Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C3CFD0736511EF896E11BB762E951A.roa
File: B3C3CFD0736511EF896E11BB762E951A.roa (raw, json)
Hash identifier: 3IBCRax1lI913Z2I40z0FecYTJ11cQjh5zctZUnneek=
Subject key identifier: D0:CC:04:7D:EE:8A:B0:5B:7B:2E:29:46:01:26:9F:2E:EC:53:D9:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C3CFD0736511EF896E11BB762E951A.roa
Signing time: Sun 15 Sep 2024 13:23:32 +0000
ROA not before: Sun 15 Sep 2024 13:23:28 +0000
ROA not after: Sat 30 Nov 2024 13:23:28 +0000
asID: 142403
IP address blocks: 154.211.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61192 (0xef08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:23:28 2024 GMT
Not After : Nov 30 13:23:28 2024 GMT
Subject: CN=66e6dfd4-060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:02:c1:b8:cb:e2:24:5a:6c:72:e1:4f:c3:
af:87:50:e6:71:1e:cc:85:8a:15:fc:0c:12:ab:c3:
b6:0a:07:a6:f7:5a:5b:d5:1e:c4:8f:a4:af:15:1a:
39:08:e4:0c:83:7a:60:c9:86:23:bc:22:b9:2f:e9:
20:76:ad:9a:8b:1a:c7:6c:be:6a:c8:11:9e:97:be:
d1:6c:48:33:0d:d9:a0:f3:cc:3f:32:ba:2d:f3:3d:
4f:c3:1a:25:1c:0f:6f:2c:e0:68:e8:6b:4e:3a:52:
76:85:8c:1d:2e:67:95:c3:15:37:3f:f4:31:42:33:
9f:86:7e:01:b2:25:6a:ad:08:f7:e9:68:68:3d:b8:
c1:9a:bf:86:ba:fb:cd:1f:b1:71:3d:7e:cc:69:a8:
d3:b1:d0:2c:ba:f4:a0:76:10:bd:df:3e:c1:c6:d7:
c2:36:69:f4:5b:f9:68:04:3b:51:bf:69:c8:4c:0d:
b7:84:9b:4e:1d:f2:e8:15:e3:ba:ff:c2:d1:87:c9:
84:44:e2:68:6d:b7:46:c4:40:a2:3e:3f:86:9b:2a:
8c:22:c5:a8:43:95:01:3a:a5:28:53:85:79:ba:96:
22:c3:24:c3:cd:88:5f:61:98:e7:53:cd:08:c6:44:
4e:55:4a:22:4b:c0:3f:e7:85:7b:bb:da:20:1e:96:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:04:7D:EE:8A:B0:5B:7B:2E:29:46:01:26:9F:2E:EC:53:D9:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C3CFD0736511EF896E11BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.14.0/24
Signature Algorithm: sha256WithRSAEncryption
53:78:bc:25:6a:3f:76:ad:73:f0:67:f6:39:a4:fc:1b:5c:1d:
ef:03:95:14:a7:42:f3:35:f4:22:71:34:cd:d6:10:cb:ab:33:
ee:18:60:04:a7:9d:a6:80:3f:f0:25:a7:1f:45:67:5b:4b:bb:
f3:3c:8d:52:84:e4:c7:60:66:cb:cf:a3:76:6d:d8:c6:0f:a5:
51:7b:65:be:fc:46:df:e9:2b:0f:ba:b9:c4:c6:82:9f:75:f9:
b7:68:bd:4f:1e:fc:7f:21:be:89:32:aa:d8:64:1a:06:8d:e4:
cc:1a:67:f2:06:cd:44:f4:2b:c0:2d:36:31:2f:c7:58:51:0d:
4f:e9:2a:ba:92:07:6b:ad:bc:70:ce:52:8d:22:f5:19:c6:3b:
93:16:a6:f8:da:c1:99:f5:4a:22:f1:4d:c2:d0:9b:16:78:de:
7e:93:4e:40:c7:c1:62:86:6d:69:d6:82:df:25:40:5b:c2:65:
d6:0f:80:8a:45:c2:c8:0b:75:5d:dd:45:dd:3d:4a:76:07:75:
39:94:af:4a:bc:07:bd:09:51:ea:c7:88:85:f9:78:a7:9c:61:
a0:4d:32:8d:8f:b8:8f:cb:be:75:24:83:6f:1e:a9:02:5d:07:
6b:4b:e4:85:fd:f9:f7:6b:e5:3f:7c:42:49:63:fd:f4:52:4f:
5c:d2:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org