Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A837DA6232BA11EFB063FAA8762E951A.roa
File: A837DA6232BA11EFB063FAA8762E951A.roa (raw, json)
Hash identifier: A6Xa0mHhljH0SGBM0lKn6qI2R6CmOR4eESx2XzM+4bY=
Subject key identifier: 46:B9:6E:98:58:4E:00:09:26:89:54:54:ED:0E:F3:F1:25:35:2E:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C64F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A837DA6232BA11EFB063FAA8762E951A.roa
Signing time: Tue 25 Jun 2024 06:17:54 +0000
ROA not before: Tue 25 Jun 2024 06:17:51 +0000
ROA not after: Fri 03 Jan 2025 06:17:51 +0000
asID: 40065
IP address blocks: 154.212.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50767 (0xc64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:17:51 2024 GMT
Not After : Jan 3 06:17:51 2025 GMT
Subject: CN=667a6112-9884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:d2:94:78:b5:55:8e:28:4c:d3:22:4f:74:
7e:38:59:59:43:b9:b4:67:25:4e:f7:35:87:ef:7b:
89:60:96:9a:f0:52:5e:90:56:e7:e4:97:0b:b8:0b:
42:a8:4d:20:21:cd:bc:05:06:a5:76:be:60:be:fd:
44:93:67:a1:aa:77:d6:63:c0:1b:a8:18:86:88:95:
0e:39:b3:e0:40:97:2a:44:06:ba:da:44:5e:4b:e6:
17:ec:d9:15:3b:40:d6:56:6e:d0:21:77:05:ff:7d:
95:22:59:48:1c:08:bd:0d:c0:5f:0d:18:27:70:64:
38:8f:5b:45:4b:ae:56:95:65:a5:30:72:e3:c8:58:
53:09:36:db:f8:e7:60:6c:35:e5:17:6e:e9:1d:da:
90:02:5c:71:51:3a:dd:56:54:ca:e1:b0:5b:3f:2a:
45:f4:cb:63:70:28:c5:b1:a1:ab:a5:84:1c:00:b7:
88:3f:93:2e:de:d6:ae:b6:6a:98:c9:5a:8e:37:4d:
ce:87:b4:80:a5:e3:c8:1b:86:3c:76:16:0f:bf:cb:
4d:11:b7:ae:e1:eb:fa:47:2c:26:5d:f3:0a:4b:22:
36:d9:82:3c:d0:11:53:ab:dd:e9:47:ab:08:dd:c2:
32:ef:73:ec:fd:59:b9:15:26:69:dd:c7:b0:a0:37:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:6E:98:58:4E:00:09:26:89:54:54:ED:0E:F3:F1:25:35:2E:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A837DA6232BA11EFB063FAA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2d:e4:f6:10:a4:9b:79:4d:48:15:83:12:00:57:b7:ef:26:
f7:af:1c:f4:fd:03:b0:d2:a4:23:d9:57:05:9f:c9:a5:84:9b:
80:f6:5c:6c:33:b2:74:1c:fc:dc:3b:ab:da:b9:15:b9:50:58:
c1:02:0a:5a:25:5c:3a:3e:e0:48:37:a9:3f:17:90:2b:b8:d9:
f8:8a:dd:24:35:7c:f0:8f:3c:4f:e5:27:dc:ac:ca:13:5a:9d:
e6:dc:a9:06:c4:87:1d:bc:f3:cf:cc:03:c1:15:7f:8f:80:a1:
de:da:de:60:7f:e8:9c:a7:f7:bf:d5:c4:a7:3f:7f:c7:95:3b:
b2:07:b4:bd:ea:2e:31:14:1e:b3:a8:07:e4:5d:e4:80:16:8a:
d7:32:02:f3:ba:10:b4:0e:ff:bb:66:75:6f:42:b5:77:b3:c2:
07:da:73:e1:14:23:d0:8e:62:82:91:5b:1e:82:35:a3:ff:b1:
26:f0:a7:f3:8b:e9:38:ae:30:e0:16:39:e0:3f:1f:38:64:f2:
1f:5a:37:dc:86:de:c9:0c:a2:4c:41:dc:11:c4:9a:06:8e:50:
7c:e1:b3:db:b6:ff:29:fe:97:70:d5:f1:9c:d2:30:c7:05:3d:
90:ee:f5:c0:e4:55:20:47:29:f1:b8:a7:5b:ac:2e:92:a3:87:
f5:f0:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:42 2024 by rpki-client on console-fra.rpki-client.org