Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFA409D492B711EF82633742762E951A.roa
File: BFA409D492B711EF82633742762E951A.roa (raw, json)
Hash identifier: NWcJtPVHIZqujx4R8YdWfm/Wg6zamsnD5tqA4j3ah08=
Subject key identifier: 91:58:F8:AE:40:CA:8D:7E:E7:F0:E7:10:62:B3:F0:79:D1:11:89:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010212
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFA409D492B711EF82633742762E951A.roa
Signing time: Fri 25 Oct 2024 09:58:56 +0000
ROA not before: Fri 25 Oct 2024 09:58:53 +0000
ROA not after: Sun 01 Dec 2024 09:58:53 +0000
asID: 202656
IP address blocks: 154.218.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66066 (0x10212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:58:53 2024 GMT
Not After : Dec 1 09:58:53 2024 GMT
Subject: CN=671b6be0-ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:07:39:8b:58:60:c2:54:70:cc:a3:da:e8:
6c:bf:ec:6d:39:c5:a8:c6:f0:cd:3b:2e:72:20:9f:
45:db:2f:29:51:b3:19:27:b7:ba:66:86:80:3a:a9:
f2:56:24:32:35:1b:3b:09:49:d0:d2:be:0d:bc:67:
3f:5e:25:d2:61:ab:66:1d:58:68:ce:c5:36:37:53:
55:ed:8c:2e:4e:c4:a6:4d:0c:29:51:38:dc:04:89:
1c:d4:ac:f0:ea:70:47:dc:3d:dc:dd:be:5b:75:f0:
b6:45:04:6e:cb:1e:14:ec:b5:f8:d1:47:84:f0:a1:
4f:db:88:60:35:c6:9b:eb:27:1b:47:74:30:a1:b4:
f5:7b:4b:0d:bf:35:ee:75:49:f2:b8:42:d9:67:97:
ad:f9:1d:12:4d:4b:99:57:18:4c:11:eb:a9:0a:e2:
27:a7:29:48:dc:c0:b7:5a:7b:7f:e0:cc:6f:7c:80:
45:8e:fc:7f:b1:55:ed:9e:40:e8:c4:4f:93:75:ca:
c3:b9:80:ae:20:33:d9:6c:f9:a8:95:b7:dc:7f:27:
ad:6b:17:58:2a:f6:77:99:d1:c5:82:a9:07:bf:d6:
df:4f:b9:f7:d5:dc:a4:05:fd:b4:41:80:80:77:a1:
00:6e:eb:c1:ca:75:22:eb:ce:0f:b2:bc:27:8d:9c:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:F8:AE:40:CA:8D:7E:E7:F0:E7:10:62:B3:F0:79:D1:11:89:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFA409D492B711EF82633742762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.26.0/23
Signature Algorithm: sha256WithRSAEncryption
70:43:45:4a:71:4e:9e:73:e1:b7:e9:ee:dc:ca:a0:0c:72:fd:
13:af:f7:3f:f7:ff:90:3c:69:7a:8a:81:02:7c:10:13:ee:cc:
5b:67:11:77:57:3c:2e:cb:a6:d0:e5:f8:bb:36:f1:5e:65:e4:
91:e5:8d:b9:eb:35:2f:56:34:c3:eb:72:88:01:ac:11:41:34:
fa:7d:62:2c:b2:0e:81:81:1f:1f:ac:5e:b3:d4:2e:de:6d:68:
51:0d:9e:0a:c2:45:46:3a:64:c0:c5:4b:c0:3a:26:12:ac:b3:
71:72:3a:40:73:35:18:b5:b8:c1:46:42:60:d8:2a:f3:f3:38:
9e:a2:ac:3a:04:5f:0b:a9:f9:e7:9d:88:6c:90:86:c2:ee:d9:
7c:9b:79:b7:11:47:1e:bb:5e:a5:c7:8b:7b:5a:96:b5:8f:b4:
91:88:92:11:84:40:48:73:55:69:ab:a1:9c:d1:aa:9d:ff:04:
8b:20:de:b5:05:00:3a:e9:e1:df:79:80:60:3d:69:c5:32:03:
e5:1e:3b:3a:9a:07:c4:ff:50:d9:35:ae:3c:6a:ca:0e:e4:a3:
1f:18:86:16:16:a5:50:32:69:74:a4:fd:b3:26:51:82:0a:b2:
11:09:ba:61:8a:82:42:ca:7c:90:71:1f:44:15:65:18:9b:b2:
28:34:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org