Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C38AE62B10111EEA9C0B561775412E6.roa
File: 8C38AE62B10111EEA9C0B561775412E6.roa (raw, json)
Hash identifier: k2NJz19gb3zZA/CYuvBNphrVmnDKKGdx66n91s6Q4wI=
Subject key identifier: D7:2B:7E:80:A9:FF:99:22:89:23:E7:6A:48:67:AE:A1:34:5E:35:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7499
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C38AE62B10111EEA9C0B561775412E6.roa
Signing time: Fri 12 Jan 2024 04:17:50 +0000
ROA not before: Fri 12 Jan 2024 04:17:47 +0000
ROA not after: Fri 13 Dec 2024 04:17:47 +0000
asID: 140224
IP address blocks: 154.205.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29849 (0x7499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:17:47 2024 GMT
Not After : Dec 13 04:17:47 2024 GMT
Subject: CN=65a0bd6e-f650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:bb:5d:88:5f:d2:83:18:40:7c:a5:2e:8c:
6e:03:af:f8:90:ae:cb:19:f3:d1:83:44:63:63:f0:
dc:28:8b:c5:cb:c5:1c:2f:da:40:74:5f:5d:a1:5d:
a1:6b:41:0f:9e:44:f5:c9:23:84:27:9f:2b:ea:52:
82:c2:2c:a2:9e:41:54:97:74:1c:f9:ea:bd:ce:12:
fb:1e:1a:62:18:e8:ac:fc:87:97:d7:b2:ba:98:8c:
19:72:c3:10:7f:0f:0d:14:47:70:e1:c9:22:c1:ba:
c1:1d:a6:db:7c:44:6c:f2:68:94:ec:f9:8c:52:ad:
9f:ef:6d:b6:71:a7:ba:1b:7c:45:8b:52:ac:40:88:
49:19:5d:95:80:5e:f0:a8:06:8d:e6:94:92:16:67:
e8:f6:36:33:af:0a:97:f5:0b:d3:bb:90:77:44:88:
f5:26:97:fd:30:07:82:16:cf:40:35:bb:b7:f5:50:
96:b6:91:ac:5f:b0:4b:3e:74:45:ca:39:d4:bb:d0:
5d:5e:f4:b6:5e:7b:2a:12:18:c1:0d:98:19:fb:4a:
ac:c7:28:27:7d:ca:e7:ed:da:22:b0:f9:c6:f0:a5:
c8:7b:12:31:85:bf:ca:04:d8:42:5b:bd:31:50:93:
dc:22:4d:3e:14:ff:66:8b:17:4e:bf:01:53:2f:09:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:7E:80:A9:FF:99:22:89:23:E7:6A:48:67:AE:A1:34:5E:35:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C38AE62B10111EEA9C0B561775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.217.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c1:4e:4a:cc:af:a8:94:6b:12:00:69:0a:f3:c7:1f:3d:80:
a6:75:c1:61:c5:05:b7:8a:5c:d3:58:21:cb:6f:64:79:27:81:
d6:85:03:91:7f:e4:d2:42:26:72:3e:19:7f:2f:ef:95:f5:a3:
c6:13:68:63:c1:f5:8c:04:be:e7:25:4e:bb:6e:7a:d5:a6:89:
2c:ed:a2:a9:50:46:cf:c2:ce:01:33:da:19:66:d5:a0:dd:63:
53:ef:29:89:aa:e4:b0:c4:82:a2:8a:7f:dc:da:03:f5:84:5d:
aa:dc:59:3d:3e:c7:d9:a1:bf:51:99:9f:66:09:9c:70:4c:84:
54:0f:25:5c:89:5d:7f:84:34:11:a6:0d:ab:76:93:4b:70:65:
97:67:98:c9:48:46:c3:c5:a6:09:79:7a:ff:3e:0b:51:a8:90:
5e:d3:c3:3d:8b:8c:7f:a6:09:4e:a2:0f:c7:d2:4c:d9:ac:a0:
7a:9d:d2:ab:d7:eb:a0:db:c6:4e:03:ac:a8:e1:37:3e:c5:1c:
d6:64:9b:52:50:0f:94:72:dd:8e:b1:79:07:ca:0e:f8:0e:1f:
28:41:92:d1:94:5c:3a:c0:49:b5:16:e2:48:ea:41:3b:ff:d7:
c0:12:d0:20:e3:4b:53:49:8d:9c:82:65:3c:fd:27:56:35:43:
73:9d:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:15 2024 by rpki-client on console-fra.rpki-client.org