Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4F9C12A9CA11EF885B3AB8762E951A.roa
File: 7E4F9C12A9CA11EF885B3AB8762E951A.roa (raw, json)
Hash identifier: qkjsckkxHAYwqzFvoZo7+9c1cDBtQgsYS4HHjGHGHoM=
Subject key identifier: BC:D0:20:BF:C3:7E:3E:87:E4:4D:B8:9A:DB:42:E4:AB:7B:F1:2F:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4F9C12A9CA11EF885B3AB8762E951A.roa
Signing time: Sat 23 Nov 2024 18:41:04 +0000
ROA not before: Sat 23 Nov 2024 18:41:00 +0000
ROA not after: Mon 02 Dec 2024 18:41:00 +0000
asID: 399989
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70118 (0x111e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:41:00 2024 GMT
Not After : Dec 2 18:41:00 2024 GMT
Subject: CN=674221c0-efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:77:79:50:79:84:8c:bb:d0:90:60:e1:7b:
e1:c0:db:57:ff:1f:b1:eb:21:cc:df:73:06:a3:9a:
bf:72:a7:ae:0b:dc:28:86:1b:ef:fc:55:42:7e:ec:
61:be:0b:ae:08:f3:ab:ca:98:78:eb:0d:c7:28:17:
d9:0e:ce:28:21:ad:32:82:05:80:72:07:21:72:b5:
ea:52:27:4b:4d:db:98:bd:fe:b6:71:ab:4e:bd:9f:
34:a2:e2:68:2b:71:8d:c8:bc:9b:80:42:28:a7:3a:
5e:d4:14:bc:e0:a9:a4:66:66:7a:de:de:36:cb:1f:
ef:c4:ca:5f:c9:72:ab:d7:6d:cd:50:3e:91:1f:24:
91:6a:5c:2a:82:cb:40:95:32:84:c8:ff:3e:69:5d:
35:46:e7:d9:48:c8:7d:0b:56:5d:a8:7b:3a:60:c2:
c9:51:37:6a:f8:7e:6e:e8:de:68:ec:22:a6:de:7d:
c6:85:2a:29:16:83:4a:82:77:db:6d:49:2f:9f:ed:
80:0c:8a:cb:98:26:5c:d8:82:4d:2a:a3:c4:8f:1c:
41:62:24:ef:7b:92:39:ab:99:2a:1f:a0:52:e5:cb:
67:9c:a6:10:68:74:04:95:0d:e7:8d:20:2c:88:f0:
d1:8b:33:7c:c6:36:f8:b3:9b:16:9f:ce:be:d3:a3:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:20:BF:C3:7E:3E:87:E4:4D:B8:9A:DB:42:E4:AB:7B:F1:2F:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4F9C12A9CA11EF885B3AB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0c:a0:01:35:8a:c3:99:a3:3f:52:04:fd:3d:fe:06:c1:90:
d9:5d:a8:9e:31:27:59:19:f0:34:18:75:a6:d4:a0:16:63:58:
0b:88:9c:ee:f8:5a:0c:86:ef:2a:d5:e0:b4:8e:8a:08:b6:58:
91:bc:21:dd:cc:e9:f5:9d:17:58:21:f6:e3:5a:31:9b:54:5e:
bf:f2:f5:5b:53:b3:a1:45:50:98:8d:ae:66:4b:2a:ba:ee:c4:
89:8f:6c:d6:15:cd:03:0b:0a:41:f0:bd:ad:f2:90:34:0a:d0:
1b:21:66:21:3c:ee:9d:72:07:03:62:65:b5:8b:a6:44:4d:12:
e5:88:71:ec:d5:d6:d1:4c:02:9e:a2:ff:eb:00:d7:92:d5:99:
f3:be:80:78:79:1e:20:cf:e2:46:15:7b:c7:db:64:04:db:00:
a0:35:9a:1a:42:a7:c6:63:ff:fa:25:1b:e4:d3:39:3f:77:33:
7e:1b:d1:fb:7a:8c:10:71:e0:d3:86:44:7e:8a:1a:a5:70:7b:
32:e4:d0:0f:9a:63:be:44:6e:79:b4:de:f8:69:4c:c8:6e:2e:
69:bb:e6:33:44:37:84:b5:a9:65:1a:45:94:b6:e7:fe:91:32:
39:be:0d:b8:af:ce:02:4a:62:55:59:25:5a:f6:55:b7:77:8c:
20:a9:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org