Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E451740A92011EFB6E72084762E951A.roa
File: 4E451740A92011EFB6E72084762E951A.roa (raw, json)
Hash identifier: CPMhII7Mep6qCG60bvkGj3L68WfOvW5L7cvrIEiaX/o=
Subject key identifier: 70:A7:A4:9E:E2:2E:13:E8:96:81:EC:EC:2F:5B:EA:2D:42:A8:8D:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01115D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E451740A92011EFB6E72084762E951A.roa
Signing time: Fri 22 Nov 2024 22:22:49 +0000
ROA not before: Fri 22 Nov 2024 22:22:45 +0000
ROA not after: Tue 03 Dec 2024 22:22:45 +0000
asID: 62240
IP address blocks: 154.195.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69981 (0x1115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:22:45 2024 GMT
Not After : Dec 3 22:22:45 2024 GMT
Subject: CN=67410439-a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:5f:55:83:1c:e9:73:ac:46:42:72:e5:d5:
92:1c:17:7c:c5:9d:e2:25:fe:33:53:a3:0c:b1:9e:
64:2e:d8:cd:15:a1:d4:9e:94:0b:52:2f:fb:e0:f8:
a5:e0:b1:99:47:1d:c7:17:93:b1:a7:30:a6:fa:62:
b7:91:cb:76:c3:52:81:73:85:0f:48:b2:5e:98:67:
11:16:55:6e:ff:f3:b8:7b:3e:77:98:d9:0c:44:8b:
27:6b:ae:69:fe:19:f7:36:61:74:c9:42:4e:b3:d3:
ed:8c:5d:09:de:75:d8:b4:73:19:82:3e:13:1c:47:
e1:c9:2f:e9:b8:96:c7:c0:99:b0:3d:73:de:1b:68:
b7:05:81:17:db:d2:90:1d:e7:05:75:91:42:fc:69:
a8:4d:2a:dd:06:12:9d:a8:d3:48:e4:28:44:88:25:
2b:fe:27:f1:88:bd:47:cc:3f:e6:bb:45:43:4b:d8:
6a:91:40:e9:3b:d4:08:95:1a:3d:6a:70:0e:9d:6e:
47:89:f5:0d:40:20:7b:f8:1b:b8:fe:47:39:6c:19:
eb:f9:72:47:76:ad:54:be:cd:26:c9:4b:96:56:ea:
7b:5b:e7:de:04:e4:07:cf:f0:10:aa:e4:26:c1:f1:
2a:c6:37:75:68:d3:6d:cf:ec:22:3e:8d:7b:af:c9:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:A4:9E:E2:2E:13:E8:96:81:EC:EC:2F:5B:EA:2D:42:A8:8D:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E451740A92011EFB6E72084762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ec:fe:75:8a:fb:60:5a:e8:18:e8:f2:79:96:71:95:55:4f:
f2:83:54:07:ac:5d:c4:85:00:40:75:59:e1:4e:64:e3:c3:eb:
e6:63:76:86:75:d6:6b:34:d0:fd:63:6a:32:04:a5:4d:38:50:
a6:b2:a7:b9:94:f9:02:b7:ed:6b:ac:f4:e5:77:33:3f:16:59:
f8:e8:b9:7d:cb:c5:22:b5:75:ed:ab:ca:bd:a3:b1:37:88:63:
cd:e5:bf:c4:0f:7f:36:7d:91:71:e4:dc:58:b3:67:10:05:3f:
a5:21:ea:5c:1f:84:32:52:61:13:9a:4a:3b:f9:25:2c:25:8c:
6b:9a:83:46:ef:bc:cb:33:1b:33:f8:9c:5c:dc:ac:c0:eb:04:
f6:08:4e:a9:3f:11:09:b1:25:b2:40:2b:af:ce:67:0d:ee:8f:
fa:a2:57:7c:af:d3:af:3d:44:b8:1a:eb:78:85:b1:f8:8c:37:
7a:dd:a8:2e:1a:48:99:51:a5:aa:17:98:cd:c7:58:26:2b:7a:
95:ae:db:d3:ae:1c:e8:fb:aa:62:63:ef:ac:db:c7:85:b5:19:
7b:66:5e:d1:1b:55:74:25:a2:98:45:a7:7c:28:f8:1d:c3:53:
f0:89:0f:ce:0d:92:5d:d1:0c:d7:c7:54:6e:9a:43:66:e4:c9:
33:f7:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:09 2024 by rpki-client on console-ams.rpki-client.org