Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC31C48A74D011EF89BB185C762E951A.roa
File: BC31C48A74D011EF89BB185C762E951A.roa (raw, json)
Hash identifier: RHzQZ8519VD7Krm06SK6j4HAdVXwVoG5r+4HqV0o7c0=
Subject key identifier: 0E:7E:7B:B9:BE:05:E1:1C:ED:E1:37:A2:D9:15:80:6A:76:74:36:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F020
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC31C48A74D011EF89BB185C762E951A.roa
Signing time: Tue 17 Sep 2024 08:42:13 +0000
ROA not before: Tue 17 Sep 2024 08:42:10 +0000
ROA not after: Sat 30 Nov 2024 08:42:10 +0000
asID: 142403
IP address blocks: 154.92.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61472 (0xf020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:42:10 2024 GMT
Not After : Nov 30 08:42:10 2024 GMT
Subject: CN=66e940e5-1bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:3d:3a:25:12:20:5e:93:91:8c:82:c6:4b:
af:c2:a7:c0:67:99:af:a8:ec:c3:59:47:4c:18:93:
22:62:fd:23:4b:98:02:0b:d9:4f:6d:8f:91:9e:8b:
0e:52:db:c8:97:a7:97:89:20:dd:2e:e2:55:ea:e7:
9a:be:3f:8e:d7:13:79:64:22:84:71:23:e4:0a:1a:
96:b7:c9:14:29:84:b2:4d:c5:21:de:d3:e2:0f:2d:
a0:4f:7f:aa:9d:d4:83:47:cf:06:5e:1f:46:01:52:
aa:56:6b:14:9f:7d:ea:c8:59:8a:42:5e:5a:39:21:
0b:64:ec:fc:61:57:bc:e0:91:c3:07:53:11:52:74:
38:ac:46:55:15:44:40:ff:f2:4e:d6:53:9a:8d:c5:
c2:a3:ae:2c:0f:95:b9:b4:a6:1a:12:f5:06:d7:10:
a8:07:a7:a9:6d:0d:5c:de:81:be:2d:69:83:24:c8:
fb:31:5c:44:3b:8c:8d:8b:5d:27:8f:17:94:b7:f0:
de:3d:f0:db:04:99:11:ee:7f:8d:88:a0:35:08:d7:
55:17:ed:f0:81:af:9a:66:bf:6e:08:e7:ef:eb:b2:
76:b5:53:de:5f:63:81:95:01:30:12:c3:41:f8:00:
40:d0:66:5d:c6:26:c4:54:66:a5:6f:e4:aa:4f:56:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:7B:B9:BE:05:E1:1C:ED:E1:37:A2:D9:15:80:6A:76:74:36:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC31C48A74D011EF89BB185C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:96:fb:90:91:11:e3:09:43:c3:50:89:f8:da:4c:1f:b1:fe:
7c:c2:3c:74:2f:12:f9:49:1d:b1:99:5c:fd:a4:9d:62:f2:d4:
ad:85:b4:3f:e5:96:65:38:1f:9e:14:ed:10:e8:eb:eb:7d:18:
f5:e7:eb:f3:a1:69:60:ae:b0:93:4f:8a:78:c2:d6:90:59:aa:
0c:89:6a:4e:9e:8f:01:bd:cd:ff:c5:c9:dd:53:64:82:30:b4:
65:23:56:b9:1b:66:84:78:fd:01:2b:fe:63:0d:f4:00:11:50:
23:52:24:ab:9d:af:01:57:be:47:e4:8e:7e:81:62:43:03:0d:
ef:bc:b4:79:c0:28:a2:c6:9e:b9:21:c0:5a:73:a9:20:1c:d7:
9a:78:9a:f5:d1:c6:33:ba:28:6c:dd:11:17:ae:66:64:de:0c:
aa:41:df:7f:00:09:09:ac:58:eb:e2:f8:0e:00:b4:52:1a:9e:
2f:b1:4d:40:f6:d3:dc:5c:8f:b9:37:1c:bc:ca:c0:31:2a:36:
fa:93:12:81:0d:24:13:d8:10:69:18:00:8b:46:2b:4a:48:98:
fc:d6:08:05:d3:d7:2f:68:9f:58:a7:b6:12:0d:e3:c0:2b:77:
8e:f8:de:bd:b3:28:11:47:c5:1b:d7:cf:91:95:10:68:a9:e8:
db:75:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org