Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C2B8450986311EFAAB5F57D762E951A.roa
File: 7C2B8450986311EFAAB5F57D762E951A.roa (raw, json)
Hash identifier: QQSVvE2CazCwjyIN67XTFmjkH+sd58XiCXRVhwyqXgA=
Subject key identifier: 88:75:65:40:E7:37:BA:88:88:00:03:CC:B1:DD:97:FF:F5:FB:EB:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01050F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C2B8450986311EFAAB5F57D762E951A.roa
Signing time: Fri 01 Nov 2024 15:10:53 +0000
ROA not before: Fri 01 Nov 2024 15:10:49 +0000
ROA not after: Tue 03 Dec 2024 15:10:49 +0000
asID: 203020
IP address blocks: 154.204.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66831 (0x1050f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:10:49 2024 GMT
Not After : Dec 3 15:10:49 2024 GMT
Subject: CN=6724ef7c-8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:14:44:70:15:f6:cd:9a:28:6e:31:65:95:
14:cd:3a:34:18:20:d1:03:04:96:5b:a6:53:e6:f8:
aa:9d:2d:b3:f8:f3:64:df:00:e3:b7:50:a9:d3:78:
63:f0:ab:b4:7b:3f:c4:a5:40:41:0b:b7:49:f6:20:
01:06:f1:66:52:8f:66:b2:52:be:1e:69:2f:e4:ac:
30:8e:59:ab:0d:d4:15:31:2d:e6:36:e7:ec:fe:f6:
49:37:fc:27:96:58:d6:99:25:4d:17:94:c3:e2:03:
7a:14:0d:9c:31:e1:3e:fa:1b:f2:43:f3:0e:17:66:
13:0a:8a:fa:e1:5d:7f:ad:f2:7e:ea:ce:91:70:7b:
3b:2c:5b:db:ba:a6:9d:7d:6e:bb:30:76:2a:dc:76:
03:ba:74:2d:e9:2b:ca:00:82:47:2c:cc:ea:c0:45:
af:b3:a2:25:d9:39:7d:ea:08:2c:1d:dd:14:34:a1:
e3:b1:f7:05:c9:9e:3a:15:b3:bc:0d:88:1d:0d:12:
fd:db:86:b5:7c:f0:33:d0:e7:3b:73:33:d9:28:8c:
5a:54:eb:91:23:ef:dd:1e:c8:13:2a:5f:c7:8b:95:
c6:c4:6b:f5:5b:25:9f:3c:77:08:fe:70:b6:72:fe:
fd:b9:90:98:38:ce:e2:45:3d:05:0c:75:57:9f:5d:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:65:40:E7:37:BA:88:88:00:03:CC:B1:DD:97:FF:F5:FB:EB:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C2B8450986311EFAAB5F57D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8f:10:a9:37:76:c9:7d:c1:3b:61:f3:85:de:b4:28:66:57:
d7:e2:7c:69:0b:9f:f2:6a:99:67:cf:7e:21:03:03:ef:29:ae:
7e:45:33:2e:bc:e5:80:bf:b9:ff:56:05:b4:2e:bd:ba:b5:a9:
27:30:d7:97:af:fa:2b:cf:b8:b1:2a:b0:ba:f8:6e:a3:3a:7a:
56:f5:69:0a:93:4a:cb:5d:bd:3b:ab:5f:c9:46:89:f6:79:aa:
94:68:cc:22:1f:7c:75:34:83:30:4b:03:07:47:ba:49:60:d5:
73:e9:c0:54:0e:20:dc:cc:24:e6:de:09:71:94:de:e5:45:5e:
09:af:5f:73:d9:7d:70:11:42:18:a5:26:61:28:c2:9b:db:ab:
c3:bd:e3:f0:39:1d:c7:0c:5e:84:66:4a:f4:86:16:e4:d5:88:
0e:57:3a:14:24:4c:9a:9c:13:b0:37:51:c4:2d:a4:0b:9e:4a:
35:50:f6:22:2b:11:8f:37:0c:a3:8e:b2:a8:0c:e1:ff:61:54:
98:67:c2:32:0d:7d:4e:70:6b:6f:e1:a3:a7:10:ac:f5:73:1a:
02:37:46:ff:da:00:cb:d6:e9:a6:d2:0e:b1:da:6a:2e:30:ef:
1e:82:8b:a8:10:33:9e:8a:d2:be:05:12:06:35:1a:5c:e9:1a:
21:ca:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:10 2024 by rpki-client on console-ams.rpki-client.org