Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/973D28CA74CD11EF96C76C48762E951A.roa
File: 973D28CA74CD11EF96C76C48762E951A.roa (raw, json)
Hash identifier: cEyzHPTmMqYRxptCHCApG11T6FcLEhUgfa1qpRItET4=
Subject key identifier: 5F:C1:BA:47:1A:BE:FA:E7:C5:9F:E0:1D:D3:B3:D4:D2:F2:D6:0C:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/973D28CA74CD11EF96C76C48762E951A.roa
Signing time: Tue 17 Sep 2024 08:19:43 +0000
ROA not before: Tue 17 Sep 2024 08:19:39 +0000
ROA not after: Sat 30 Nov 2024 08:19:39 +0000
asID: 142403
IP address blocks: 154.211.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61434 (0xeffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:19:39 2024 GMT
Not After : Nov 30 08:19:39 2024 GMT
Subject: CN=66e93b9f-28b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:7c:85:a4:50:fc:af:67:c7:bc:74:96:71:
85:66:a5:97:4c:0c:f6:ca:67:0f:73:66:aa:b0:81:
61:ae:44:2c:cf:86:bf:3f:14:c9:ed:98:cc:bb:af:
ac:5e:d1:d1:b2:8f:3c:78:68:d1:44:9d:f8:dd:0b:
29:21:26:e3:69:fd:a6:7b:ae:b4:76:7e:bb:b0:8f:
6e:b0:0e:c1:be:d6:60:4a:65:6c:3e:89:67:be:d8:
f8:e2:76:59:3d:58:9a:8a:17:58:43:4c:0d:08:14:
b2:86:37:00:d6:dc:3d:7a:3e:e3:9c:5b:36:22:2b:
bd:d5:13:fa:12:5b:e0:c0:ce:40:3f:41:52:60:33:
ec:ba:99:63:49:41:42:a4:62:e9:83:24:ef:18:a8:
c4:f9:de:93:46:a8:97:0b:2a:1b:ae:30:42:0f:12:
5f:9a:07:59:a8:9d:88:22:d3:d2:67:5f:dd:49:6b:
da:4f:00:47:1b:0b:a2:d2:40:bb:e7:87:e5:df:df:
c4:bd:a8:bd:e3:d8:b9:c3:80:74:1f:4e:1f:38:48:
32:fb:e0:08:d8:02:b1:d0:2e:cd:c7:8a:4d:ed:65:
be:d2:1c:94:b2:24:a2:f8:71:48:4a:e8:3d:fc:18:
96:a3:08:d9:12:77:0c:2f:1c:2a:87:1e:5e:22:5d:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C1:BA:47:1A:BE:FA:E7:C5:9F:E0:1D:D3:B3:D4:D2:F2:D6:0C:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/973D28CA74CD11EF96C76C48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:28:9b:db:c8:54:0e:97:64:1b:20:6d:63:4e:5f:08:73:6d:
93:1b:f3:dd:14:92:5f:a4:37:6b:6a:8e:5e:bd:8a:af:b6:4f:
62:be:c3:25:41:8a:93:6a:02:6d:e0:0d:33:84:d6:d1:be:25:
52:38:50:70:f6:c4:22:b9:5e:bc:87:a7:12:fa:c1:b9:fc:99:
df:81:a5:1d:7c:94:28:7f:02:63:ee:d6:79:3e:7a:d5:0b:63:
59:8e:1d:30:6e:c1:87:f5:4c:c9:41:b8:63:db:32:a7:3e:76:
ee:38:cd:c3:4e:82:7f:6a:31:90:fa:1a:84:47:04:8e:de:ee:
04:c3:b9:6d:b9:8a:e2:59:d7:0e:8d:61:65:54:0f:74:dd:00:
01:a6:db:e7:db:f2:ee:2c:37:53:04:72:3d:7b:0c:38:19:cf:
46:51:20:0c:8c:5a:d7:4f:31:8d:c8:be:a3:65:da:1d:bf:15:
47:75:92:d2:95:d6:8a:78:0f:fb:d9:f4:ca:4c:21:b8:85:be:
85:91:64:bf:97:00:41:e7:65:05:75:d4:cc:59:74:36:3f:ff:
bc:a5:29:46:cc:66:11:d0:7c:c4:67:0b:fc:6c:ba:eb:0b:ad:
d9:b3:c8:a4:c9:83:17:a3:80:33:9d:14:66:2b:94:fd:06:ba:
f9:1d:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:04:23 2024 by rpki-client on console-ams.rpki-client.org