Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE3A6446A5E11EF9BDE7043762E951A.roa
File: 7CE3A6446A5E11EF9BDE7043762E951A.roa (raw, json)
Hash identifier: c4A/sETLu6UZBattsbwROhBhj8tW1HxGNZeSZ24ZQjo=
Subject key identifier: CD:07:F9:A9:51:E3:00:55:92:D6:64:19:54:07:03:66:EC:DF:6E:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E9F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE3A6446A5E11EF9BDE7043762E951A.roa
Signing time: Wed 04 Sep 2024 01:39:13 +0000
ROA not before: Wed 04 Sep 2024 01:39:09 +0000
ROA not after: Mon 30 Dec 2024 01:39:09 +0000
asID: 17561
IP address blocks: 154.207.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59897 (0xe9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:39:09 2024 GMT
Not After : Dec 30 01:39:09 2024 GMT
Subject: CN=66d7ba41-7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:56:da:ff:9c:96:77:a8:64:e6:ab:2e:ae:
bd:1e:a9:9f:53:32:7c:a0:ad:de:ef:41:c4:45:8b:
51:65:43:37:e3:1c:9f:33:25:5a:d8:ea:ac:5e:b7:
da:d4:ea:e1:f8:20:bb:e5:06:d5:33:76:f7:5a:3b:
57:67:5f:a5:46:81:10:36:93:59:5b:d3:62:1a:cb:
3a:79:e4:1b:43:24:4c:4e:20:44:62:43:2a:1c:39:
29:7f:83:fe:8c:9b:c3:e0:1a:0e:5d:89:7a:1f:65:
cb:85:d0:06:5b:20:49:3e:8a:4a:32:16:32:fa:8a:
a6:3f:f8:24:28:ed:0c:65:a9:c7:66:9d:02:cf:9b:
30:16:59:89:84:76:ce:b2:89:8b:fc:20:09:e8:21:
01:cf:7d:e9:7d:9c:1c:65:db:a8:3d:bf:c6:f6:42:
d4:c7:e2:5d:d3:d6:c6:8a:6d:18:8a:89:43:c7:bc:
e3:6c:26:95:14:8d:18:88:65:c8:75:8a:f9:d8:a3:
27:8a:18:a4:18:80:b2:a8:6c:9a:58:86:fa:05:2d:
31:b1:13:7e:9e:75:56:ee:ae:a8:c9:7a:1a:41:4d:
8d:f0:ca:df:1a:56:d5:46:9b:c0:93:c3:a6:9c:19:
41:d7:3f:52:dd:0d:32:b7:4f:d6:e8:a5:67:0a:5e:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:F9:A9:51:E3:00:55:92:D6:64:19:54:07:03:66:EC:DF:6E:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE3A6446A5E11EF9BDE7043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.188.0/22
Signature Algorithm: sha256WithRSAEncryption
00:de:24:a5:26:c2:03:e6:4b:1c:3f:34:e0:9d:ab:a3:42:9f:
1e:31:7e:70:45:5d:ac:b6:0e:3b:e3:16:b0:9b:9a:a3:76:06:
84:ad:b2:77:cc:e4:10:31:6e:3a:bc:63:ef:02:da:3b:85:15:
03:8a:bc:85:0f:42:51:12:db:f6:73:5a:45:ca:57:9b:ca:a0:
5b:d4:ac:81:6b:35:a0:7c:eb:6e:03:83:e5:12:46:9f:dc:62:
08:42:15:e6:d9:1d:f9:a6:9c:22:bc:f6:44:91:69:29:36:f9:
bf:bb:13:6d:48:29:b9:57:11:12:3e:ff:53:df:c7:e2:c5:da:
cd:85:c5:bb:78:42:f1:3a:d1:cc:cc:da:3f:41:de:9b:88:de:
54:7a:0b:56:94:f8:ba:d4:44:01:77:0c:f3:51:f3:45:1c:2b:
19:47:f4:b6:36:83:8a:73:19:83:4a:0d:88:51:35:87:12:6c:
78:aa:9f:08:ec:67:c6:b3:98:fd:22:24:6c:66:f7:fd:19:ae:
83:62:34:51:0f:32:7e:b0:46:e4:15:9d:7d:0d:74:b6:bf:91:
6b:7e:82:bb:fb:84:b2:d8:db:ef:1e:c9:c5:ba:63:36:02:7b:
f2:6b:82:5d:03:7e:31:be:15:7e:5d:c8:61:54:0a:7f:1c:ad:
46:c3:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org