Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA94A5B0736411EF9E6382B3762E951A.roa
File: BA94A5B0736411EF9E6382B3762E951A.roa (raw, json)
Hash identifier: shO47YclOCTOh9ZX3KacRoNUU8zrhP3FnPFEGdQ9Puk=
Subject key identifier: F1:73:23:AF:01:F1:6C:88:DD:9B:64:C6:AE:BD:C4:B4:F6:00:07:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA94A5B0736411EF9E6382B3762E951A.roa
Signing time: Sun 15 Sep 2024 13:16:34 +0000
ROA not before: Sun 15 Sep 2024 13:16:30 +0000
ROA not after: Sat 30 Nov 2024 13:16:30 +0000
asID: 142403
IP address blocks: 154.221.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61178 (0xeefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:16:30 2024 GMT
Not After : Nov 30 13:16:30 2024 GMT
Subject: CN=66e6de31-b9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:85:e0:20:8f:28:66:ba:9e:0d:d8:58:82:
60:1b:38:e8:f8:27:6d:56:e7:01:5e:61:9b:f6:0e:
5f:21:11:69:d8:27:24:83:08:2b:46:4b:14:c0:1e:
dd:34:61:19:2c:fb:3a:3c:2f:0c:a0:ae:23:ad:48:
95:bb:40:9c:fc:97:fb:f3:eb:cf:c8:99:f6:f1:90:
e6:db:29:78:e6:33:9c:44:01:5b:24:8e:d1:8e:1f:
83:45:90:1b:83:2f:1e:7f:31:fc:98:52:0c:88:ec:
22:c9:58:91:67:75:54:13:a1:c9:2f:07:04:3b:ac:
41:d6:a0:4f:ba:18:b2:cf:e3:35:88:1c:31:b3:30:
50:88:44:1d:86:24:23:e2:20:f3:f0:aa:7f:03:f9:
be:b6:f6:cb:01:92:56:3f:37:29:fe:f2:a4:2b:ac:
9f:e3:d0:15:17:78:8c:9a:98:6d:cc:f8:67:28:01:
b5:b7:1f:f6:7f:9a:0f:cd:db:2c:9f:0b:aa:98:43:
df:bb:92:2d:fc:df:b8:49:bf:3a:b3:58:5e:23:42:
04:9a:68:89:62:2a:74:c1:11:e6:c1:b6:7c:61:eb:
fb:96:78:c9:b2:54:ed:73:cf:07:bb:05:54:2a:9a:
5e:f9:fb:28:65:55:fe:f0:50:63:04:88:e5:61:f1:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:23:AF:01:F1:6C:88:DD:9B:64:C6:AE:BD:C4:B4:F6:00:07:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA94A5B0736411EF9E6382B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6d:7f:62:98:3f:3b:3e:a4:93:5b:a9:c1:c2:6d:1a:50:6d:
3b:2c:2e:75:b4:88:63:6b:26:38:07:24:e9:a7:3e:ff:9b:33:
9f:c1:dc:49:e3:85:ed:60:a7:b6:6c:fb:15:6b:85:35:b1:21:
79:51:c9:a9:4b:4a:f9:47:af:7c:73:e2:7d:f2:23:f1:54:a5:
30:5f:2c:a3:d8:72:df:4f:45:81:91:8b:f2:66:41:ea:3b:41:
1b:07:ba:60:c9:a2:41:c0:12:50:f0:d1:d0:e9:91:6e:8e:e6:
47:28:7e:7c:64:e5:1b:84:32:c0:46:0c:c8:92:44:c9:60:6e:
bf:d4:59:a1:74:b3:5a:fa:fa:2d:b0:45:33:f3:ca:7a:90:01:
cf:67:53:2a:ec:b2:6d:c8:c9:3f:fc:2b:4a:2d:f9:0a:ca:a9:
fa:4f:15:f2:73:ad:89:0c:62:48:cf:1d:b0:87:35:8c:98:8a:
f6:81:1a:3e:f6:c9:69:bf:44:c2:67:38:e3:be:4a:ba:c8:ee:
8c:bd:18:0f:d6:e0:66:7b:d0:d4:4c:3b:65:5c:0a:05:c5:95:
40:85:9c:7f:da:53:7e:8f:5f:3e:98:bc:0c:99:ad:72:e3:fe:
dc:7f:53:66:91:37:68:0e:97:ad:6d:2b:b6:74:fa:0c:37:19:
52:f5:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org