Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636CE470A8E111EF965CAD7D762E951A.roa
File: 636CE470A8E111EF965CAD7D762E951A.roa (raw, json)
Hash identifier: Zuz/aLTg4FpS1ZuQUljmoxoxVoRufe6kpmi5bsKweoc=
Subject key identifier: 2C:26:7F:44:76:1F:07:57:82:B9:A2:ED:03:2C:18:22:12:FC:4B:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011097
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636CE470A8E111EF965CAD7D762E951A.roa
Signing time: Fri 22 Nov 2024 14:52:26 +0000
ROA not before: Fri 22 Nov 2024 14:52:22 +0000
ROA not after: Tue 03 Dec 2024 14:52:22 +0000
asID: 62240
IP address blocks: 154.194.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69783 (0x11097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:52:22 2024 GMT
Not After : Dec 3 14:52:22 2024 GMT
Subject: CN=67409aaa-5ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:fd:64:05:f8:ef:bc:eb:05:ba:24:06:c3:
52:07:41:0d:5f:f9:38:ef:35:58:87:a8:fe:89:ba:
da:12:6a:e5:39:3c:94:c2:79:b1:5a:8f:9a:a1:58:
7f:20:0c:8e:ab:c9:da:fd:90:22:e5:ce:43:c1:2d:
5d:98:17:79:78:ba:cd:a4:53:75:e7:52:a0:9d:58:
4a:33:52:fa:54:fd:2c:87:bb:47:14:a6:9c:7d:0b:
03:19:01:01:1c:06:c5:4c:08:61:5b:2e:5e:c7:5b:
76:8d:1a:63:85:c9:d1:70:b2:c8:1a:4e:d3:17:90:
08:8e:eb:84:cb:53:87:43:6d:c0:4b:e4:d8:e5:83:
93:ca:72:63:56:f4:01:8c:66:fa:2c:32:9a:17:8b:
3b:86:fe:af:ec:7f:42:35:31:7b:65:ec:7b:6c:36:
89:58:06:ad:fb:67:55:ba:15:3c:1b:a0:5c:ef:05:
a5:fc:e6:a9:64:98:2b:d6:08:65:6e:e1:cc:b2:c9:
a6:b2:59:02:16:aa:54:dd:96:5e:58:12:a8:fb:36:
f7:1e:63:2a:53:16:90:a7:02:f4:c3:a7:d9:b3:4e:
86:9d:11:af:0e:61:60:e0:5d:d9:e5:b6:b0:c7:0e:
bb:5e:2b:fc:e1:66:61:0e:e3:c1:bd:57:ce:f3:e8:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:7F:44:76:1F:07:57:82:B9:A2:ED:03:2C:18:22:12:FC:4B:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636CE470A8E111EF965CAD7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:07:1b:0b:f6:c9:39:a3:bf:56:0c:6e:79:ec:65:47:d1:2a:
74:98:28:82:af:98:b2:72:6d:02:01:85:9b:75:90:7a:98:8d:
ef:20:db:9c:9a:34:92:da:16:5f:90:14:cd:3c:9a:3b:f0:6c:
5d:ee:a5:46:6d:94:fa:1e:70:be:93:99:e4:49:63:18:d5:60:
1a:c1:44:5c:df:bc:2b:51:e5:0c:21:ae:e4:d7:89:7f:85:22:
a8:e8:c7:b6:01:3a:e2:13:05:58:78:11:0f:66:84:f0:5d:d4:
30:17:d2:1f:23:a4:a0:95:c0:07:54:ec:c1:c0:f3:db:98:4b:
ed:5b:5b:46:bc:0f:81:da:81:87:24:66:4b:2a:08:70:4c:74:
2f:0e:71:a9:33:7c:37:c3:57:df:9f:9a:f4:da:67:e1:1b:bc:
ca:03:38:ab:a2:05:f2:6b:31:3d:26:1e:2d:62:cc:b3:ca:a5:
0c:58:da:bd:10:ad:47:53:7d:e0:f5:7b:0c:27:4e:1b:f5:a4:
a7:cb:55:37:b6:84:91:05:c9:36:d2:79:32:97:53:4f:2c:52:
78:b8:91:c3:0e:cb:ef:1d:f9:d5:37:ed:42:a3:eb:77:2e:2c:
19:1c:92:b4:42:70:0b:cb:65:f6:84:70:4b:ac:d1:94:d7:4f:
0b:f0:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:14 2024 by rpki-client on console-ams.rpki-client.org