Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADC3CCFA286211EF94AD23EC7CDC24C2.roa
File: ADC3CCFA286211EF94AD23EC7CDC24C2.roa (raw, json)
Hash identifier: QBYXJAJxGSncUaEUIrarbtKMFlCqg3gEgs55cMeioaY=
Subject key identifier: 03:7F:18:9D:D2:78:83:C4:EE:E4:0F:EC:0A:0C:C5:FD:16:0B:E8:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADC3CCFA286211EF94AD23EC7CDC24C2.roa
Signing time: Wed 12 Jun 2024 02:22:56 +0000
ROA not before: Wed 12 Jun 2024 02:22:53 +0000
ROA not after: Sun 15 Jun 2025 02:22:53 +0000
asID: 134687
IP address blocks: 154.197.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49607 (0xc1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 02:22:53 2024 GMT
Not After : Jun 15 02:22:53 2025 GMT
Subject: CN=66690680-38ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6f:a8:d6:4b:94:be:68:39:92:34:0a:a0:f9:
e7:19:de:7d:ba:8c:0c:40:ae:c3:83:c2:dc:07:59:
2b:8c:87:92:7b:4a:3e:09:f2:2c:30:73:9f:53:a0:
3e:92:d7:e8:c9:b5:38:e0:38:2f:e2:70:e4:99:8a:
c8:b1:8e:2b:76:50:ae:79:4e:89:34:cb:68:6f:76:
28:3c:d4:86:e0:ec:1a:ea:c9:42:97:87:d6:69:7f:
50:8a:70:1f:1e:42:24:1a:5f:1e:d6:9e:53:4f:8a:
4b:b9:50:69:16:3d:bd:ac:72:12:cc:1a:44:b6:a3:
9d:db:d4:61:5a:61:28:e0:68:44:53:4c:a1:1b:fa:
f0:02:83:37:19:65:65:bc:b8:30:60:45:a1:7d:3f:
05:81:c6:a3:7c:98:f8:4c:6b:64:d5:e9:fd:fe:65:
4c:b9:bd:46:70:ee:cb:f1:4a:bc:f8:fc:cb:25:69:
bc:bf:4e:9b:8d:9e:43:d8:1b:1c:a9:8b:e0:24:be:
c0:e7:7b:5a:d1:c1:ed:93:0b:c1:dc:ab:43:a0:c5:
ac:99:23:1b:d3:e1:cf:9f:fb:40:ba:13:34:cb:40:
34:70:21:b8:a9:7c:ad:1b:3b:05:59:32:d2:cc:cf:
74:f5:20:48:b0:ce:94:97:1e:e9:d7:36:e9:c6:3c:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:18:9D:D2:78:83:C4:EE:E4:0F:EC:0A:0C:C5:FD:16:0B:E8:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADC3CCFA286211EF94AD23EC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:dd:8c:c7:c9:b8:66:03:d0:43:b0:da:37:17:69:74:bc:4a:
9d:19:73:41:a0:c1:9d:40:d1:f6:6c:96:b1:71:0f:72:6a:90:
14:fa:4f:85:53:1d:5c:d2:94:5e:f5:17:14:77:df:b6:2d:06:
25:75:bb:40:64:b3:c3:a2:6c:ff:b3:2f:30:46:d7:e3:8c:11:
1a:fa:9a:fd:13:91:46:cb:91:76:f0:7a:5a:d1:4a:c7:1d:ff:
f1:47:67:5c:f8:3c:57:eb:2f:4d:27:c6:00:70:d6:ba:64:51:
b9:06:58:11:19:6b:d8:95:99:a1:09:10:c0:10:f5:ec:19:07:
ea:1f:b8:84:3f:6e:17:7e:05:be:f8:97:b2:c7:bb:f7:b5:e7:
50:36:70:4d:e3:8e:8e:89:d1:65:e4:10:a5:51:6f:37:50:f9:
41:c0:1e:f8:06:0b:f7:fb:18:9f:94:52:96:00:09:b4:08:0f:
c2:ac:63:ce:c6:52:95:bf:63:14:ae:55:7b:2d:22:2f:f5:b5:
54:d0:7f:d3:35:c1:83:2b:3e:b1:d5:23:b8:d3:df:a3:ef:f0:
11:77:42:80:91:cf:8b:d5:23:0b:dc:8f:30:10:b6:d5:9e:ad:
80:3a:1e:13:36:4e:d0:34:80:45:5a:9d:b9:85:41:5e:cf:f6:
7d:1b:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-fra.rpki-client.org