Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC280AC725811EFA0B3656C762E951A.roa
File: 9FC280AC725811EFA0B3656C762E951A.roa (raw, json)
Hash identifier: R5KlVBiaF2a3xBwhkiArnGO9OW6NjQUMXSSEyYhiBHQ=
Subject key identifier: A7:49:FA:F8:9B:9E:FE:4D:EB:BF:09:AA:CB:B1:6B:92:45:99:E6:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC280AC725811EFA0B3656C762E951A.roa
Signing time: Sat 14 Sep 2024 05:17:23 +0000
ROA not before: Sat 14 Sep 2024 05:17:20 +0000
ROA not after: Tue 31 Dec 2024 05:17:20 +0000
asID: 17561
IP address blocks: 154.217.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60898 (0xede2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:17:20 2024 GMT
Not After : Dec 31 05:17:20 2024 GMT
Subject: CN=66e51c63-a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:1a:78:cc:9a:7e:e8:e9:a7:94:b1:10:47:
4a:a3:19:7b:27:60:0c:2c:5a:e2:06:fe:6f:b8:52:
fd:2b:4b:1c:2c:fc:67:3b:0c:83:f9:83:a8:54:6b:
14:0a:1f:ea:bd:d6:d2:9b:50:e5:d8:68:84:78:0e:
fe:d6:5d:03:1e:be:61:ac:7b:75:e5:4a:f7:14:5f:
55:c1:41:b6:01:2a:6f:35:17:04:f4:4a:5a:be:03:
ea:e0:ac:08:21:19:18:df:21:9e:96:a4:67:68:44:
1a:a2:30:51:86:06:7a:55:a0:7d:2e:b9:ea:8b:85:
3a:51:1a:57:22:6a:26:54:9e:6d:92:01:53:92:5b:
54:0d:75:68:ee:61:1d:44:0f:87:b2:0d:7d:d1:ac:
f5:58:d6:d7:be:9c:ef:bc:bf:6d:68:39:ee:68:44:
b3:97:54:2b:79:4c:62:c1:c2:bb:25:9a:19:c7:4d:
e0:f6:20:ce:6b:56:99:bb:ca:11:e7:43:cc:8c:9e:
de:29:c0:dc:07:c2:08:3b:26:ef:1b:48:7f:84:be:
39:25:ec:87:f9:9e:50:34:20:3b:b3:d1:ce:75:72:
30:41:9b:22:d8:d8:ed:a2:9d:01:eb:a1:d2:31:3e:
af:a3:28:02:50:c3:83:d7:5e:c9:ee:f1:2a:3f:1c:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:FA:F8:9B:9E:FE:4D:EB:BF:09:AA:CB:B1:6B:92:45:99:E6:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC280AC725811EFA0B3656C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/20
Signature Algorithm: sha256WithRSAEncryption
12:78:ce:f5:d4:06:84:6e:80:d2:1e:77:77:6a:8b:15:91:b0:
b0:e9:99:4e:b9:fd:c3:9c:ad:b3:3a:ee:d7:3d:c5:e2:d8:e7:
4a:a3:04:0f:05:fb:a5:66:34:8c:c2:af:c4:dd:9c:57:98:7b:
56:97:ed:41:ed:94:1d:27:fc:b7:67:b9:9a:5b:7a:8b:a6:8e:
0f:57:02:7e:41:e0:ab:a4:db:88:e1:df:96:a8:3a:45:37:e7:
f0:e3:28:9a:54:1d:c8:06:66:7f:bb:a5:14:58:ed:dd:cf:15:
af:22:25:59:a5:67:81:9c:35:c9:3f:97:80:dc:a0:57:ac:4d:
53:d4:9e:ee:23:02:30:13:21:41:67:11:82:7d:1c:a4:92:ee:
69:5a:f2:79:72:09:04:fe:0c:95:b1:c5:be:e7:7a:2f:4b:8c:
ad:32:4c:d2:3d:b9:ee:45:76:77:0e:59:41:9d:ec:c7:cf:db:
be:94:5e:8f:2b:a7:16:31:5b:9b:26:d2:9f:b4:ba:2e:e7:ff:
af:c5:67:c2:9c:5d:79:e0:f3:19:ec:a3:20:13:3d:b1:8f:16:
69:4f:15:d1:4a:b1:06:e5:93:4a:fc:1f:01:da:fc:f9:d8:80:
af:4d:4e:16:9e:ff:8a:06:3c:d8:47:d7:63:3c:1f:1f:e5:58:
3d:c9:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:18 2024 by rpki-client on console-fra.rpki-client.org