Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5507E81A952E11EFA0ECD142762E951A.roa
File: 5507E81A952E11EFA0ECD142762E951A.roa (raw, json)
Hash identifier: UYvjYLyvSBWtCt+wPlPSR2z17j9/ZvmHjRP5CLuVyaM=
Subject key identifier: 14:2D:57:31:4A:C0:9F:68:E4:61:F9:9F:1D:B0:35:21:2C:B1:93:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5507E81A952E11EFA0ECD142762E951A.roa
Signing time: Mon 28 Oct 2024 13:12:50 +0000
ROA not before: Mon 28 Oct 2024 13:12:46 +0000
ROA not after: Sat 30 Nov 2024 13:12:46 +0000
asID: 203020
IP address blocks: 154.200.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66255 (0x102cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:12:46 2024 GMT
Not After : Nov 30 13:12:46 2024 GMT
Subject: CN=671f8dd2-5ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:f1:64:d5:7f:c2:6c:34:2e:be:d2:47:3a:
d5:6d:70:63:6e:75:47:89:c9:f2:33:5b:44:b8:62:
49:63:ff:e6:15:d2:0a:70:f0:7e:49:5e:23:bc:ac:
11:72:35:ae:9d:05:c7:f2:ee:4a:5b:57:94:2f:3c:
6c:4e:96:78:57:9c:7f:07:9f:53:ff:92:69:1e:d9:
42:e9:37:23:24:e6:77:d6:64:01:a0:ce:f7:47:6a:
15:ba:74:55:d5:7f:44:d3:6c:86:ea:ec:1d:0a:b2:
e9:3f:76:85:66:8c:49:72:37:54:0b:31:04:62:0c:
a2:70:a3:b7:0a:50:9b:75:6e:49:ee:6e:63:98:c1:
5b:ed:fa:91:53:db:78:de:e8:58:f3:12:5f:13:70:
cd:bb:fe:f3:0f:ad:4d:5d:f3:42:83:08:18:d3:6a:
c8:67:23:56:72:eb:c0:de:09:00:ad:c9:5f:69:2e:
9a:a5:8a:5b:3f:5f:42:5d:21:d2:f6:c5:0f:14:c7:
e1:fc:69:ea:8d:3f:f4:58:b5:7e:99:10:50:61:76:
43:14:b7:6d:0b:4b:6a:c2:fd:21:13:35:46:23:e5:
3c:14:9f:b2:32:94:ea:23:b3:41:f4:3e:64:d2:b3:
44:3e:92:4c:c7:5d:e4:2a:42:fa:0a:5c:93:ac:4b:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:57:31:4A:C0:9F:68:E4:61:F9:9F:1D:B0:35:21:2C:B1:93:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5507E81A952E11EFA0ECD142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
90:86:2e:ea:d7:6c:79:97:eb:60:06:4b:98:4d:99:85:b1:49:
be:8a:55:91:aa:db:bd:8c:cf:7d:5f:2b:48:50:0e:9e:99:05:
91:b3:7d:dc:eb:51:c3:fd:97:9d:2f:dd:0d:01:ef:95:36:5b:
42:6f:75:dc:ee:e1:5c:1f:78:63:d6:c1:a6:da:39:da:96:99:
4d:34:ab:fd:10:d9:49:07:d6:49:ef:6a:51:77:7c:c8:c9:6e:
a6:8f:55:b0:6c:13:c9:c4:62:9f:44:d0:c1:46:5e:79:ce:92:
70:e8:9f:8c:f0:20:66:0c:73:79:a8:19:e9:82:ae:73:ca:82:
eb:a1:48:52:ee:f9:73:ba:2c:0a:0c:f8:ee:03:9a:a4:6d:1b:
2d:46:fd:17:0f:af:24:52:ec:fd:3d:6d:90:18:fe:2a:aa:1e:
d9:cf:34:9f:b9:ad:35:6d:aa:75:d2:e7:54:7e:e8:92:3e:c8:
0d:68:f1:00:cf:ab:04:1c:af:2c:44:99:18:c9:2e:56:5f:96:
51:a2:42:d6:3e:77:f4:7e:5b:43:f6:b0:d9:23:01:f7:3b:02:
a6:9c:52:88:b8:c2:31:cb:d9:7f:5b:4f:36:f8:8f:d9:91:fe:
d3:9a:0f:c4:e2:6d:b4:ba:1a:78:ae:87:c3:5c:91:fd:9c:77:
db:a2:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org