Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689854909D9F11EF84036289762E951A.roa
File: 689854909D9F11EF84036289762E951A.roa (raw, json)
Hash identifier: S6cLpnnoj/L0kodKXeKNFxF3Wkh8uLqONARD1rLtOnE=
Subject key identifier: 20:3B:22:CE:17:F1:38:08:39:F9:B1:15:31:8E:71:C0:04:06:5E:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689854909D9F11EF84036289762E951A.roa
Signing time: Fri 08 Nov 2024 07:02:25 +0000
ROA not before: Fri 08 Nov 2024 07:02:22 +0000
ROA not after: Tue 10 Dec 2024 07:02:22 +0000
asID: 272854
IP address blocks: 154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68000 (0x109a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:02:22 2024 GMT
Not After : Dec 10 07:02:22 2024 GMT
Subject: CN=672db781-635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:a5:1a:17:85:72:1c:4b:cf:4e:40:c4:4d:
a4:b4:2d:e2:6e:49:07:8a:77:69:21:b5:26:98:96:
c6:90:15:7d:c0:61:69:db:63:b2:0a:ef:d2:f8:be:
71:33:24:19:61:64:90:cc:8a:5d:f6:be:dd:24:b9:
ed:32:1e:71:8c:b9:7e:7b:d3:b6:f5:93:41:8e:d1:
67:eb:6c:80:95:8e:02:40:37:ab:52:b0:18:3d:08:
9e:c2:85:e9:aa:69:31:60:a0:68:dc:f9:fc:25:cf:
cd:0f:96:bd:7e:71:36:fe:70:64:eb:e8:45:ce:e2:
89:8f:4e:9b:09:24:b3:5d:86:77:d0:e2:77:6f:ce:
44:ae:a6:76:f6:63:26:f4:40:84:c1:6a:dc:02:bc:
ac:4c:0f:bc:4d:43:64:2e:64:34:78:cf:da:3f:d6:
0b:b8:6f:41:8c:90:0b:3c:7d:0b:3c:5e:70:22:06:
b0:e9:ad:fb:97:0c:0a:64:a3:6e:dc:9a:0d:59:a2:
5c:e5:cc:a9:5c:0a:5e:49:9f:3d:f5:8f:d6:0d:13:
03:1f:03:32:ac:bc:6e:7a:8d:c5:59:ab:5d:0f:2b:
78:4f:6a:f2:6e:c6:f7:63:e9:cd:9a:d3:a5:d8:5e:
83:5f:f3:15:6c:f3:55:ee:a7:bb:39:96:a4:5e:e7:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:22:CE:17:F1:38:08:39:F9:B1:15:31:8E:71:C0:04:06:5E:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689854909D9F11EF84036289762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7e:90:c9:38:90:3f:45:e5:1d:3a:8c:34:62:92:0a:02:86:
3e:df:2a:a3:f3:1b:fe:6a:d8:54:40:97:c4:b5:57:50:29:7e:
0f:ff:1f:43:55:83:df:6a:0f:5c:14:12:0b:f9:5c:d8:b5:00:
01:ce:ac:56:5e:37:a5:4a:b0:a2:75:e5:06:2f:f2:6d:49:43:
7e:a2:91:1a:33:12:c0:70:58:56:7f:28:d9:b4:f9:69:df:7f:
40:50:48:f1:8c:a0:64:69:a0:47:50:57:3c:be:3c:95:18:64:
d5:84:84:4f:38:4d:ec:19:19:b6:64:c3:b3:96:46:05:8a:c0:
a3:a2:f0:9c:07:2e:cd:73:56:2a:67:b4:81:52:8a:77:c5:83:
c1:49:1f:02:a2:bd:01:03:7d:4a:85:ec:be:d2:80:b6:d7:61:
99:fd:d0:dd:39:34:69:93:e0:a1:36:c1:96:80:1d:e9:d5:8f:
ba:ce:e8:27:42:0a:df:63:98:b5:e4:56:fb:61:84:3b:c8:83:
7a:45:62:b0:cd:94:83:01:b3:ab:56:5f:f1:b1:f8:f1:25:f4:
f3:19:6c:df:c4:b2:a9:7f:1f:3e:94:19:a3:cd:46:00:ef:bc:
0e:97:cf:95:cc:ea:c1:03:0d:de:aa:55:fe:c0:14:51:c7:a3:
3a:e5:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org