Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C7013C95DA11EFBEB57082762E951A.roa
File: 58C7013C95DA11EFBEB57082762E951A.roa (raw, json)
Hash identifier: 2zEUuMA5T4QIKkp49f3tbnM1Qhk2vL6y9lQ/yVuq2XU=
Subject key identifier: 27:71:E3:EF:DF:85:0E:40:BC:EA:C1:9E:96:6F:4B:E3:79:B8:85:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010390
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C7013C95DA11EFBEB57082762E951A.roa
Signing time: Tue 29 Oct 2024 09:44:10 +0000
ROA not before: Tue 29 Oct 2024 09:44:06 +0000
ROA not after: Tue 26 Nov 2024 09:44:06 +0000
asID: 133180
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66448 (0x10390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:44:06 2024 GMT
Not After : Nov 26 09:44:06 2024 GMT
Subject: CN=6720ae6a-f3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:b9:da:0f:c4:ee:c2:48:e1:1c:c8:55:5a:
0b:32:cd:c3:5a:47:9d:b1:7a:c7:4f:6c:8c:7d:d8:
70:86:d4:04:0d:dc:8f:41:a7:5c:0c:d1:7f:09:43:
42:41:fa:a4:65:16:e7:d6:d8:a4:cf:0a:9d:dd:61:
db:ea:ef:f6:5f:17:5c:d1:a7:08:7a:e7:7a:f9:22:
7b:55:03:12:d5:d2:14:d6:83:d8:8c:10:bd:08:5e:
52:b1:14:6c:8a:8d:fe:6f:c9:a5:0a:71:ab:b7:4f:
fe:06:b2:b4:5c:bb:71:85:77:cb:e1:27:91:b0:e0:
20:ad:26:94:24:cc:ce:fb:8b:6a:11:e4:8d:b9:60:
f7:fc:be:8b:28:ec:d0:b3:a9:32:f7:be:1f:c6:08:
57:4f:40:94:02:fe:07:10:de:13:ae:e8:54:98:64:
c9:79:ba:20:42:d0:7c:ba:65:07:71:33:2a:a2:7e:
8b:7e:ff:55:b0:f0:82:c3:56:59:7a:82:eb:da:7f:
26:f7:b4:0d:38:9b:2b:7e:db:5b:a5:48:ff:bb:94:
de:a2:48:09:15:cd:d0:00:e5:2e:70:a2:a5:66:cb:
15:e5:40:01:ff:15:ed:0b:5d:e6:be:82:a0:d2:bd:
83:d2:bd:3c:51:3a:8f:81:fa:1b:8f:da:df:2c:ac:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:71:E3:EF:DF:85:0E:40:BC:EA:C1:9E:96:6F:4B:E3:79:B8:85:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58C7013C95DA11EFBEB57082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
87:3a:80:f4:b6:f7:dd:f5:1f:fc:84:11:f5:5f:89:43:60:ae:
83:68:5e:da:31:de:66:25:93:fc:5d:4e:40:05:09:5b:42:14:
0c:97:55:0a:8b:89:81:a1:71:6e:72:7c:97:5e:a6:e2:c2:b5:
8e:e7:5f:44:47:07:63:6b:e1:5e:f4:af:12:74:11:4f:86:c3:
70:4d:da:6f:e9:f7:35:8d:a1:47:e8:9f:b5:05:77:b5:52:cc:
92:56:fa:f8:1e:3b:5d:74:bc:09:16:7e:d4:05:19:7a:25:4e:
2d:0b:01:65:d4:8e:bf:d6:51:86:2c:9b:0e:be:86:f2:b9:47:
7d:20:64:4e:70:cd:09:df:10:ff:51:c0:cd:58:ff:0a:88:fa:
a9:2c:99:93:87:c6:89:5d:42:fc:e1:90:af:0c:3f:4a:13:d0:
56:a4:6e:7b:4f:eb:f8:63:9f:17:26:fb:00:90:12:c3:5f:b9:
3f:58:95:7c:86:68:b5:a5:2b:26:19:ca:bb:11:7b:1a:f4:fd:
ae:f2:db:3c:2f:8a:71:ac:c2:bf:3e:7e:2b:12:ac:85:04:3c:
ff:dc:4e:a6:9b:da:84:15:50:ce:a4:04:bd:76:a2:a5:42:12:
5e:d1:6c:77:1d:14:6c:14:12:8c:e2:d4:29:8f:e9:82:81:2b:
10:a6:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:11 2024 by rpki-client on console-ams.rpki-client.org