Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7E26A8CE11EF96603888762E951A.roa
File: 8D4C7E26A8CE11EF96603888762E951A.roa (raw, json)
Hash identifier: dccSFgcVNPMXjXu9OY5Yg79vZAH90H7Qja9pxujvKAE=
Subject key identifier: F0:EB:54:24:5C:95:2F:37:9A:B9:38:13:75:A4:04:28:82:8A:CE:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011023
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7E26A8CE11EF96603888762E951A.roa
Signing time: Fri 22 Nov 2024 12:37:36 +0000
ROA not before: Fri 22 Nov 2024 12:37:32 +0000
ROA not after: Sat 30 Nov 2024 12:37:32 +0000
asID: 137443
IP address blocks: 154.223.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69667 (0x11023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:37:32 2024 GMT
Not After : Nov 30 12:37:32 2024 GMT
Subject: CN=67407b10-08b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:58:5d:82:95:66:a1:e6:00:63:1d:03:18:
ea:18:16:40:6f:26:82:25:6b:19:4f:6d:12:e4:f7:
f9:0b:c2:af:68:a3:ec:89:b3:f9:4c:d9:cb:b5:dd:
5d:f1:58:b9:49:b1:56:26:71:cf:9c:d8:54:68:e1:
fd:68:b4:6f:d0:91:ad:e3:2e:2e:00:0f:d3:e8:f2:
c4:a1:b1:07:32:a4:df:c5:b4:ab:22:ec:9b:10:91:
76:2c:5c:03:95:37:02:66:8b:77:06:22:17:0f:92:
95:46:8a:fa:4b:05:1a:0d:97:13:65:cd:94:bd:ab:
2a:d7:05:ae:02:30:24:63:22:dc:2c:6c:e0:d0:ca:
83:c3:27:6b:74:d2:40:45:6a:8e:f1:e4:36:31:fa:
c1:03:87:8c:58:0c:ae:f6:37:f3:92:a5:1c:48:70:
97:e1:ca:87:bd:92:55:c2:e1:38:97:f8:04:2b:c5:
2d:3e:e6:98:b3:bb:1a:ab:f9:e1:45:70:ec:f1:68:
d5:01:2b:15:42:ae:24:a2:25:dd:dd:54:87:05:21:
ce:9a:11:d6:08:82:7e:4e:7f:9e:ec:95:c6:94:ac:
1d:d6:69:b4:fc:7d:5f:f4:50:33:cc:d9:60:c6:a7:
7e:e0:17:24:56:f4:46:f1:1f:5c:15:40:e5:8e:80:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:54:24:5C:95:2F:37:9A:B9:38:13:75:A4:04:28:82:8A:CE:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4C7E26A8CE11EF96603888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.179.0/24
Signature Algorithm: sha256WithRSAEncryption
84:50:ce:e1:49:29:49:12:00:b8:0f:14:94:7f:82:b8:59:b0:
48:12:2c:9b:cd:73:ab:e0:8c:50:a2:42:a7:6b:92:91:eb:47:
21:86:5b:41:1a:77:c6:24:36:d3:5e:25:e2:62:20:09:f8:eb:
cb:bb:9e:13:2e:6b:36:f9:5c:93:f1:f2:da:f0:e7:cb:2d:b6:
6c:66:9f:c7:60:cd:27:cb:30:b9:bc:16:45:39:37:b5:8a:a2:
b3:dc:ab:91:55:51:dc:44:ae:e5:0a:12:1e:ba:27:bb:9e:a9:
1f:11:81:e1:99:76:7c:a4:12:11:76:3e:a6:4a:8d:46:5c:61:
93:75:55:bf:e0:83:c1:01:fb:4f:e8:ed:64:c8:74:fa:3c:ee:
a9:08:8d:37:ef:5f:7b:60:f1:61:e5:d5:4a:3c:7f:a6:14:a9:
34:14:87:d2:51:9c:73:b1:69:d7:9b:52:8e:16:b4:73:92:c2:
31:bc:27:8d:c7:46:3f:19:7b:34:4b:a8:05:9f:7a:d3:4c:70:
6a:64:67:54:44:89:b1:22:54:8c:51:32:8b:fb:b8:70:ee:3e:
e9:52:2f:89:6f:a6:69:79:fc:8d:23:a0:70:82:b9:04:b4:84:
46:9a:b5:85:6f:a5:7b:27:aa:5d:db:fb:f7:a9:59:4a:69:4b:
10:80:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:23 2024 by rpki-client on console-ams.rpki-client.org