Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7FB316677011EF83DCE264762E951A.roa
File: 5C7FB316677011EF83DCE264762E951A.roa (raw, json)
Hash identifier: q17OQ4XwVHgkWd6hH4DefGB/WkTs7qIkI3RaCY+QUnI=
Subject key identifier: EF:A7:2A:00:F1:64:EC:8C:9F:F5:65:25:77:40:9F:AD:31:0D:1D:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E81F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7FB316677011EF83DCE264762E951A.roa
Signing time: Sat 31 Aug 2024 08:09:36 +0000
ROA not before: Sat 31 Aug 2024 08:09:32 +0000
ROA not after: Mon 21 Jul 2025 08:09:32 +0000
asID: 136933
IP address blocks: 154.218.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59423 (0xe81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 08:09:32 2024 GMT
Not After : Jul 21 08:09:32 2025 GMT
Subject: CN=66d2cfc0-05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:c8:bc:cb:9e:0d:24:53:5c:88:c0:6f:66:
21:98:c4:85:87:b7:39:04:a6:9f:53:5e:fe:38:a5:
00:46:0e:23:3a:15:71:ec:79:06:e5:97:46:cb:11:
e4:fa:0e:bc:f9:54:01:78:1f:e1:ba:f9:bc:b9:6e:
d3:a6:90:eb:29:71:5a:f9:98:fe:be:08:b9:9a:ae:
a3:95:ca:98:0a:cc:1a:9c:09:9a:b6:7d:72:4d:ce:
0e:01:e3:13:ba:55:90:72:07:9b:0f:e7:65:63:85:
eb:60:a8:e5:e7:3e:6e:3b:cd:af:61:7e:03:80:29:
49:19:3b:07:f6:5f:d4:d8:9d:56:5f:bd:f4:f2:19:
b3:4e:34:ce:25:1d:4e:28:82:b1:ef:55:ee:54:67:
eb:ae:43:cf:e6:94:6a:14:c7:a1:65:96:79:c7:42:
4f:f1:7d:73:3e:aa:87:f1:fc:a2:dc:19:a0:62:0c:
68:8e:3e:e6:f1:0f:af:c5:ca:9b:9d:8b:6b:f5:31:
d4:85:1a:ec:41:5d:b6:e6:4d:01:53:85:e5:f3:d0:
80:6c:11:35:68:bf:ac:6e:37:c1:96:d1:f6:6c:1f:
0e:f7:b5:d4:91:06:b8:c0:af:dd:a8:2d:7e:c3:a0:
b6:14:20:e2:95:d2:5e:f4:14:dc:96:78:e6:d4:87:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:2A:00:F1:64:EC:8C:9F:F5:65:25:77:40:9F:AD:31:0D:1D:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7FB316677011EF83DCE264762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:c3:51:0e:26:7b:a1:81:12:e2:e0:94:25:4b:aa:71:ab:
9b:d8:ce:b8:e9:f0:ac:63:16:ac:27:24:b6:ba:c8:ef:36:a9:
8b:98:62:f7:e7:59:99:7c:02:56:02:a1:29:47:f8:74:5a:bc:
2f:b9:83:5d:ec:a4:89:88:a1:95:a4:cb:71:02:dc:13:ea:b2:
bb:d1:c0:cf:68:84:cb:45:20:b0:62:a2:93:2a:93:ce:92:b7:
d2:37:03:be:c5:bb:c6:ec:bd:b1:7e:5d:0a:5f:70:b0:b7:e9:
92:72:55:7f:0c:1b:e0:39:3d:c6:e8:e9:da:a7:e8:24:d7:47:
1c:66:59:af:b6:82:7a:e3:6a:87:28:db:e0:e8:38:7c:59:48:
57:9c:7f:b9:2a:b3:db:e4:3d:a8:66:37:99:dd:ce:67:cc:0a:
cc:d1:ad:b7:e2:a1:fb:e2:67:cf:35:c9:42:73:f3:d9:d3:4d:
3c:ea:40:14:25:a1:e6:92:a7:3c:88:0d:64:3c:a0:48:fd:98:
55:03:bb:00:ce:ca:aa:99:6c:50:82:14:cb:1f:c3:63:b4:0e:
fa:bd:c8:27:ff:b9:86:30:bf:81:a5:9f:99:01:68:39:08:ef:
30:6a:64:2b:b6:4c:b1:b5:99:a0:69:07:02:32:93:a1:51:28:
83:a6:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:26 2024 by rpki-client on console-fra.rpki-client.org