Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EECB42EA8EA11EF9FA7A0B6762E951A.roa
File: 7EECB42EA8EA11EF9FA7A0B6762E951A.roa (raw, json)
Hash identifier: 6Rpxjj3mW4H1D23UNwXMzmOrd8Bk/FF+wwsc6dJOt6M=
Subject key identifier: 9E:EF:0C:AC:25:7A:76:58:9E:EF:29:C0:1C:AF:DC:93:54:F0:CA:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011105
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EECB42EA8EA11EF9FA7A0B6762E951A.roa
Signing time: Fri 22 Nov 2024 15:57:38 +0000
ROA not before: Fri 22 Nov 2024 15:57:34 +0000
ROA not after: Tue 03 Dec 2024 15:57:34 +0000
asID: 62240
IP address blocks: 154.195.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69893 (0x11105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:57:34 2024 GMT
Not After : Dec 3 15:57:34 2024 GMT
Subject: CN=6740a9f2-a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bf:26:c9:1c:08:b0:a3:a3:39:84:76:50:ba:
8c:14:13:96:f9:43:02:cf:b4:3c:48:a4:76:1b:b3:
e8:4a:99:f1:4c:2e:6a:5f:94:eb:2f:7b:68:a8:d6:
ee:6c:bc:e3:87:21:ba:de:ee:b5:97:64:af:2c:0e:
b3:d2:b4:aa:d3:5f:64:ff:12:56:70:1f:a8:3d:22:
ac:e7:76:7a:78:cb:f3:47:37:ab:a1:c0:a5:ef:2b:
04:99:27:d6:9c:9c:ea:42:1e:4d:04:55:b2:a9:b4:
d6:ed:a1:ee:06:66:41:bb:8e:2a:30:4a:8e:72:95:
2b:8a:2b:4d:1e:22:15:40:ee:f0:2f:d4:20:b6:e5:
3f:4b:94:5e:54:0f:b8:79:dc:41:a1:5d:91:25:ce:
da:5a:d9:d7:5f:ab:86:84:b3:1c:1a:74:c0:34:f4:
4d:44:e4:63:d5:22:25:2a:08:c1:43:8f:ce:9f:d5:
b5:6b:7c:78:ea:35:06:86:97:5e:cf:b8:bc:9b:ef:
16:3f:f1:b3:91:bb:2f:bb:3f:2d:6b:2e:22:08:55:
72:32:24:fe:85:48:21:f8:22:92:c8:a5:e4:3e:87:
7d:c5:60:2b:37:05:21:21:6a:7f:bc:d4:83:c5:17:
ae:1c:94:50:08:1b:42:97:e6:36:ea:37:04:e9:02:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:0C:AC:25:7A:76:58:9E:EF:29:C0:1C:AF:DC:93:54:F0:CA:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EECB42EA8EA11EF9FA7A0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c2:8b:2e:5e:c5:a3:0a:48:e6:6e:d2:4a:74:53:f8:d0:89:
89:88:99:17:23:6d:bb:99:85:b7:fc:9d:38:19:25:cd:4a:0f:
9a:0d:97:f3:f8:1b:ef:a7:cd:a3:e3:71:5d:0f:4a:c4:80:30:
f3:30:28:e8:9c:d8:e5:0d:e7:46:9b:8a:92:99:d1:59:b9:bc:
f7:45:32:c1:92:e0:8c:23:bd:c4:15:df:48:25:3b:e2:b2:c9:
a3:9c:34:e3:9e:fc:8c:25:61:4b:f3:f7:3f:dc:46:ce:2d:5b:
17:cd:ca:43:cb:60:59:23:3b:bf:55:18:5a:c8:f4:75:c1:6f:
5f:34:f4:a9:9e:dc:8a:8e:59:16:b0:b2:4c:90:64:89:38:a7:
d3:70:60:a6:fb:74:5c:4e:13:73:74:91:b2:61:18:b0:ad:46:
79:d7:2e:08:1c:8c:b9:42:1f:7e:b4:7a:b3:dc:88:e6:72:d4:
b1:7d:c0:a2:be:05:80:41:7b:ab:15:58:48:47:df:01:72:2c:
21:8e:1a:bd:3a:83:f8:b2:f1:9b:c1:98:92:5b:2f:6b:70:b9:
47:1b:45:d4:e5:8e:e8:7c:24:1a:a0:a5:76:4a:09:4a:8e:30:
d2:13:cb:3b:23:e1:cf:75:b2:ba:34:4a:9c:bc:82:12:68:39:
a0:79:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org