Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50094C12A33B11EF9FB50E86762E951A.roa
File: 50094C12A33B11EF9FB50E86762E951A.roa (raw, json)
Hash identifier: PDygBEVIwFqWWllsOyP4ibRXwBDlRxnvhr8Iimb9/cE=
Subject key identifier: A6:CB:9B:D4:78:24:01:1E:45:2B:8A:CA:CE:4C:D2:6C:76:8F:26:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50094C12A33B11EF9FB50E86762E951A.roa
Signing time: Fri 15 Nov 2024 10:21:01 +0000
ROA not before: Fri 15 Nov 2024 10:20:58 +0000
ROA not after: Mon 25 Nov 2024 10:20:58 +0000
asID: 5065
IP address blocks: 154.207.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69026 (0x10da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:20:58 2024 GMT
Not After : Nov 25 10:20:58 2024 GMT
Subject: CN=6737208d-4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:ec:4a:ae:c5:c6:d4:5b:74:17:ea:aa:a2:
0e:5e:21:5f:c2:e1:9d:19:68:06:d2:6a:a4:c2:25:
2b:95:d2:c6:e3:c4:7b:eb:fd:a3:f1:a1:9f:9c:d5:
d6:c7:9d:30:81:05:a2:b6:ad:3c:ab:bb:36:bb:af:
66:06:29:15:f1:a0:61:ba:4b:40:08:b1:9f:3e:6a:
c2:d7:14:fc:68:4d:1d:22:d6:af:04:79:96:9f:3a:
76:6d:9f:a2:14:60:45:5b:d2:59:2b:ff:91:c8:c4:
3e:82:c8:7b:32:d6:6c:7a:ac:f3:78:17:9e:70:bb:
12:75:87:7a:53:86:d5:32:da:84:5b:4b:2e:fb:e7:
74:c4:35:5e:55:3d:d4:44:7d:79:0d:c8:b7:b8:08:
96:8e:c9:f9:b8:70:6a:1b:e3:a2:b7:c3:b5:78:bb:
e7:b6:69:ec:1d:60:c4:98:c2:b3:89:43:44:e4:36:
4f:60:e2:fa:13:bd:04:70:2b:17:3b:7f:c2:0e:55:
2d:c6:ca:f9:d3:24:dd:78:0d:70:7e:c7:24:b9:3d:
fb:26:80:19:f3:70:1e:e4:30:09:92:cf:27:51:bb:
ae:a8:42:bd:b2:21:01:0a:d9:9d:ba:a0:0e:6a:fc:
fa:ed:a0:c2:a6:a4:3a:c9:fb:e6:38:44:1d:a2:99:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:9B:D4:78:24:01:1E:45:2B:8A:CA:CE:4C:D2:6C:76:8F:26:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50094C12A33B11EF9FB50E86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:de:8e:c1:6a:ba:7d:ff:b5:b4:46:9a:bb:96:d4:13:da:45:
c8:77:0f:f9:b8:ab:94:22:a4:88:86:eb:7f:37:ee:c4:03:59:
e7:9f:b7:f7:b5:cf:7d:5f:67:ba:11:93:23:07:0e:b3:04:df:
ed:f8:62:2a:e0:49:da:44:61:d5:d1:7e:db:9e:86:32:3e:28:
e8:ee:80:f3:06:de:d3:84:20:71:2c:d8:06:62:ad:ae:c7:54:
82:dc:a3:ec:7a:9a:0f:ab:43:b8:96:17:4d:46:7a:6d:7d:fc:
90:fc:38:a7:45:f0:19:43:34:75:9c:64:d7:74:e3:b4:47:95:
85:6a:ea:ab:82:11:72:e1:9f:45:7a:c3:39:5b:ab:89:c2:88:
18:f7:c0:31:70:c5:d0:6d:f6:50:c0:34:79:fa:37:b9:9f:75:
61:77:e7:e6:da:c9:65:97:01:7a:5f:12:27:32:a8:07:d0:84:
03:e8:eb:3b:d0:30:3b:fd:e6:69:c2:53:34:ae:01:0e:80:7f:
40:b7:1f:fc:76:01:df:86:4e:f6:23:06:8a:72:bc:0c:56:8d:
67:40:d8:8e:ec:73:c1:92:6d:6f:17:6d:93:f8:20:3a:85:d8:
3b:49:72:6e:aa:c8:5c:54:02:74:d6:be:98:74:fb:ca:ce:be:
9a:17:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:39 2024 by rpki-client on console-ams.rpki-client.org