Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04F12046A8E11EF8898637B762E951A.roa
File: B04F12046A8E11EF8898637B762E951A.roa (raw, json)
Hash identifier: FCZYaEhlN1OhMNzuPpDipaAGi0JRnVblIoTO+2nC4TU=
Subject key identifier: 9B:DE:5F:29:A9:2E:34:66:3B:BA:2E:AD:24:C8:C9:37:9F:83:AB:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04F12046A8E11EF8898637B762E951A.roa
Signing time: Wed 04 Sep 2024 07:24:15 +0000
ROA not before: Wed 04 Sep 2024 07:24:11 +0000
ROA not after: Tue 04 Mar 2025 07:24:11 +0000
asID: 400999
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59933 (0xea1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 07:24:11 2024 GMT
Not After : Mar 4 07:24:11 2025 GMT
Subject: CN=66d80b1f-c621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:0a:78:72:3c:96:e0:66:81:f4:26:a7:07:
33:27:f4:3e:6d:e2:65:81:57:89:50:6b:b2:c2:62:
fc:5d:70:b2:66:e9:45:58:b9:ad:fa:44:3e:49:b6:
06:28:50:f9:af:90:f8:3a:2f:02:7b:0c:a8:52:53:
f1:98:d9:85:e9:55:8b:27:09:62:0e:16:33:db:6d:
90:22:8a:96:36:02:54:96:6e:af:b6:47:81:81:d3:
e3:0d:28:48:5a:9c:69:52:9a:f9:33:11:6b:99:b6:
c2:5f:5c:8d:22:44:84:c9:2d:c0:a3:1d:5e:0b:b7:
4c:f6:d1:b5:3c:f1:67:f9:e6:1e:d6:18:41:a3:00:
7a:49:db:32:22:b8:91:3e:9b:42:85:cc:d7:44:93:
f7:e9:67:bc:18:4c:ab:15:d6:fd:54:15:1d:a5:6b:
52:8d:3a:9f:f9:8f:56:b4:65:05:76:6f:63:5a:df:
f5:ad:21:ef:f1:b9:c5:e5:b6:f0:c3:f2:96:68:c1:
77:a7:52:42:29:a3:d0:0f:e3:d7:b8:03:34:b8:04:
b6:4c:e3:ad:a2:2b:33:18:82:00:b6:50:24:a0:e7:
9b:f2:2a:f5:ff:06:83:5b:7a:d1:75:b8:85:ac:bd:
1f:2d:6b:99:bd:94:ec:9a:73:60:c8:d5:05:17:b1:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:5F:29:A9:2E:34:66:3B:BA:2E:AD:24:C8:C9:37:9F:83:AB:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B04F12046A8E11EF8898637B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
81:88:55:bf:93:de:84:22:b9:0d:2d:0a:1c:46:77:48:e9:80:
56:65:28:3e:a6:1e:d5:07:f5:a7:e3:0d:44:8c:0c:29:0c:bf:
e2:f6:e2:60:53:ff:86:67:6c:78:37:cc:1b:10:d1:13:cf:10:
92:5d:20:12:63:41:d1:a4:ac:da:4f:01:55:99:1c:00:b0:62:
b1:be:a3:26:11:82:3c:53:05:6f:5d:a8:ad:1f:85:39:f6:b4:
14:59:42:cf:fa:9e:48:84:5c:d7:0a:4e:55:40:8e:14:4e:95:
cd:a4:d2:2e:70:1f:c6:36:0e:36:3c:0f:7c:16:a5:ba:45:fb:
f6:98:6d:77:8b:11:67:3a:a6:0b:68:28:bf:d4:ba:69:1f:82:
77:ea:57:8e:26:c7:b8:38:fa:e9:20:5b:61:e9:42:08:35:9c:
a0:38:11:5e:2e:b0:34:15:c1:0c:e0:39:a1:25:6c:de:cb:c3:
84:fc:7d:13:b6:38:b6:e1:45:26:df:30:eb:82:ab:fc:15:bb:
dc:0a:35:cd:06:b5:b6:60:04:56:5e:76:78:f7:b0:9c:42:0b:
b0:90:5e:b5:ff:43:e8:ba:39:9f:4c:cd:d8:ca:88:19:bc:19:
db:81:3e:6d:82:ad:a6:85:41:a4:03:b1:65:af:d5:30:fd:d1:
6e:12:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:29 2024 by rpki-client on console-ams.rpki-client.org