Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C152448A64B11EFB03F52BE762E951A.roa
File: 8C152448A64B11EFB03F52BE762E951A.roa (raw, json)
Hash identifier: /D3kCFNbQ2oNA80n16Pho25SLtxJmIieJ9gCFn3qpB0=
Subject key identifier: DE:61:68:DC:9B:B2:F7:FB:5E:6B:FE:78:FD:B5:C0:79:29:4F:57:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C152448A64B11EFB03F52BE762E951A.roa
Signing time: Tue 19 Nov 2024 07:54:47 +0000
ROA not before: Tue 19 Nov 2024 07:54:44 +0000
ROA not after: Sun 15 Dec 2024 07:54:44 +0000
asID: 215240
IP address blocks: 154.216.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69372 (0x10efc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:54:44 2024 GMT
Not After : Dec 15 07:54:44 2024 GMT
Subject: CN=673c4447-4db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:e9:28:43:ce:2c:31:18:20:95:95:ee:3d:
f8:b8:c0:26:46:4e:58:27:07:96:e1:25:7d:38:74:
98:8c:f0:17:d4:d4:2d:21:0b:aa:bc:87:dc:bf:ef:
2f:92:dd:70:3c:6a:78:0b:9b:9a:c6:3a:39:36:3a:
60:fb:ac:2e:d1:fe:de:33:cd:bb:9c:b4:30:55:23:
cf:3f:65:a6:55:df:2a:c6:9e:76:f3:e3:3a:96:1c:
13:9d:db:8e:f2:be:86:40:8e:6f:67:ad:44:96:00:
2a:95:1a:df:75:52:d6:7d:f3:65:1a:16:9c:0c:99:
cc:07:cc:0f:09:c4:34:47:24:0a:db:5b:40:16:cd:
15:eb:f7:20:8d:0b:b1:a0:e3:79:62:4b:3d:0e:22:
8c:eb:43:47:e5:e7:16:f6:56:0b:60:4b:97:81:b9:
ad:78:9e:9f:98:a1:62:6e:13:c6:b5:a5:f8:45:56:
ca:0c:a0:0c:ee:9c:b4:9d:ee:d5:5c:04:44:2e:a6:
30:ee:cb:d0:c9:c8:59:f2:83:28:d7:2f:2f:de:34:
4e:6a:1f:95:de:e0:a7:11:84:75:32:29:3d:b3:bf:
89:70:e6:7a:9d:de:ec:70:b5:e7:a2:60:c2:4e:89:
9d:2c:ae:88:9e:ac:c1:cd:a5:f4:a2:a7:62:d0:9d:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:68:DC:9B:B2:F7:FB:5E:6B:FE:78:FD:B5:C0:79:29:4F:57:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C152448A64B11EFB03F52BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:1c:d8:8e:24:b4:5f:bf:e4:5a:7d:58:c7:58:3a:01:a5:
86:1e:a8:1a:ff:4a:76:a5:c9:d6:9f:c9:17:88:26:de:19:59:
99:bf:da:2b:b8:06:7f:49:1d:b7:32:89:1b:81:89:98:0b:52:
0d:c3:26:bb:97:08:61:14:8f:50:d5:38:e4:7d:8f:4d:55:04:
42:a3:c1:51:ed:a2:5b:c0:57:bd:19:35:c2:fa:1e:ca:d7:5d:
1b:79:0a:67:3b:c4:e1:46:bd:31:ee:e1:90:64:26:a9:5e:67:
73:89:c7:6a:75:cc:bd:71:5a:ad:b6:81:13:48:d1:f1:25:75:
6a:cb:88:dd:1b:9a:95:cf:48:a4:8a:be:68:84:70:84:60:64:
94:f9:1d:1b:05:79:11:52:8d:19:b1:55:38:c9:61:a1:d1:81:
40:96:fb:9d:6c:69:39:02:85:82:8f:db:44:70:fa:f6:b5:be:
78:fe:80:b0:f6:15:bf:7a:0b:90:42:9f:fb:e9:74:6c:af:c9:
82:55:92:b5:46:c8:0e:9b:a9:09:f9:57:d1:b9:16:7f:2b:46:
5d:05:80:50:9a:e9:c4:ab:c0:bd:09:4a:f7:41:94:8e:84:0f:
7b:d0:b9:96:8b:26:db:fc:cc:b2:5c:14:0f:e5:71:5e:26:c3:
ad:e5:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:27 2024 by rpki-client on console-ams.rpki-client.org