Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C41588A8DF11EF9474AB72762E951A.roa
File: 88C41588A8DF11EF9474AB72762E951A.roa (raw, json)
Hash identifier: GGiSpTxrmEmWICv43xD6dqP1xqs2+j820DFSPeWu6pE=
Subject key identifier: BB:1E:55:01:60:5A:05:B4:44:D5:D9:D3:5E:C7:CE:AE:DF:2E:45:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C41588A8DF11EF9474AB72762E951A.roa
Signing time: Fri 22 Nov 2024 14:39:10 +0000
ROA not before: Fri 22 Nov 2024 14:39:06 +0000
ROA not after: Tue 03 Dec 2024 14:39:06 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69761 (0x11081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:39:06 2024 GMT
Not After : Dec 3 14:39:06 2024 GMT
Subject: CN=6740978e-ef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:8b:b5:5c:8d:56:4d:07:cb:95:98:e2:ef:
ff:6c:17:68:e2:ef:cb:e1:8e:c9:ad:12:c8:dc:9e:
d8:37:40:c0:9e:cf:de:f2:16:87:87:65:82:2e:59:
c5:00:ef:e2:60:58:f5:90:81:d2:3e:54:e4:3d:a6:
3c:4d:27:b7:e1:b3:f2:a6:45:82:7f:bc:38:84:61:
e5:02:cc:02:79:8a:45:36:c5:61:59:17:c6:ad:11:
38:76:fb:15:f6:2c:dc:2f:51:b3:e6:8b:23:3a:8b:
6d:16:c6:40:83:bc:69:55:7d:0f:18:8d:c3:bb:75:
8b:51:ad:d7:c9:e4:2d:39:5b:a5:19:7f:44:99:6a:
d8:ca:be:a5:a9:e5:30:dc:73:04:d2:6b:e8:f2:30:
43:7b:71:6d:38:3d:55:7d:87:89:82:a9:29:f4:cd:
33:79:ce:42:a4:fd:95:f5:3c:3f:0a:7d:82:bd:be:
68:6e:60:95:3a:a4:bb:ad:72:3b:61:59:87:a4:f1:
e7:f0:08:57:f8:6d:e0:e1:50:13:59:05:20:a7:a6:
35:63:ab:4e:6f:79:2a:b0:88:a6:a6:71:c2:d8:4f:
9d:50:27:95:c7:00:58:64:32:36:ec:d3:24:1a:e4:
97:50:dc:24:d0:a9:c1:57:b3:65:79:a0:bd:6f:39:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:55:01:60:5A:05:B4:44:D5:D9:D3:5E:C7:CE:AE:DF:2E:45:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C41588A8DF11EF9474AB72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4a:99:28:34:eb:ca:ac:21:7e:74:86:fe:39:57:be:57:1e:
19:b5:10:3d:d1:cb:31:91:9e:09:5b:2b:0a:9f:fe:ef:bf:bb:
05:ec:99:80:97:1b:74:b5:da:e3:9c:fe:4b:d2:0e:2c:ce:60:
4b:fe:c1:e2:f8:b6:27:e3:45:61:72:9d:25:46:f0:54:df:16:
c9:3c:6f:2d:83:6b:07:73:93:08:3b:6a:7e:93:c7:70:8d:47:
05:e1:f7:da:f4:4b:09:c6:54:bf:a0:1c:f3:54:4a:cc:20:e1:
0f:97:4c:13:46:70:be:d7:ab:fc:be:10:c3:68:5e:a5:b5:f4:
e3:4b:e0:82:7f:c9:19:fd:80:8a:f6:0d:43:db:cc:a4:8a:13:
62:62:23:9e:ce:1f:79:08:63:18:88:49:7c:1c:34:cb:94:46:
a1:1a:85:41:3d:01:0a:9b:c5:63:df:23:e8:0c:b7:6d:61:23:
27:f9:db:05:1d:82:12:04:0e:2f:95:c5:d1:5e:31:75:f8:bd:
0f:8f:86:10:c1:12:ed:16:df:b6:87:ba:de:63:d2:3a:aa:e4:
93:bf:f8:8f:18:3c:fd:02:c8:dd:37:a5:29:72:2d:9f:fc:0f:
8e:f8:d3:19:7f:b3:86:6c:14:b7:09:51:32:38:cb:dd:23:73:
48:f1:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:34 2024 by rpki-client on console-fra.rpki-client.org