Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587FA674A8F011EFB4CBD05C762E951A.roa
File: 587FA674A8F011EFB4CBD05C762E951A.roa (raw, json)
Hash identifier: JINnfeO8VZ2sWCS6InfZua9m91RWv+krgjNY6JRoMW0=
Subject key identifier: DB:D7:82:B8:90:4C:7B:1A:0C:51:B1:A0:79:1B:BC:42:F7:B0:9C:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01114B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587FA674A8F011EFB4CBD05C762E951A.roa
Signing time: Fri 22 Nov 2024 16:39:30 +0000
ROA not before: Fri 22 Nov 2024 16:39:26 +0000
ROA not after: Tue 03 Dec 2024 16:39:26 +0000
asID: 62240
IP address blocks: 154.195.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69963 (0x1114b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:39:26 2024 GMT
Not After : Dec 3 16:39:26 2024 GMT
Subject: CN=6740b3c2-9d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:d2:65:35:cb:60:03:ba:68:0c:dd:2c:8e:
51:45:9a:aa:3c:10:f7:07:b7:25:f0:01:42:df:32:
db:d1:54:32:fc:8d:8e:df:2f:86:f9:ab:82:6a:dc:
e4:5b:c7:fe:44:f1:9c:a6:79:ca:f7:33:2e:1d:d8:
3c:42:c4:26:64:a4:86:d5:1f:1a:e9:2a:62:f6:bb:
1e:0c:51:7b:f9:e3:7b:0a:7e:40:b9:3a:a0:01:b8:
43:5f:dc:09:c9:a2:18:d9:4a:82:03:26:37:b6:9d:
9d:4f:f2:37:45:91:68:93:c8:df:e0:dd:81:8b:2b:
70:b9:da:32:e8:53:5a:00:e7:6a:81:5f:90:19:05:
f2:0a:ef:c9:ef:34:a9:99:dd:1f:73:87:dd:a2:9b:
5e:25:fb:2b:11:14:41:57:c7:27:77:de:cf:f0:e4:
a0:0f:81:98:23:b8:d6:80:9b:b3:ab:b9:e6:8e:19:
3d:cb:ca:3f:6b:80:92:90:c7:88:2e:0f:fb:ee:ab:
f1:88:ff:f5:91:9f:43:7e:29:ba:a1:bb:19:52:a0:
4a:e0:9a:fc:a9:3d:06:e2:6d:d9:9b:f5:4d:b4:3b:
9c:39:a0:47:cd:7f:1a:53:8a:ee:74:55:50:c5:a0:
55:cd:1e:57:9f:d6:3c:e7:71:91:fd:27:90:ab:c8:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:82:B8:90:4C:7B:1A:0C:51:B1:A0:79:1B:BC:42:F7:B0:9C:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/587FA674A8F011EFB4CBD05C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8a:d0:ed:f5:22:3e:41:15:06:3b:dc:92:87:31:91:87:88:
e1:df:d5:79:8d:de:d7:ab:3d:32:05:9e:be:35:28:23:8d:28:
80:ac:45:14:3d:d2:ff:52:d2:e3:26:14:35:7d:8c:d6:4a:96:
6f:ed:34:ba:69:7e:7c:dd:fd:0a:c2:1a:34:0f:02:fd:54:76:
bd:9b:0f:c2:a6:06:24:d5:65:97:85:d6:f6:de:e8:1c:2c:b2:
d2:92:1f:b9:53:f1:a1:af:ef:29:31:77:2e:37:e8:7d:a7:f4:
f3:68:80:1f:c0:e9:61:08:50:7c:bc:bb:24:6c:a9:88:77:e5:
c4:4a:b2:13:9e:b0:bd:d4:e1:c9:0c:bc:0e:10:59:7e:42:d9:
cc:28:2a:33:cc:f2:fe:56:42:45:d3:2a:13:3e:4c:b9:e2:2f:
25:2f:8e:64:67:08:74:32:84:38:71:86:66:7c:e5:54:00:47:
4e:11:ca:2d:48:9c:ac:59:83:4b:6a:d5:d9:1a:50:8c:aa:34:
5d:32:be:2e:50:57:e0:a4:c5:b3:fe:38:69:4d:f0:7b:b2:d6:
95:88:bd:af:41:38:79:5d:67:73:da:be:06:df:79:ce:b0:a1:
c5:5c:27:3b:d4:a4:c5:58:71:ac:83:74:4d:5f:7e:df:4e:31:
39:68:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:31 2024 by rpki-client on console-fra.rpki-client.org