Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37D804CA44011EFAD34B262762E951A.roa
File: A37D804CA44011EFAD34B262762E951A.roa (raw, json)
Hash identifier: yS36b1cil8hmvP+BTXyFGEDEqhqNYQCbz5RMwZjdedU=
Subject key identifier: E1:82:7C:B9:9B:5E:E0:13:F6:54:61:2A:63:5C:2B:73:9E:EC:99:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37D804CA44011EFAD34B262762E951A.roa
Signing time: Sat 16 Nov 2024 17:31:40 +0000
ROA not before: Sat 16 Nov 2024 17:31:36 +0000
ROA not after: Sun 22 Dec 2024 17:31:36 +0000
asID: 18779
IP address blocks: 154.203.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69049 (0x10db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:31:36 2024 GMT
Not After : Dec 22 17:31:36 2024 GMT
Subject: CN=6738d6fc-f991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:7a:a6:be:18:ff:e7:b7:7a:e9:22:a9:8d:
32:d9:23:2d:fe:4e:fb:69:d1:d8:80:cc:44:ff:c7:
e5:3f:0c:20:fe:99:fa:a0:98:ab:11:3d:a0:46:0e:
05:97:0e:97:be:85:45:1e:78:a6:89:42:2c:3a:d4:
3e:3a:bc:76:5c:51:f5:db:a6:37:c4:e6:53:8f:5b:
c7:0b:8c:05:ad:d5:82:fe:eb:8c:74:3e:1f:62:24:
d7:32:d3:15:39:30:2e:9c:a0:27:d6:1e:1c:17:6f:
8f:4f:57:39:fd:41:36:6b:e7:87:6b:5e:a6:20:a0:
af:5d:0b:8f:73:6f:57:87:59:03:5d:c0:bf:f2:69:
a6:00:d1:de:d3:d4:23:2f:f0:14:c6:5a:f1:2a:55:
1e:9f:19:2a:10:0c:5e:3a:49:83:bd:fb:21:59:9f:
20:f3:3e:6b:59:f5:8a:52:35:84:f3:ff:5b:06:42:
8f:f0:3a:78:5a:51:65:54:78:62:39:b4:4b:80:54:
cd:17:67:d1:56:86:c7:fb:f0:0f:f1:84:75:bc:d5:
03:f0:2c:c9:a2:2c:89:f9:95:c3:41:c3:63:c6:8d:
99:66:fb:1b:d0:e4:1d:42:91:78:d1:9d:62:de:ec:
1a:cd:8c:ec:c6:48:c5:ff:78:28:22:f5:4b:92:97:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:7C:B9:9B:5E:E0:13:F6:54:61:2A:63:5C:2B:73:9E:EC:99:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37D804CA44011EFAD34B262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.62.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:f6:f6:74:2e:6b:c2:da:71:36:03:8e:e1:f6:8c:e9:dc:c1:
11:9c:88:41:ef:fd:c0:23:16:93:22:6c:3a:88:55:d1:0d:0e:
bf:19:71:20:8b:c1:d6:e6:d0:97:74:2e:47:c3:f6:5d:5a:2a:
e2:a8:b7:ae:2a:42:0f:12:85:2f:79:07:b4:2f:34:6d:43:c5:
ec:e4:f1:20:11:a5:ae:15:7f:2c:9b:e8:5c:c8:e5:2f:98:26:
fc:db:62:55:00:dd:17:46:dc:b9:e3:71:1d:20:0c:62:0c:31:
85:d2:6e:98:ad:9b:1e:55:a7:6b:af:3a:ff:bf:99:fd:20:7e:
4e:53:2e:ce:3a:ae:8f:76:e1:d3:08:fb:ae:a2:95:26:bc:ec:
43:37:20:bf:78:35:f7:10:49:0f:ea:b2:0e:e1:7e:e9:75:cc:
8d:8d:13:a7:76:b6:35:a2:fe:8d:53:f6:ff:c3:70:2c:4e:aa:
26:13:58:82:62:ef:ed:1e:70:3a:5a:81:62:bc:e9:78:b0:d6:
92:79:e1:33:c6:84:91:34:ef:90:28:54:54:e2:66:63:6f:80:
33:d7:ed:ef:15:74:5a:8b:5d:24:91:12:a0:28:31:17:9e:e3:
84:b1:65:6f:b6:fc:60:37:14:69:eb:16:60:1b:61:7b:29:4c:
01:b9:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:54 2024 by rpki-client on console-ams.rpki-client.org