Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C022321E11EF90036883762E951A.roa
File: C039C022321E11EF90036883762E951A.roa (raw, json)
Hash identifier: Mzjmsaxmzz8hDWFaw1qRf7jm/0Zqq3tJJz3j7JYGGz4=
Subject key identifier: 64:F3:B9:95:5F:3B:8D:AF:27:63:DE:7F:FE:53:8B:E1:3A:F9:62:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C022321E11EF90036883762E951A.roa
Signing time: Mon 24 Jun 2024 11:41:53 +0000
ROA not before: Mon 24 Jun 2024 11:41:49 +0000
ROA not after: Mon 23 Dec 2024 11:41:49 +0000
asID: 201411
IP address blocks: 154.84.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50728 (0xc628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:41:49 2024 GMT
Not After : Dec 23 11:41:49 2024 GMT
Subject: CN=66795b81-376b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:47:83:c3:19:85:82:7e:64:7f:63:f6:53:
e7:75:9a:1c:65:a7:62:50:37:3d:35:10:67:87:f7:
69:4a:c9:28:d1:c1:ef:17:52:eb:d1:f0:4a:d0:75:
ee:73:7a:e9:f3:5f:52:81:99:f6:38:bb:c0:c4:4c:
be:25:4a:db:3e:f7:ea:ec:7b:60:68:2f:1f:ce:44:
8c:44:e3:a2:ac:d9:2d:24:c7:12:47:0d:cd:4b:02:
85:78:2a:00:a8:1a:47:9a:1b:ad:8e:b6:10:dd:03:
79:0f:ef:d3:ca:ff:69:89:2c:0d:8c:c6:f6:f7:a0:
8f:e6:ab:c2:79:8a:90:de:cf:65:ea:ac:19:21:08:
8b:18:27:57:24:bc:06:28:14:d0:8f:ad:79:57:14:
72:a4:47:4d:b0:46:11:d8:3a:50:8f:5b:06:ec:5c:
dc:da:52:94:ac:0f:64:1e:79:d2:3d:6a:cf:6a:fe:
ff:8e:44:83:56:42:dc:aa:ef:c2:11:e1:ae:eb:e1:
02:6a:96:fc:6c:9b:26:7d:a3:a2:d4:5d:a1:c6:4c:
fd:19:76:71:78:16:8a:95:4a:41:b6:fd:85:a5:79:
05:aa:4f:55:f1:fd:9b:c1:80:68:3a:20:e0:65:4c:
34:25:5c:71:c9:c4:9d:a0:5b:38:6f:86:74:62:80:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:B9:95:5F:3B:8D:AF:27:63:DE:7F:FE:53:8B:E1:3A:F9:62:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C039C022321E11EF90036883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
51:73:d6:b3:26:c1:b9:cd:c7:ca:fb:2a:2b:a9:a5:9b:7b:49:
65:86:24:eb:8f:f6:ac:c7:83:2f:b7:0e:f0:1d:ac:2f:f5:d9:
e7:44:8f:71:66:41:bd:71:f6:fd:ed:f2:e7:88:f8:66:2f:64:
86:b1:27:64:1e:6d:60:45:58:c7:d9:b4:cb:dd:fe:3e:29:86:
75:81:02:d8:b0:ce:96:1a:e1:bf:88:e0:31:45:b4:cd:8c:22:
25:43:69:81:22:ec:fe:e0:f3:66:f4:62:9b:e2:0a:73:a2:8c:
53:95:e8:a2:e8:bb:8e:11:c8:48:86:50:99:29:e5:21:27:13:
58:f3:08:e5:2e:68:22:32:ff:f2:96:62:8b:d6:d3:11:37:f9:
3f:c0:52:67:87:94:44:14:4f:95:e7:62:ed:a3:8f:a9:3b:26:
04:e9:85:e0:cb:d1:47:c8:a7:d1:90:df:3d:69:e0:2a:81:cc:
18:15:52:4f:1d:92:aa:a9:42:02:93:14:ce:03:5d:8d:a1:8e:
55:78:ca:37:42:28:cb:24:37:17:d2:0b:f5:3e:94:69:56:f9:
06:02:84:76:99:4e:88:55:5f:98:09:66:89:b4:33:d2:9b:7e:
8f:b9:f1:51:49:4f:4a:89:ea:04:fc:ad:6e:df:db:a1:53:f7:
86:1a:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:25 2024 by rpki-client on console-ams.rpki-client.org