Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A54846905111EFBE71CCA6762E951A.roa
File: 80A54846905111EFBE71CCA6762E951A.roa (raw, json)
Hash identifier: z7V7rxRyUnmvl6JCmrAsdm123Spx6NfcePEvSVrmonk=
Subject key identifier: EE:82:D9:D9:D7:EE:FC:99:BF:AE:4C:B1:8C:7E:06:E6:36:BB:B9:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A54846905111EFBE71CCA6762E951A.roa
Signing time: Tue 22 Oct 2024 08:42:00 +0000
ROA not before: Tue 22 Oct 2024 08:41:56 +0000
ROA not after: Wed 27 Nov 2024 08:41:56 +0000
asID: 18779
IP address blocks: 154.206.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65681 (0x10091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:41:56 2024 GMT
Not After : Nov 27 08:41:56 2024 GMT
Subject: CN=67176558-34d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:08:23:f5:dc:eb:c9:9c:cb:b0:77:ad:61:
e2:83:bd:b3:74:ee:51:94:d0:86:02:e6:2d:02:25:
16:b0:eb:c8:32:37:69:c4:9e:8a:8e:e9:26:74:db:
64:46:43:e5:95:c1:d0:f4:f8:ae:27:2f:4f:1b:b8:
a5:a9:53:ad:17:3e:65:35:8f:98:03:25:99:6d:94:
5c:29:db:fa:99:0e:8f:83:da:7e:68:28:66:9d:da:
f6:f2:d0:dd:8c:b0:11:41:c1:c5:d6:3d:7c:52:11:
64:c0:e3:aa:82:76:d7:8a:3e:67:3c:81:e6:f4:96:
4b:43:f7:99:5a:82:da:83:83:3c:4f:aa:60:a0:ec:
1b:fb:66:ea:b2:4f:ed:83:99:05:2a:50:06:1e:d3:
7a:a5:fb:db:58:65:24:19:6d:92:21:ad:f3:d7:f3:
78:eb:b0:e1:e0:31:31:71:22:d5:ab:b2:5e:cf:4f:
a8:c6:b5:b8:dc:41:79:84:98:4f:3e:62:db:c5:e4:
57:7d:9f:f4:82:ae:51:ff:72:ca:9a:46:d9:b6:28:
5c:ff:ab:fd:2a:da:12:23:72:a6:7e:a9:3a:3a:45:
d2:f5:b3:f8:f3:ef:2b:6a:b9:5a:ac:ea:91:33:cf:
56:98:16:df:c0:44:49:bd:22:d4:87:cd:56:f9:4f:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:D9:D9:D7:EE:FC:99:BF:AE:4C:B1:8C:7E:06:E6:36:BB:B9:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80A54846905111EFBE71CCA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
06:32:b6:d9:3c:b3:ee:81:91:33:38:dd:bd:ba:f8:53:ba:5f:
d7:9b:8e:31:7d:58:7c:65:99:f5:e5:03:bf:8c:ed:a4:17:1b:
90:75:e2:9f:a3:8b:dd:02:83:b4:6e:72:5f:e3:4e:a7:c4:59:
1a:32:ea:38:2a:13:79:90:8b:41:9f:c6:33:88:8b:b0:72:4a:
35:b7:a8:26:1a:79:38:27:d0:69:ca:44:d5:06:e6:37:ae:10:
76:21:02:2e:22:f2:15:fa:88:7e:b5:72:77:92:48:69:76:f0:
d1:58:fd:06:4a:63:c1:3d:af:53:c9:d1:f8:26:9a:fc:39:8e:
eb:47:6a:03:43:41:08:50:ea:47:98:e5:b6:a3:7e:e1:82:f9:
85:24:2b:41:6c:33:d6:f6:b3:06:62:c3:da:02:0d:2f:32:2f:
bc:0c:bc:49:d5:eb:4c:3d:ff:f4:a3:6f:6d:91:9a:ca:3a:08:
7d:27:67:af:a7:7b:af:51:f6:60:86:aa:86:28:b2:69:a6:6f:
7f:09:4d:b3:fa:da:36:2f:21:98:80:9b:f1:44:e2:a8:19:68:
fe:65:cd:30:e2:6f:a1:9a:07:1c:82:b4:1e:e4:6f:95:19:a0:
4a:99:43:5f:1d:3c:92:69:40:20:b7:15:78:d9:19:f8:4e:80:
b4:65:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:47 2024 by rpki-client on console-ams.rpki-client.org