Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647AB7425F8611EFA3D01A99762E951A.roa
File: 647AB7425F8611EFA3D01A99762E951A.roa (raw, json)
Hash identifier: HK1o3lqGyHt0Gs/YIocqrHxO0YXth5Gsmhaf07oedRo=
Subject key identifier: C5:86:41:3E:D7:9C:B2:A5:29:54:40:BA:76:2D:1F:C7:20:33:79:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E39F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647AB7425F8611EFA3D01A99762E951A.roa
Signing time: Wed 21 Aug 2024 06:27:09 +0000
ROA not before: Wed 21 Aug 2024 06:27:06 +0000
ROA not after: Tue 13 May 2025 06:27:06 +0000
asID: 18013
IP address blocks: 154.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58271 (0xe39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 06:27:06 2024 GMT
Not After : May 13 06:27:06 2025 GMT
Subject: CN=66c588bd-7df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:fe:27:28:8a:43:8f:50:12:87:fd:68:83:
76:61:53:e1:e9:52:d5:fe:be:a8:f3:ec:08:a8:f5:
09:03:72:55:1d:70:fb:2a:b0:22:71:95:a0:cf:45:
dc:84:09:b7:39:cc:99:93:6e:9c:be:5b:54:bd:3e:
61:e6:bf:c4:f6:c7:99:61:24:42:c6:2c:18:d6:bc:
2b:8f:b6:26:29:bf:30:53:ef:ac:c7:b0:d7:4a:ed:
88:73:c6:89:39:64:7d:04:fd:b8:9d:d1:05:9b:23:
90:30:8e:0c:1a:3e:12:85:88:e5:3e:2e:37:5a:b8:
93:81:01:af:a1:8b:7f:c8:5e:51:18:45:60:88:03:
a5:0f:fb:9c:df:ae:7f:27:27:44:22:41:f0:2e:7d:
c3:55:2e:ec:e6:c9:f6:48:e1:d3:ae:eb:a1:67:e4:
30:07:21:ae:e8:5d:5b:6f:a6:ae:8a:ee:ee:cc:90:
8d:d6:0c:26:6d:8b:ea:78:8e:10:b7:76:34:f9:eb:
78:0c:fc:d2:b7:f6:b2:8a:7b:8a:c8:9c:0d:23:bb:
6d:10:6a:35:5b:7e:84:06:9c:19:70:56:e7:26:cc:
03:3c:dd:fe:dc:3c:bf:f8:05:af:d4:da:dc:95:f5:
09:7b:0d:19:91:84:ef:1c:64:b6:5a:8a:f2:e9:b1:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:41:3E:D7:9C:B2:A5:29:54:40:BA:76:2D:1F:C7:20:33:79:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647AB7425F8611EFA3D01A99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
18:58:58:ae:a2:9b:23:fb:56:35:77:83:ce:fd:7d:9a:e2:b5:
14:53:9b:8a:d5:ac:2e:58:6c:d8:bb:eb:fb:9f:ea:78:7b:59:
78:8d:d1:ab:b9:ba:34:12:89:36:e5:67:d1:d5:b3:bf:fe:a4:
c2:30:f4:86:ff:6e:4a:a9:5f:67:a4:c0:30:59:32:56:c8:88:
5f:d2:14:20:10:c4:9b:cc:f3:94:21:f5:26:14:6c:6a:12:a0:
43:ba:a7:58:ac:5e:17:bc:ed:71:70:3c:8a:e9:20:4e:e8:04:
e3:ab:19:f0:e0:f3:ef:5a:74:e8:eb:da:14:ee:cb:15:59:a6:
50:44:42:04:fb:2a:48:f6:20:df:c1:19:60:5a:8a:61:5e:3f:
3c:17:54:1f:1c:02:d4:61:28:c6:c9:96:01:36:44:46:22:5a:
c1:12:25:2e:9a:f8:98:4a:39:cc:dd:44:fb:f3:27:af:a5:29:
d5:4c:cc:93:b7:4e:08:58:4c:39:13:1d:8c:a9:ee:2d:3b:1c:
8f:46:50:b5:be:96:ee:16:a9:5b:36:46:a4:f5:15:f1:53:3f:
51:cc:6b:3a:e9:c9:e9:cc:78:f0:60:bf:cc:67:c6:cb:5c:48:
3b:d3:03:04:d2:4b:48:11:a9:9d:cb:d1:86:0b:7a:a2:c9:e3:
4f:2b:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org