Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ABBA0CA8E511EFB2235B9A762E951A.roa
File: B3ABBA0CA8E511EFB2235B9A762E951A.roa (raw, json)
Hash identifier: 3oe5uHj5O3rhgFhfjBGvaIu5VjQY/77qng7P4gap3bc=
Subject key identifier: 22:88:ED:23:FA:AD:76:3F:69:21:14:DD:01:A2:3A:0E:39:25:17:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ABBA0CA8E511EFB2235B9A762E951A.roa
Signing time: Fri 22 Nov 2024 15:23:19 +0000
ROA not before: Fri 22 Nov 2024 15:23:15 +0000
ROA not after: Tue 03 Dec 2024 15:23:15 +0000
asID: 62240
IP address blocks: 154.194.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69835 (0x110cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:23:15 2024 GMT
Not After : Dec 3 15:23:15 2024 GMT
Subject: CN=6740a1e7-c429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:73:87:1e:95:69:72:af:14:81:45:b3:a8:
01:99:85:af:06:35:d8:b2:d8:cc:46:db:7c:62:63:
07:2b:57:60:56:1b:bb:1a:be:de:21:6f:c8:92:89:
c5:17:93:a3:03:b3:0a:9e:cc:f0:d2:ce:d9:18:db:
2a:fc:91:dc:c5:b7:74:e8:d0:10:25:58:63:bb:2a:
8b:46:ca:f0:ef:5e:4e:bd:63:c4:ac:9c:09:b7:70:
38:24:df:9c:54:21:1e:3a:5f:38:b8:37:ac:11:32:
57:f1:f9:72:a1:d6:4d:5d:dc:ec:5d:ee:69:e0:41:
f9:cd:2e:46:e6:69:e6:ef:7e:17:44:4b:91:54:23:
c4:2c:c2:80:87:90:ae:6b:62:2d:e6:b7:9f:28:02:
6c:7d:89:14:4f:7e:cb:4e:39:fa:c9:0f:9d:11:37:
a4:7d:dc:23:51:a0:39:0e:3f:73:80:7f:8d:b9:0f:
bf:5a:e9:c2:a9:c3:e7:db:d4:19:72:ca:4a:a6:71:
4b:f9:bd:93:b5:96:c7:ad:9e:ac:c5:59:2e:b9:09:
6b:2b:27:64:05:62:90:6d:cb:dd:8c:2c:c8:fd:5e:
ec:3e:83:88:a2:2f:a2:9b:3d:cd:e7:52:86:6d:9c:
d8:f2:63:9e:1b:fe:60:68:c9:3d:a1:03:82:26:6d:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:ED:23:FA:AD:76:3F:69:21:14:DD:01:A2:3A:0E:39:25:17:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ABBA0CA8E511EFB2235B9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.102.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5c:e1:34:a6:18:86:a4:98:9c:7d:b8:3a:8c:24:2e:64:d5:
85:55:88:d5:4d:d0:44:27:1c:35:2d:62:81:dd:fd:12:1a:a0:
9c:57:47:e8:52:5e:92:0a:88:22:a0:14:fd:b1:f3:0e:de:cc:
4c:70:f4:16:a2:24:dc:71:8f:cd:0d:ed:ef:96:0e:aa:c8:ef:
26:f0:b8:9d:c4:0f:64:4b:64:b4:09:f7:49:d5:2d:db:ba:08:
e8:ca:b1:74:97:2c:ee:b9:51:d7:4f:d2:e6:77:4a:4a:94:b3:
6e:01:7e:ed:a6:7a:62:2f:47:ee:6f:64:61:a5:61:07:eb:ba:
fd:55:db:e5:ba:e3:50:37:3d:79:05:ce:36:00:a8:34:04:a7:
2d:51:b8:75:57:f6:1d:7e:e6:76:ec:d2:e6:e9:f2:ee:3c:16:
e5:2d:43:c4:1d:22:96:2a:ca:65:05:23:3a:2b:bc:8a:98:c8:
2f:a6:b6:cd:75:39:28:7c:87:11:ee:c0:04:bc:50:f3:c1:5f:
97:76:e4:07:0e:ee:4e:8b:94:86:16:90:7d:d0:cc:e0:6d:f5:
bb:46:a3:19:03:56:aa:2f:89:f7:bc:b6:8a:73:72:92:54:7e:
29:90:1c:38:d1:4b:f8:5c:7c:d3:6c:16:f5:80:e7:ae:30:27:
7f:78:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:43 2024 by rpki-client on console-fra.rpki-client.org