Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBDA4DC9AB111EF99DC3889762E951A.roa
File: 8DBDA4DC9AB111EF99DC3889762E951A.roa (raw, json)
Hash identifier: c6F4HfGVDOClsXVhsKIs7U73+Mm6V09Z8d7n8HNRBzI=
Subject key identifier: 70:23:70:A9:70:DF:48:7A:2B:B7:55:EE:4E:41:30:4C:0E:E2:1B:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBDA4DC9AB111EF99DC3889762E951A.roa
Signing time: Mon 04 Nov 2024 13:34:45 +0000
ROA not before: Mon 04 Nov 2024 13:34:41 +0000
ROA not after: Tue 03 Dec 2024 13:34:41 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67266 (0x106c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 13:34:41 2024 GMT
Not After : Dec 3 13:34:41 2024 GMT
Subject: CN=6728cd75-fab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:cd:1b:b1:6d:c5:7f:f8:23:f3:1f:c4:93:
e2:5a:fb:d0:a7:14:7a:b7:1d:5d:74:4b:1b:42:f4:
0f:a1:06:7c:dc:cf:b8:70:95:e9:ae:52:ac:ff:5f:
dd:bc:c2:42:69:ba:79:9a:bc:e9:50:fb:65:6c:c2:
a5:5a:f4:e4:d1:69:5b:a2:a8:96:d2:e6:0b:5b:4d:
42:5b:6c:be:b5:e2:24:63:24:2e:2a:47:48:82:be:
d1:e1:32:bc:38:7f:09:6b:59:30:59:5a:71:57:29:
7a:d4:56:fa:23:db:e7:42:c2:f5:bf:fe:18:4a:36:
bd:26:f6:c0:c2:8b:e2:d2:78:5c:96:aa:de:24:df:
af:23:0b:e3:2b:97:51:ad:e3:03:a5:f4:11:be:31:
4f:79:01:38:93:32:9f:cf:1b:c0:43:2b:b6:82:27:
60:97:fb:0f:1b:49:89:99:e2:6e:08:2d:be:7d:f9:
13:48:8d:34:a1:9c:62:03:8a:d1:b5:a7:72:42:9f:
d1:47:5b:23:90:05:89:82:6b:20:23:9f:3d:7c:0a:
b0:2a:82:0b:ec:cc:36:ba:7e:b6:c3:db:2d:e5:8c:
3d:34:48:b0:4c:19:5e:00:63:c5:73:35:e0:ee:17:
c6:1f:78:91:38:79:f1:9c:c4:55:22:3b:12:67:44:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:70:A9:70:DF:48:7A:2B:B7:55:EE:4E:41:30:4C:0E:E2:1B:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBDA4DC9AB111EF99DC3889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
27:71:7d:6a:15:c5:53:be:51:36:ce:87:f7:8b:69:de:cc:e2:
b9:8c:43:aa:42:c0:00:3f:2d:91:c7:0e:d8:e1:a9:ca:3e:b0:
99:cb:a5:7a:2b:00:99:e7:47:cb:1e:30:bb:63:60:31:3e:c9:
65:71:1b:a1:3e:c8:cb:1c:47:a4:8e:82:3e:2b:65:6e:fe:17:
d1:1d:b6:e9:49:15:b1:03:4b:39:25:6e:53:3a:fd:ec:a1:8f:
29:c7:a7:b6:2a:47:5b:19:50:43:d2:e7:b1:55:2c:2f:54:13:
2f:d7:ee:bf:42:df:3d:36:d1:6e:c0:03:e4:86:fb:da:a4:da:
d6:e6:13:28:0b:02:bf:50:08:12:bb:cd:6c:91:9d:3a:04:6b:
82:37:b3:1b:4d:93:9b:c2:d2:01:9c:e0:ad:40:e2:60:f0:07:
6b:71:5f:90:fc:2b:d5:b6:20:73:b4:24:a5:be:be:68:17:b2:
1d:02:b6:99:7e:be:68:0a:ee:da:36:58:60:60:de:99:ca:7b:
31:f1:e1:66:29:21:73:a4:51:8a:82:f9:4d:7d:16:63:35:8a:
69:7e:d3:6d:26:22:09:cb:24:78:02:98:c1:5d:eb:76:f6:40:
7d:e9:f2:54:93:c8:b6:2d:99:73:ae:5d:61:59:92:22:26:af:
b3:5b:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:14 2024 by rpki-client on console-ams.rpki-client.org