Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B940EAF8A8DD11EFBA102868762E951A.roa
File: B940EAF8A8DD11EFBA102868762E951A.roa (raw, json)
Hash identifier: n9HseOvMt5PaxosygYv6idWAhj93PEONNgP3NU/BSuw=
Subject key identifier: 2C:F6:77:30:8D:26:6A:AE:E1:5E:32:C4:14:A7:14:6A:68:06:7D:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01106B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B940EAF8A8DD11EFBA102868762E951A.roa
Signing time: Fri 22 Nov 2024 14:26:12 +0000
ROA not before: Fri 22 Nov 2024 14:26:08 +0000
ROA not after: Mon 09 Dec 2024 14:26:08 +0000
asID: 5065
IP address blocks: 154.206.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69739 (0x1106b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:26:08 2024 GMT
Not After : Dec 9 14:26:08 2024 GMT
Subject: CN=67409484-2fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:0c:54:ee:bd:56:51:3e:be:e3:0e:1e:d0:
65:fe:b8:91:8c:92:f6:77:93:63:4a:6d:8e:34:b1:
68:fc:8e:54:5b:5f:67:1f:c5:4b:03:e0:8f:0a:02:
a9:6c:b0:b1:ce:d6:49:d7:47:24:ca:47:ab:75:ae:
91:ba:12:b0:9a:93:7c:39:53:a9:15:ca:94:4e:00:
93:da:27:8a:91:d1:24:2a:93:0f:c4:20:c2:46:79:
25:10:3c:55:05:0c:a0:de:d7:8a:6f:1a:45:d1:83:
47:13:b6:6d:01:98:de:e3:59:12:f1:ca:d9:86:21:
a9:db:5d:0c:4e:ca:96:71:19:28:85:0f:a2:8d:ff:
50:6b:43:b9:84:d5:d6:67:64:7f:6d:71:4e:6a:b4:
ac:41:9b:a0:b3:18:b3:64:78:ec:88:b4:40:6f:75:
52:bb:59:7b:c7:b5:5f:3e:d6:e2:0b:ef:ef:d8:09:
ab:61:ae:5e:a3:7a:e0:7b:67:9c:d9:2a:c1:51:9c:
73:79:3c:bc:03:c3:9a:c0:30:f8:16:cf:52:9e:a3:
c3:9f:bb:12:49:e7:62:ac:8c:4e:93:7f:4b:e5:be:
fe:64:f7:d9:5f:2d:c9:da:e4:40:62:ef:a0:a9:6a:
92:a2:ed:81:b6:41:b2:84:c3:a3:1e:1e:08:4e:78:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:77:30:8D:26:6A:AE:E1:5E:32:C4:14:A7:14:6A:68:06:7D:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B940EAF8A8DD11EFBA102868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:30:4b:87:d5:4a:8a:5a:58:27:36:c4:cd:bc:52:c6:3f:2d:
8f:a4:67:f3:14:49:d0:f0:df:e0:5f:35:43:fb:c4:86:3a:36:
be:73:29:9f:d6:9f:b1:ac:98:66:92:54:39:a0:df:25:69:91:
10:3f:e3:3c:01:28:a0:15:12:b1:7b:79:15:bf:70:57:8d:a5:
86:d6:46:19:e3:b5:6b:4d:41:32:e0:19:f9:be:dd:02:79:5e:
4f:76:14:5d:78:fd:80:ff:cb:8c:7b:b1:2c:93:31:4b:35:25:
26:9f:50:e0:2c:93:4b:bb:2b:9d:b0:10:51:5c:90:c2:74:0b:
e1:b2:b1:c7:3d:fa:56:e4:b2:5e:48:29:0a:af:85:da:8d:75:
6f:ae:1e:17:74:f2:bf:27:fa:58:bf:37:2b:35:7f:93:a0:e7:
8f:2f:76:0c:30:f9:0f:6e:dd:f9:21:9f:e7:7b:f4:c7:27:59:
6f:3a:17:8b:da:09:01:5d:a1:9d:8f:0e:25:1e:b5:78:3c:b7:
8c:3c:af:19:47:f6:78:d6:c5:bc:d6:e2:71:a7:b0:bf:34:c9:
f9:0f:8a:95:59:86:38:18:7e:fd:74:10:2c:aa:c0:e7:37:12:
7e:e6:22:63:a2:a0:4b:4b:f6:d3:75:7b:b5:cd:e4:78:17:4b:
06:f2:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:44 2024 by rpki-client on console-fra.rpki-client.org