Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71836FDC9B5A11EF833BB6B5762E951A.roa
File: 71836FDC9B5A11EF833BB6B5762E951A.roa (raw, json)
Hash identifier: hpgQDaLQyPeLv/C9gtpWwO6Uy+C80CTFpgnojV/UV8M=
Subject key identifier: EB:DA:F1:80:12:1B:D6:56:7A:89:03:6D:92:48:BE:B6:CA:30:E5:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010777
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71836FDC9B5A11EF833BB6B5762E951A.roa
Signing time: Tue 05 Nov 2024 09:43:43 +0000
ROA not before: Tue 05 Nov 2024 09:43:39 +0000
ROA not after: Fri 06 Dec 2024 09:43:39 +0000
asID: 395793
IP address blocks: 154.196.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67447 (0x10777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 09:43:39 2024 GMT
Not After : Dec 6 09:43:39 2024 GMT
Subject: CN=6729e8ce-8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:0c:0d:47:a1:78:6d:a8:13:5f:51:7e:76:
84:34:35:3a:8a:d4:57:68:4d:17:44:85:53:40:3c:
ec:11:63:ae:52:3a:36:d4:4e:7d:48:c7:4a:7e:85:
4f:f0:be:a4:ee:0e:01:b1:88:c5:99:e4:38:f3:3b:
d0:f6:eb:be:b5:99:5d:73:84:61:33:d1:f4:e5:39:
86:48:19:1f:53:28:c5:b3:5b:02:1d:53:e3:2e:f9:
40:7c:1f:fd:85:f5:61:14:8d:73:49:31:14:4b:46:
b4:c1:a9:f7:70:63:9d:02:2e:a6:b5:e6:fb:9a:16:
7b:d3:f7:80:65:83:79:42:e3:9e:b1:71:81:77:81:
e5:8e:02:1d:57:84:0f:70:6a:97:f9:c2:8e:89:57:
fd:17:f9:e2:e6:c9:f9:02:15:29:66:85:31:b8:cc:
8c:9c:51:3e:64:9d:ef:7a:06:22:64:07:af:3d:2c:
1d:a2:a1:b9:7c:90:bd:9a:b1:b0:5d:79:6e:79:19:
50:24:81:45:52:56:bb:59:17:5b:1e:25:2a:96:45:
2c:77:36:13:57:17:68:70:e6:ae:78:9e:8d:51:bc:
f9:05:45:37:3b:75:e8:f6:9a:bc:ab:b0:44:08:cd:
66:43:69:40:6a:f6:1a:5b:2d:ac:91:4a:8c:fb:6c:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:F1:80:12:1B:D6:56:7A:89:03:6D:92:48:BE:B6:CA:30:E5:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71836FDC9B5A11EF833BB6B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0/22
Signature Algorithm: sha256WithRSAEncryption
91:46:42:db:65:48:28:c1:49:f3:ab:ca:fb:9c:b7:1f:41:8a:
47:82:96:54:3d:04:a3:8d:a1:fc:e0:56:7a:5c:96:9e:9d:a6:
ba:2c:56:a0:dd:d0:9d:df:07:4c:9f:f0:9d:10:62:8e:b2:60:
cc:db:29:0a:35:e8:a7:40:04:7f:68:2f:70:1e:1d:1a:d5:26:
15:6c:81:d3:2c:18:e3:59:15:da:5a:e8:66:ce:e7:68:6f:42:
04:0f:82:dc:c9:3c:4b:3d:70:a8:a9:60:68:ac:80:5e:89:e1:
15:13:b5:cb:3f:d5:0e:07:9c:a9:ff:02:32:d9:29:50:54:00:
d6:7d:2a:38:82:9a:43:67:f6:14:5a:f4:09:28:f8:f1:54:48:
32:9b:f2:c7:7b:d3:f3:d6:8a:74:f6:02:50:81:c4:56:ea:9e:
8d:7b:d9:9c:9a:00:4a:0f:db:ae:7a:02:f1:33:24:40:a7:ca:
1a:6f:65:9e:84:e6:00:92:bd:9d:99:71:95:a3:d8:7d:a2:d3:
86:7d:85:a5:11:d0:5e:93:56:c3:7d:0b:fa:c8:8b:d2:f6:39:
82:5c:66:22:bf:b2:66:a1:6e:8f:f4:4f:15:9f:c3:46:ae:68:
25:cc:1f:3a:2e:3c:4f:74:44:28:18:48:9a:bd:12:5e:ca:da:
99:ad:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:42 2024 by rpki-client on console-fra.rpki-client.org