Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7680EF18A92011EFBDA8F385762E951A.roa
File: 7680EF18A92011EFBDA8F385762E951A.roa (raw, json)
Hash identifier: NT6JSt9EMuKsch7jbmKXtdgqjYMa/mgV3S30KjSeUo8=
Subject key identifier: 34:F8:3F:AE:B1:98:AD:1A:72:63:F8:52:96:6B:63:96:BC:7F:A3:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01115F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7680EF18A92011EFBDA8F385762E951A.roa
Signing time: Fri 22 Nov 2024 22:23:56 +0000
ROA not before: Fri 22 Nov 2024 22:23:52 +0000
ROA not after: Tue 03 Dec 2024 22:23:52 +0000
asID: 62240
IP address blocks: 154.195.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69983 (0x1115f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:23:52 2024 GMT
Not After : Dec 3 22:23:52 2024 GMT
Subject: CN=6741047c-89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:ef:ee:fe:69:af:56:f5:98:70:26:00:1c:
f6:cd:e6:d0:71:81:08:83:c0:58:d0:1f:31:a0:4c:
ef:03:bb:38:80:4f:b3:59:53:6b:15:89:34:25:0d:
6d:29:9d:6a:40:93:e4:8e:41:ee:eb:89:16:e0:88:
04:52:96:7c:43:1d:da:99:e9:ba:ec:6c:ed:97:3a:
58:55:75:f2:11:50:c3:35:8f:0f:6f:da:ba:18:2e:
82:0d:ee:83:74:54:74:db:48:6d:4b:5f:17:27:01:
5b:4d:0e:32:a2:82:e2:fa:6b:64:78:f6:7b:fc:1d:
59:06:52:28:aa:bb:f5:33:d5:2c:f0:19:79:d6:14:
c8:55:c7:10:c0:82:1a:cc:fd:00:e6:17:d5:8e:84:
aa:22:3e:77:0a:19:75:c0:25:8a:b2:3e:ce:56:f3:
7c:ff:c8:bb:42:15:14:fd:c5:5f:5f:65:43:1b:81:
b1:75:02:e0:70:e9:59:eb:0b:1a:f2:4b:b1:d2:c1:
80:87:42:e1:af:df:f1:0f:8d:6d:50:57:68:4b:e0:
b7:fb:62:74:42:8a:3c:97:d3:6f:ae:f5:f2:00:f6:
fd:d8:be:6f:07:1c:2c:f8:70:e2:78:1f:20:6f:95:
c3:a7:bf:b2:68:36:ad:45:f6:f1:d6:0c:63:f0:0f:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:3F:AE:B1:98:AD:1A:72:63:F8:52:96:6B:63:96:BC:7F:A3:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7680EF18A92011EFBDA8F385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.7.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1b:4f:b9:20:de:07:9c:a3:96:22:bb:6f:03:7b:b8:3e:69:
d4:10:d1:64:be:89:46:22:ee:0a:aa:7e:3e:b0:e2:0e:d3:24:
f3:b5:d9:62:d4:35:af:cd:e6:56:72:46:fe:5b:50:59:4f:74:
34:a4:45:0f:2f:ba:3a:60:27:fc:78:b4:d3:c4:e4:c1:ff:88:
2d:13:98:b5:97:f3:d8:2b:31:ba:52:6c:42:60:16:72:60:e2:
b8:80:4c:dc:d1:ca:b8:eb:aa:82:7f:19:31:c1:8e:7d:03:4f:
ab:3e:06:8a:30:71:e4:68:38:ba:8e:f0:73:4b:d9:71:51:98:
98:53:22:20:be:54:a1:4d:d1:ad:82:d0:45:de:32:9c:1b:c3:
c1:03:b5:c3:db:d0:cc:44:9e:ea:0e:c9:22:0b:90:f0:c0:5a:
41:89:25:f5:34:bf:e1:39:75:07:3b:3c:4e:d0:86:ab:eb:52:
33:f7:9b:a9:32:e8:f6:7b:e3:0e:22:d6:84:2f:48:64:fb:3b:
e7:2e:66:bc:d7:08:74:5e:26:57:b3:50:8b:62:58:4d:6c:cf:
24:e1:69:a1:87:98:c2:78:ab:53:2c:90:9e:08:87:d2:59:71:
39:b0:8b:5e:29:c4:af:20:96:57:2d:ca:d3:ac:f3:7e:58:93:
b4:16:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:18 2024 by rpki-client on console-ams.rpki-client.org