Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD63675AA32411EFBA34CE78762E951A.roa
File: BD63675AA32411EFBA34CE78762E951A.roa (raw, json)
Hash identifier: Q/1YAitvX8Trl2uoHrAEk8sN5lMtcqrNiwWEPDD2y/0=
Subject key identifier: 08:52:E0:33:33:D8:4D:86:29:05:7F:B2:23:BB:0C:4E:FE:65:85:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD63675AA32411EFBA34CE78762E951A.roa
Signing time: Fri 15 Nov 2024 07:39:26 +0000
ROA not before: Fri 15 Nov 2024 07:39:23 +0000
ROA not after: Thu 12 Dec 2024 07:39:23 +0000
asID: 394432
IP address blocks: 154.196.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68930 (0x10d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:39:23 2024 GMT
Not After : Dec 12 07:39:23 2024 GMT
Subject: CN=6736faae-f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:6a:80:de:51:b9:33:f0:3b:eb:3e:87:df:
03:37:e2:f5:b6:1d:53:91:aa:09:27:a5:37:eb:96:
f6:c6:0c:d1:b2:ae:81:89:cf:58:5f:ea:8f:2a:6b:
a4:21:c3:a7:25:f7:08:78:fe:49:0c:93:8a:48:3b:
08:53:e8:09:f2:3c:55:a6:35:7d:94:dc:9f:9b:e4:
d4:ee:36:f4:e5:c5:37:05:3c:b6:bb:ac:59:29:7b:
56:2d:43:43:57:34:4e:50:fa:d6:85:81:08:8a:72:
b0:c6:1c:44:8f:56:a4:61:4e:ba:1d:80:8b:bd:59:
75:16:da:8d:05:ea:03:17:e6:41:67:b3:31:64:0e:
34:23:cc:75:c1:b0:7d:54:37:80:ed:51:1c:59:c9:
fa:1f:78:e3:66:6d:4b:76:aa:91:c3:7f:c9:99:7a:
58:94:b8:bd:43:13:1c:68:72:fb:f3:4c:95:f7:c7:
19:99:45:98:29:ef:b4:81:78:ef:45:e2:82:45:b7:
f2:5a:4b:11:b4:ed:55:40:6e:82:2a:64:1c:cf:1b:
62:44:7d:8d:91:3c:83:1f:74:af:bc:66:78:ff:d4:
8e:22:2c:4d:24:3d:07:22:46:73:de:70:81:71:ca:
dd:29:5b:19:64:29:11:ed:e9:61:ae:01:5b:16:22:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:52:E0:33:33:D8:4D:86:29:05:7F:B2:23:BB:0C:4E:FE:65:85:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD63675AA32411EFBA34CE78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.202.0/24
Signature Algorithm: sha256WithRSAEncryption
53:77:70:48:c4:1c:9c:f3:a9:3d:92:e9:19:69:5f:95:b3:e6:
db:0e:0e:56:99:7f:5f:c9:08:07:5a:73:71:b0:6a:ea:0f:13:
05:6c:7f:9f:1c:df:ca:84:85:06:f3:a9:2a:b7:ce:41:dd:4c:
90:7c:6a:7e:08:5b:54:3c:67:6d:86:72:43:8d:b3:b8:89:0e:
5e:50:68:8e:02:a0:7a:f0:d7:dd:63:eb:a6:4f:22:57:4c:27:
29:6e:be:c6:ac:d1:f7:e1:c6:15:b3:bb:4a:80:9a:90:a7:04:
e5:95:e5:1f:68:da:90:8f:76:6a:04:29:fd:a2:a5:ed:32:5f:
e0:5e:fa:d9:f8:23:c2:07:cb:f6:d8:75:4f:c9:5d:a5:44:bd:
fa:5b:ae:e4:c1:5b:35:55:d5:5e:dd:73:72:83:e3:49:12:dc:
8b:39:33:f9:f4:12:f9:e9:65:af:43:95:0f:d2:99:85:43:b0:
e1:55:28:29:7c:0c:ff:b1:b5:e8:13:a5:fa:de:b6:cd:79:e7:
25:3c:76:01:8a:43:49:82:ba:a5:c2:a3:e1:c4:3e:0a:a9:2e:
9f:27:63:18:79:15:b4:d7:58:60:d8:23:ea:29:d3:b1:93:ee:
ac:b9:a0:6f:a9:f2:51:59:75:c2:e7:aa:8e:4c:c2:03:c9:65:
de:dc:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:54 2024 by rpki-client on console-fra.rpki-client.org