39:5f:69:9f:53:
f0:9b:12:4d:3f:92:ef:d7:fd:a6:0f:c2:93:ff:e5:0a:c6:93:
f9:8a:53:87:fb:67:a0:49:4e:ce:40:2f:02:72:ab:7f:87:48:
d9:e3:41:3f:eb:41:60:3f:ac:47:53:8d:f8:e1:ea:1a:5c:af:
1c:6b:37:c2:76:96:8e:fa:32:6e:19:df:98:45:68:7b:e7:6b:
eb:de:62:23:be:33:49:07:48:08:f3:06:84:52:0f:13:42:21:
a4:bf:04:ec:84:2c:f2:fd:0a:b5:40:8e:37:b8:77:fc:c9:85:
35:f5:65:18:7c:a3:14:3f:f3:32:85:7f:5d:3a:33:0f:98:70:
7c:68:49:39:d6:cd:a1:6d:cb:4e:e6:de:0b:c5:2c:e4:37:e0:
ae:0e:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org