Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C48FD8986011EF80248D6C762E951A.roa
File: 98C48FD8986011EF80248D6C762E951A.roa (raw, json)
Hash identifier: T6GH0EN/UeUZVsCW+G2Hre7W6ttkAuhgAh9AuhKz6so=
Subject key identifier: 5A:E0:F8:7F:2A:54:B5:28:91:13:D4:9D:4D:CD:52:8F:D3:0A:B3:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C48FD8986011EF80248D6C762E951A.roa
Signing time: Fri 01 Nov 2024 14:50:12 +0000
ROA not before: Fri 01 Nov 2024 14:50:08 +0000
ROA not after: Tue 03 Dec 2024 14:50:08 +0000
asID: 203020
IP address blocks: 154.208.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66795 (0x104eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:50:08 2024 GMT
Not After : Dec 3 14:50:08 2024 GMT
Subject: CN=6724eaa4-d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:f5:af:90:37:e5:63:6d:cf:34:7f:6e:37:
d6:eb:4f:70:46:9e:a1:01:21:61:80:3b:07:55:9f:
a1:6a:2a:f3:47:f1:e2:a5:00:db:f4:31:cc:a9:56:
22:25:1c:12:cb:4d:8c:4e:24:69:42:b3:e2:56:94:
69:e2:0e:11:b1:3c:86:43:97:c0:c1:fd:a5:5d:fb:
04:77:4f:4e:1f:f3:d4:ac:89:20:46:6e:e6:37:c8:
b5:b5:19:1f:4c:8f:ad:4d:60:10:e6:5e:ad:f1:39:
80:61:8d:82:22:9d:e1:f5:d5:9f:7f:5d:97:a3:88:
6a:6b:41:93:42:3d:0d:9b:e6:7d:3e:5e:9d:6a:d6:
0d:97:df:2d:e5:25:f0:85:8b:19:6c:74:1c:18:d4:
49:c5:25:22:05:fd:7b:70:90:22:a4:90:bf:9a:b1:
72:72:49:77:ec:3e:28:80:28:7d:85:6b:11:a2:24:
6f:f1:e6:a6:c3:bb:ba:89:99:59:ef:45:e4:53:5d:
1b:54:58:1c:e6:97:6c:ac:e7:30:32:11:43:4d:bd:
46:11:52:0d:0d:ee:95:e5:17:0a:74:5d:3d:32:45:
94:bd:6c:48:1f:dc:17:29:36:a5:d0:13:a6:0b:fe:
fd:af:a6:1f:53:95:f5:46:32:2b:33:4a:ad:48:c7:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:F8:7F:2A:54:B5:28:91:13:D4:9D:4D:CD:52:8F:D3:0A:B3:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98C48FD8986011EF80248D6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.132.0/22
Signature Algorithm: sha256WithRSAEncryption
69:0f:d7:b0:65:f5:a1:68:32:ba:1c:aa:da:fb:29:b7:55:bf:
b6:26:06:4e:05:b9:95:07:e3:55:e1:cb:cc:e0:82:bf:48:99:
7c:f0:d0:10:4b:2d:66:53:fe:36:85:c9:84:6d:7e:ca:80:24:
8d:58:db:1f:9f:b7:6a:ae:a7:84:10:f3:5a:0e:04:29:53:bb:
ff:14:1d:36:0e:f0:7b:5d:d0:ff:4a:4e:bf:97:75:2c:b5:3d:
3a:72:a3:44:e5:00:3c:c5:8a:fe:fe:79:16:fc:f7:3c:c3:26:
6a:f8:a7:c2:e4:e0:d5:e1:91:e3:6f:2a:56:55:be:c1:e9:79:
ce:8b:22:22:00:ea:d6:85:59:33:06:0a:3f:ca:30:cc:a1:ac:
7d:1f:9d:f1:77:9e:3b:a0:a6:d8:67:15:b7:bd:1b:a3:8c:fc:
7b:a6:9a:da:9f:5b:c2:55:4b:90:38:3f:01:0a:80:1d:c4:44:
8a:91:f2:88:75:6c:63:7d:4f:29:50:71:b1:28:a9:b2:e3:9c:
2a:63:e8:57:8a:a7:59:e5:be:68:21:0d:0e:d5:93:0e:6a:3c:
49:88:88:70:a7:a8:15:1f:de:49:db:e8:bc:b9:19:aa:99:9a:
ec:1b:45:49:c2:2e:74:db:f8:e8:5a:27:c9:eb:00:2b:3d:3f:
3c:0e:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org