Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1766B86736311EFB2A94DAF762E951A.roa
File: B1766B86736311EFB2A94DAF762E951A.roa (raw, json)
Hash identifier: 0SNDveJz1N6Y2cQ9iwdctBdk0jT46omAacJEMajfJGg=
Subject key identifier: BE:77:34:A3:2D:5A:BB:B8:BA:93:04:93:BC:92:20:51:A4:2B:1C:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1766B86736311EFB2A94DAF762E951A.roa
Signing time: Sun 15 Sep 2024 13:09:09 +0000
ROA not before: Sun 15 Sep 2024 13:09:05 +0000
ROA not after: Sat 30 Nov 2024 13:09:05 +0000
asID: 142403
IP address blocks: 154.221.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61164 (0xeeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:09:05 2024 GMT
Not After : Nov 30 13:09:05 2024 GMT
Subject: CN=66e6dc75-7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:da:ea:ec:4c:7b:40:20:ae:4a:73:9f:9a:
92:62:51:31:b6:0a:7a:f9:59:0b:1b:64:31:45:f8:
9d:10:85:f6:d1:8f:6e:0c:f6:04:ee:a0:f1:22:08:
cd:d0:c4:29:1c:4d:97:ce:5c:83:ec:6c:0e:03:7e:
ae:69:73:10:15:b1:42:e7:f7:58:e7:5c:ef:0c:6c:
a7:fd:89:55:0c:3e:49:df:cc:8c:e0:16:07:c0:4f:
e1:32:bd:cb:c2:7c:8b:b6:3f:c7:d6:6e:0e:44:be:
5e:34:63:80:58:f7:85:e5:c8:95:03:aa:3b:9b:90:
2d:70:90:aa:ec:53:55:65:81:84:93:40:3d:ce:e5:
c1:a1:34:10:84:87:f6:0d:87:43:00:34:6f:f2:e8:
96:17:88:88:cc:a1:d4:bb:bc:7c:70:ee:a4:8c:27:
0b:e5:3d:54:7d:1d:e8:44:97:f6:bf:77:54:67:88:
42:e1:72:f3:8a:eb:2e:67:02:11:a9:c4:b4:4d:75:
7b:26:85:be:b9:55:a5:b7:4d:4e:d8:f1:ee:40:4b:
5d:44:5d:ee:a1:45:95:84:4f:73:06:57:2d:de:2b:
ff:21:83:7b:1a:61:3f:df:85:ce:e3:e9:fb:a4:e6:
f0:95:85:87:ed:6b:b6:1a:51:25:15:27:a9:52:ce:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:34:A3:2D:5A:BB:B8:BA:93:04:93:BC:92:20:51:A4:2B:1C:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1766B86736311EFB2A94DAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.28.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4f:29:8d:99:ae:82:0d:05:17:09:2b:68:ee:9b:35:1c:da:
f7:ce:53:75:56:27:57:67:6e:4e:17:48:d5:f0:a5:69:00:da:
d0:45:e7:56:c1:3b:61:d5:a7:d5:67:bc:55:14:57:33:d6:22:
76:b5:f1:9e:a5:39:0a:a4:41:a1:03:d0:4d:1c:e3:2f:1b:0f:
99:fe:86:15:41:30:a0:a3:2c:9c:0d:dd:ed:28:46:47:46:a4:
ce:af:dd:9e:e3:e2:a3:02:d2:9f:af:80:13:1d:2e:23:87:88:
39:3e:15:10:5e:b4:f3:42:ad:82:d9:09:93:cb:0e:c4:b5:83:
18:ba:cc:af:3c:02:c4:69:a2:ed:6e:e0:2c:ba:02:bb:ae:9c:
9d:b8:0f:b8:9d:17:2e:06:2b:8a:fa:a6:e1:8b:d1:76:67:b5:
86:26:0d:97:2a:6c:bf:f9:b4:20:be:90:47:d6:2d:b7:30:ec:
bb:02:76:4a:03:97:7c:ca:26:c0:7c:b7:c7:91:be:27:4f:f5:
17:d9:76:f4:e5:f5:be:03:52:85:06:3f:e3:92:a5:f9:09:23:
2b:20:bb:96:71:a7:a9:c5:ad:f8:88:7e:9c:f6:56:0a:ce:41:
ca:40:04:e6:71:3d:6d:05:aa:2c:f0:27:2b:d6:2c:de:17:f5:
9d:47:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org