Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8948C8DA768711EFA8CBDB98762E951A.roa
File: 8948C8DA768711EFA8CBDB98762E951A.roa (raw, json)
Hash identifier: IvjDQv22RBw8m+02w4Lb01nNrDpqU6KRgVZvxLf4MzY=
Subject key identifier: 62:B4:56:2D:DC:22:5A:A4:6C:5E:B7:68:FB:F2:56:C9:41:9A:24:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F085
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8948C8DA768711EFA8CBDB98762E951A.roa
Signing time: Thu 19 Sep 2024 13:03:17 +0000
ROA not before: Thu 19 Sep 2024 13:03:13 +0000
ROA not after: Fri 08 Aug 2025 13:03:13 +0000
asID: 133861
IP address blocks: 154.204.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61573 (0xf085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:03:13 2024 GMT
Not After : Aug 8 13:03:13 2025 GMT
Subject: CN=66ec2115-dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:6a:ec:72:77:4f:f3:84:82:0b:31:2f:55:
45:42:41:7f:74:0f:e4:c8:c0:58:a6:b4:93:71:4f:
5b:e2:c0:c0:76:39:c5:d9:55:0b:c5:33:94:bd:a2:
ef:58:9d:c9:d6:b3:a0:65:d2:e0:9c:86:83:88:ca:
5e:ad:4d:db:e0:ed:24:af:37:d2:ce:d8:06:d2:f4:
07:ea:22:19:e8:63:53:82:59:8f:4b:29:d7:c5:94:
69:b1:cd:d0:b5:1e:38:e6:bd:9c:86:82:c5:fe:f2:
bb:35:36:60:96:82:b1:27:09:08:f0:f5:59:77:16:
c8:b1:f0:fd:81:9d:53:b4:f1:b0:46:5b:7a:13:62:
a7:2a:ce:5e:6a:2d:16:a5:07:d6:f6:ee:36:51:e9:
83:a0:50:d1:8d:48:93:66:37:c0:6b:8f:6c:d7:39:
98:7d:75:02:0d:4d:bf:a3:d1:64:e0:60:76:55:7b:
54:86:0a:a6:62:26:d9:8b:a3:9e:5b:2b:07:ff:6d:
73:3f:1c:34:6a:7e:4e:9a:ae:72:0f:cf:98:f9:3c:
fe:e3:3c:e4:02:c3:4e:c2:be:1c:bd:12:54:71:3b:
18:58:7d:f5:4b:4b:d2:01:df:2b:9c:16:19:d7:07:
85:1d:16:d4:42:68:d8:df:df:21:8d:f6:6e:4f:ed:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:56:2D:DC:22:5A:A4:6C:5E:B7:68:FB:F2:56:C9:41:9A:24:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8948C8DA768711EFA8CBDB98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.52.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3b:8e:70:5f:df:6c:24:be:fb:46:e6:8c:b1:0a:5e:dd:a0:
e3:5f:11:a4:33:df:fe:1b:be:94:e1:f9:dc:46:36:17:49:36:
21:1a:d0:91:d2:1b:58:c5:7c:0b:ec:41:15:e7:d0:2e:4a:3d:
35:84:bc:59:ec:87:27:0c:91:98:c6:04:d6:4c:13:27:e9:b7:
1f:ae:2d:9a:80:51:61:23:3a:ab:c2:ab:c1:9c:47:99:36:90:
73:c2:52:eb:89:89:5b:96:50:27:e8:0c:ac:d0:0c:11:b9:d7:
8b:99:26:fa:44:2a:e9:39:f0:32:24:46:67:ab:28:5e:66:32:
d6:e6:a8:19:21:a0:e8:c1:a2:e4:d7:5d:3e:00:47:5e:84:d2:
e7:6e:1d:60:8b:c7:90:e1:6c:5b:cc:73:cb:35:7d:b5:99:d4:
9b:21:ff:7f:35:bb:71:6b:50:fe:c5:cc:75:6c:ec:0f:8e:d2:
8d:e5:4b:c7:72:1b:a2:b2:8f:f6:21:38:6f:ca:f5:ea:5a:85:
7e:f3:b9:d4:a8:1c:98:dc:2f:36:a4:74:b5:84:e4:28:c4:86:
d1:f3:ff:44:74:11:12:7d:6a:d9:56:5c:d5:37:5b:f0:63:56:
64:92:d2:d6:42:8d:9e:1b:a3:6f:fc:fe:2d:14:5f:d2:61:48:
d9:7c:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org