Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC09B4C976711EF85D4174F762E951A.roa
File: BCC09B4C976711EF85D4174F762E951A.roa (raw, json)
Hash identifier: PZiiNI6E61G8g2FZoNhigfeDbpIAECqWo6fsYmK7K0c=
Subject key identifier: 9D:9D:ED:1C:D0:AA:E1:32:14:86:94:CC:3C:C8:1C:05:DA:80:E4:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010488
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC09B4C976711EF85D4174F762E951A.roa
Signing time: Thu 31 Oct 2024 09:08:48 +0000
ROA not before: Thu 31 Oct 2024 09:08:44 +0000
ROA not after: Sun 01 Dec 2024 09:08:44 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66696 (0x10488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 09:08:44 2024 GMT
Not After : Dec 1 09:08:44 2024 GMT
Subject: CN=6723491f-53cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:da:f0:3a:6e:7a:df:07:cd:12:fb:63:a2:
64:88:11:17:c6:b1:96:af:95:58:58:ee:e0:47:c2:
6c:9d:f8:66:50:1c:3a:09:b1:b1:8a:c7:83:56:79:
01:ae:34:95:ef:aa:2e:69:d6:ed:88:81:af:d0:86:
1d:f9:5b:9f:ec:9e:a6:e5:da:e5:fc:bf:ef:bd:55:
9e:5e:c5:41:22:93:eb:e9:da:ac:80:9c:5d:df:af:
c4:e9:40:18:03:a2:bb:49:f9:c6:de:18:de:e9:de:
a2:53:f8:03:26:e8:a9:c9:07:76:9b:44:ac:9f:61:
f1:23:1e:01:e1:7b:7a:7b:83:d4:8a:0a:1f:83:b3:
41:1c:a9:de:a3:43:c6:3a:bf:1b:8d:db:54:8d:b5:
90:1a:aa:70:54:6e:60:9e:10:fa:17:68:e0:a3:94:
bc:0f:33:be:9b:45:4f:e0:51:30:8b:02:9c:cf:6b:
f2:12:67:2b:e8:f9:5d:8b:33:5d:07:2a:65:2d:66:
4a:bb:a9:57:47:f0:a7:4f:86:72:dd:40:f7:1e:a6:
45:e9:9e:4f:12:38:0e:77:7c:0d:2e:4f:03:aa:93:
77:0a:b0:c0:e2:32:cb:e5:e9:aa:14:6b:4a:bd:9b:
00:11:9c:31:83:9f:07:b8:cb:45:ef:d1:15:25:df:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9D:ED:1C:D0:AA:E1:32:14:86:94:CC:3C:C8:1C:05:DA:80:E4:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC09B4C976711EF85D4174F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
25:0e:de:6f:3a:8d:c6:99:e4:77:e1:bd:50:1c:47:20:24:4d:
25:94:ca:77:4d:36:be:7e:0c:cd:30:0c:b2:2b:8f:f9:c3:6e:
db:0a:ea:72:da:90:ce:3b:37:e2:d4:80:93:37:71:f5:55:ad:
ec:94:26:fe:27:14:d3:c8:26:5c:0c:76:6c:b2:a3:2b:c2:a3:
cd:84:5b:aa:4c:d1:dd:aa:fc:e2:69:87:39:de:43:9b:43:e2:
de:f9:e9:44:82:5e:81:84:b4:f4:e1:81:c6:5b:32:7a:44:43:
61:13:a5:89:07:ee:4d:d7:f9:dd:ef:3a:ca:b0:04:fe:76:7e:
03:84:a3:f2:eb:37:e3:93:43:70:62:ce:8e:67:02:8d:f8:5e:
5e:f9:21:d0:72:f0:19:03:d8:3e:79:34:0a:54:26:f2:9a:c7:
c9:c2:1f:73:50:bd:eb:13:d0:7f:d7:9d:2a:44:38:f4:c6:28:
6b:c5:d5:d1:01:7a:c1:d5:eb:22:2a:ff:4c:59:a4:00:ca:e2:
5f:c8:14:9d:eb:02:02:47:fd:a5:b4:b6:13:90:da:b6:72:28:
cd:81:d3:8f:c3:52:8b:66:4d:44:79:7d:b5:46:df:ac:e2:c6:
89:00:27:55:e9:d6:d5:0d:27:2f:52:1e:fa:89:32:24:a1:d0:
2e:03:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org