Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1E0B5AA8DD11EFB390FB65762E951A.roa
File: 8C1E0B5AA8DD11EFB390FB65762E951A.roa (raw, json)
Hash identifier: aVQiZ3FhjpjGDQOnq7oCBkKBDY0SgnKbf4bjBWu0cwo=
Subject key identifier: 7D:56:6C:13:E6:C8:FF:FB:76:14:16:13:79:57:FC:FD:A8:B8:4C:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1E0B5AA8DD11EFB390FB65762E951A.roa
Signing time: Fri 22 Nov 2024 14:24:56 +0000
ROA not before: Fri 22 Nov 2024 14:24:52 +0000
ROA not after: Mon 09 Dec 2024 14:24:52 +0000
asID: 5065
IP address blocks: 154.206.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69737 (0x11069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:24:52 2024 GMT
Not After : Dec 9 14:24:52 2024 GMT
Subject: CN=67409438-d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:59:02:17:e4:2c:90:d3:0e:a0:07:55:19:
65:b0:33:90:0f:71:eb:08:bd:c4:e9:6e:c6:d0:17:
9d:28:20:88:da:21:f2:7d:ba:b8:fd:c2:b5:5b:26:
9e:da:55:40:d9:ce:dc:eb:e8:75:16:d9:f0:80:a5:
b9:62:fd:61:fe:83:56:82:88:ce:39:b3:ed:27:3a:
7a:dd:9a:cf:d2:3e:c1:8c:8d:9a:5e:09:ef:15:5d:
b9:9e:90:03:9d:2b:cf:2c:55:7f:f4:30:de:91:94:
81:0c:c9:38:f7:17:f6:fa:7b:97:dc:e1:b3:b4:6c:
55:57:24:bb:02:14:c4:9d:25:36:12:8c:54:6b:c4:
12:31:f0:17:8d:92:50:d3:3f:3f:eb:2e:6e:13:69:
d5:82:23:4c:51:b6:df:c1:4a:42:64:e9:68:2a:ee:
96:96:cf:f4:8b:71:28:c3:88:b6:e4:16:79:d5:38:
d4:2f:68:d1:c2:f0:9d:06:75:c9:ad:20:41:e3:b4:
c8:d8:98:54:92:c0:a6:21:9d:9d:4b:d8:b6:b8:f6:
93:cb:17:fa:92:1f:76:6e:0b:12:2d:21:96:cf:9d:
7a:84:c4:b9:c5:db:49:94:fa:69:a0:6f:9c:c8:4d:
6b:58:4d:61:80:13:29:2d:0e:68:51:b2:7f:50:bb:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:6C:13:E6:C8:FF:FB:76:14:16:13:79:57:FC:FD:A8:B8:4C:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1E0B5AA8DD11EFB390FB65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d3:70:52:6e:79:67:13:95:38:3b:4a:8e:42:65:53:5a:9d:
22:fe:c7:f0:55:b0:c2:4c:a2:ee:aa:dc:12:66:06:39:39:73:
d1:dd:d1:12:05:ba:19:a4:ac:fd:05:d3:aa:93:88:5c:30:95:
ef:b2:90:62:f2:61:ec:f4:c8:c1:85:87:a7:ee:3e:42:07:0c:
96:d2:36:49:d3:03:fe:55:d5:24:2f:93:92:0a:25:fc:de:42:
71:49:61:96:be:10:a0:e9:36:b3:91:97:c2:35:64:bb:f1:ca:
e8:12:44:56:45:1d:11:9b:c0:c4:2b:b6:86:31:e7:23:51:fd:
07:e8:f2:ea:08:60:de:33:6a:43:c2:76:99:4b:7f:a2:21:46:
07:87:af:a5:d8:06:ec:55:81:bf:a6:02:2d:26:91:1b:d6:b0:
11:0c:54:5a:2e:39:28:0d:b1:61:2e:70:0b:c5:2c:ab:f1:77:
32:62:e9:79:88:fd:8d:3d:d8:95:ca:24:51:80:93:a2:d2:fc:
42:1c:e3:b7:05:94:97:8e:e7:22:3c:a3:f9:87:e2:96:08:b4:
6c:be:f9:9c:11:3b:7a:77:d4:18:bd:7f:61:da:a9:51:a9:29:
76:bb:e1:dd:96:ed:44:4f:8a:03:7b:76:c0:9b:1a:17:13:8c:
bc:54:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:38 2024 by rpki-client on console-fra.rpki-client.org