Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10F3E3C339B11EF9025F856762E951A.roa
File: B10F3E3C339B11EF9025F856762E951A.roa (raw, json)
Hash identifier: Gu1wfWz3BfjXdQHIgHJx7SvZ2habgeCJ1tTPBQPkcTY=
Subject key identifier: 62:9A:7B:0B:A5:B7:2E:15:F6:23:97:22:FB:25:61:55:41:E0:CE:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C75E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10F3E3C339B11EF9025F856762E951A.roa
Signing time: Wed 26 Jun 2024 09:08:46 +0000
ROA not before: Wed 26 Jun 2024 09:08:42 +0000
ROA not after: Mon 30 Dec 2024 09:08:42 +0000
asID: 984
IP address blocks: 154.196.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51038 (0xc75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:08:42 2024 GMT
Not After : Dec 30 09:08:42 2024 GMT
Subject: CN=667bda9d-029f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:6a:bd:b9:19:38:f8:05:c3:3b:ee:51:4b:
19:d2:78:f8:3e:58:34:2a:57:09:c3:d1:31:a4:30:
00:ba:c9:bc:af:06:cd:5f:e0:34:5b:81:e9:fc:80:
3a:55:02:63:05:e4:7a:c4:85:50:b1:35:8a:1f:a0:
33:bb:cb:13:7f:91:aa:41:d0:38:90:91:58:7a:37:
fb:e9:06:24:bf:7b:a0:75:be:c9:be:e1:e9:cf:9d:
d4:5c:f6:ce:bc:f7:b6:39:c2:64:8a:95:c6:3e:24:
bd:37:f6:9c:1c:f1:4b:31:4f:55:63:5a:b4:bf:9a:
32:55:4b:3d:b1:88:78:58:39:d9:cd:f1:aa:a6:f2:
b3:b7:7b:4b:ed:b3:2d:ef:a1:95:d2:35:6a:78:a0:
da:cb:94:7d:11:40:fd:70:6e:ce:f1:39:2d:20:30:
25:c7:e9:38:47:dd:15:96:ca:24:b5:d8:47:bf:8a:
3e:14:8b:1b:5a:c9:ee:38:f2:56:45:6c:b3:19:36:
8b:17:4a:51:a6:fe:c2:73:73:df:2f:9d:a4:70:68:
6f:97:90:84:59:ba:99:15:95:bd:51:4b:92:ba:fe:
88:4c:ff:bc:dc:3c:bd:85:d0:10:8f:4b:26:1c:e3:
9f:b6:dd:e7:41:a6:09:d8:3a:e4:31:0e:39:26:e5:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:7B:0B:A5:B7:2E:15:F6:23:97:22:FB:25:61:55:41:E0:CE:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10F3E3C339B11EF9025F856762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0a:b1:4f:f9:61:69:5e:d9:ca:28:f4:f2:41:9b:ce:34:9c:a2:
e4:ac:0c:01:99:8b:b0:91:74:38:68:27:29:04:1c:e8:38:08:
d9:14:00:88:0f:26:6f:47:d9:bb:ba:e7:38:7e:85:e0:00:37:
07:86:90:56:94:2e:7e:04:f1:2a:6a:6a:87:f2:b9:e2:81:b3:
4b:ef:d5:44:a7:83:54:bc:d5:d7:33:19:8e:28:d7:6c:cb:e5:
96:82:14:41:e9:00:b6:a7:23:99:ee:fd:d8:e8:1e:2e:76:75:
65:22:9a:05:a5:89:c7:d4:be:f9:0b:68:bb:19:c8:cb:9a:ff:
75:ff:53:f9:4d:8d:50:00:42:39:e9:35:82:33:05:75:45:ec:
84:a4:08:80:f0:51:1d:48:2b:99:eb:2f:20:0a:7f:b0:dc:5b:
da:ee:38:e8:90:19:b1:f9:25:08:39:25:67:8e:13:48:ae:5e:
06:8a:38:01:29:2e:d0:60:b6:47:8a:0f:bb:04:74:00:05:c3:
4a:a6:2f:93:4c:7d:f1:e9:d6:a9:d5:bf:64:87:56:81:8e:dc:
ba:73:d4:fe:b2:94:a7:5d:7a:98:dc:b5:ab:5a:1e:f7:66:98:
df:89:aa:bc:f6:19:20:6b:66:7f:bb:87:b4:06:45:de:cd:c9:
9c:fa:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org