Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784BDE6A736611EF84D506BF762E951A.roa
File: 784BDE6A736611EF84D506BF762E951A.roa (raw, json)
Hash identifier: DMb6N5Xx7Zn/kXpcOIz4SBX7nnhyh9SSXAWJpDG98mQ=
Subject key identifier: 01:71:8E:FD:26:D1:B2:9E:E1:C9:A6:41:E3:BA:DD:47:8D:45:C7:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784BDE6A736611EF84D506BF762E951A.roa
Signing time: Sun 15 Sep 2024 13:29:01 +0000
ROA not before: Sun 15 Sep 2024 13:28:57 +0000
ROA not after: Sat 30 Nov 2024 13:28:57 +0000
asID: 136970
IP address blocks: 154.197.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61202 (0xef12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:28:57 2024 GMT
Not After : Nov 30 13:28:57 2024 GMT
Subject: CN=66e6e11d-e6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:a0:2c:b4:5d:0c:69:73:33:a4:80:16:8e:
47:c2:04:38:a5:1d:0d:b0:48:b4:dd:9e:0f:71:cb:
7d:60:6a:72:c1:3a:27:9e:9f:bc:97:21:a5:96:81:
04:30:c4:d1:d5:88:b7:be:29:21:ac:c9:c6:ca:4c:
12:e1:31:a7:3d:80:ca:1d:80:ad:20:fd:a4:9e:6e:
cd:35:9b:de:7e:c8:fe:fd:30:c2:5c:ad:69:d4:fb:
06:f1:83:eb:d8:c9:8b:58:97:80:00:ee:25:24:73:
91:e2:7b:b5:d4:fc:0c:0d:0a:23:5f:78:b7:3a:48:
65:fb:f1:bf:7e:48:26:46:fa:8c:8c:f2:8a:5c:a0:
96:98:da:5a:68:16:eb:73:b5:69:98:89:20:7d:02:
67:be:da:85:0c:4f:98:71:41:09:a9:cb:6b:95:67:
6f:86:37:5a:53:77:cd:eb:45:f6:c9:98:02:c0:5f:
c0:64:58:09:b2:66:a3:01:c9:ae:f3:00:46:16:01:
27:cb:c9:ae:fc:07:4e:46:61:8f:f4:25:f7:a6:64:
8a:76:e8:a4:e6:54:6a:84:41:43:8d:74:dd:5e:43:
98:6d:ec:63:27:20:74:ad:e3:26:17:4b:33:44:66:
70:d1:4e:a1:c8:08:77:b8:7a:b4:06:bc:7d:01:e3:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:8E:FD:26:D1:B2:9E:E1:C9:A6:41:E3:BA:DD:47:8D:45:C7:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784BDE6A736611EF84D506BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e5:4b:c8:7c:ad:e0:3d:4d:ac:f7:59:d7:39:22:c6:32:ac:
97:48:53:5e:28:07:dd:c4:1e:73:a1:55:8f:e8:ef:b2:39:61:
1e:cf:99:69:a6:be:10:3a:3a:ed:5c:72:a7:16:ec:3e:86:e3:
4f:32:7f:0e:41:3d:8f:e3:e2:b8:76:f5:a7:5c:8a:26:f9:38:
bd:ea:4d:9b:80:d6:98:97:37:a6:7a:4e:ae:21:54:a0:eb:b0:
34:be:11:99:9a:0e:9e:17:d3:b7:84:6a:47:2b:43:65:14:5c:
ab:ee:e5:9c:10:7e:b4:27:c7:e9:c6:32:9d:5d:1a:4a:ed:d4:
0c:42:87:d9:bd:84:6e:24:14:58:84:14:48:25:80:ae:80:3d:
5c:01:ff:38:a3:f6:b5:ce:4d:a8:34:c6:3e:43:04:a8:76:6b:
d7:f6:bc:3a:9d:22:b8:ca:30:9d:b4:2f:56:78:71:1a:fd:ca:
7a:f7:56:35:43:1d:cf:09:54:d3:13:f2:a1:4f:d3:76:08:d2:
f3:7d:a9:a0:29:0a:71:db:ca:14:59:a8:a3:50:1e:a0:48:90:
c5:65:d4:69:7f:d8:51:50:62:3e:bb:18:be:b8:bc:7e:c5:b7:
3d:02:03:2c:ad:53:9d:40:1b:40:c9:ff:1e:58:03:ac:ae:54:
36:d0:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org