Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05E1D806AA111EFA7349A70762E951A.roa
File: C05E1D806AA111EFA7349A70762E951A.roa (raw, json)
Hash identifier: H0CKuwL6EIqcbWQ4/MAgFG1c22zt/aXMQOT4cczi3cA=
Subject key identifier: E1:A9:5C:EB:37:5F:6A:7C:27:30:FF:83:9F:5D:DD:2F:8E:E7:75:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05E1D806AA111EFA7349A70762E951A.roa
Signing time: Wed 04 Sep 2024 09:40:42 +0000
ROA not before: Wed 04 Sep 2024 09:40:39 +0000
ROA not after: Thu 24 Apr 2025 09:40:39 +0000
asID: 63888
IP address blocks: 154.207.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59953 (0xea31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:40:39 2024 GMT
Not After : Apr 24 09:40:39 2025 GMT
Subject: CN=66d82b1a-9e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:f4:4c:d9:e2:7a:d2:63:3a:a8:ab:25:8f:
5b:80:ba:b1:65:e0:04:1a:a8:b6:ee:64:24:4c:d9:
25:e5:f4:c6:e6:cf:31:96:cc:2f:03:30:7e:52:8a:
9d:be:a7:a3:dd:08:7f:f0:a6:63:54:a2:cd:e4:0b:
43:21:25:3c:08:bf:ea:cc:61:86:21:f3:0a:d8:19:
b7:e1:d2:cf:be:ca:85:81:ab:fa:22:fb:cb:1a:b3:
5c:66:60:3f:f9:eb:38:db:db:af:4e:99:64:54:c9:
01:cf:b8:28:e2:1c:f7:d4:45:a3:d8:a6:2a:1d:da:
16:6e:84:5b:f9:07:49:ea:23:f7:6f:be:d8:16:87:
cd:bc:4d:95:bf:5a:0a:0a:19:03:5f:94:1f:30:4d:
ca:64:d4:18:ec:cb:5a:59:11:8c:69:8c:a5:3f:c4:
c9:26:fb:9f:14:8a:40:79:d7:49:56:b7:95:3d:11:
1b:84:e6:75:0f:83:a4:c5:a0:58:bb:94:b6:2e:0e:
84:3d:37:31:e8:4d:83:e1:c4:0f:25:5b:7b:00:3a:
79:70:d8:8b:13:61:50:b3:f4:83:5c:1f:35:3b:b7:
20:87:50:f2:d9:19:42:c2:6e:83:c1:c9:ec:cd:48:
e3:7b:08:d1:bc:15:0f:0b:d2:fb:d7:c1:1f:31:f1:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:5C:EB:37:5F:6A:7C:27:30:FF:83:9F:5D:DD:2F:8E:E7:75:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05E1D806AA111EFA7349A70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.100.0/23
Signature Algorithm: sha256WithRSAEncryption
80:7a:b1:78:57:6e:92:69:8d:b8:58:6f:eb:37:2b:8a:40:6a:
5a:9a:fa:98:4a:7d:e7:b6:fd:01:d0:83:7d:c6:b4:33:9e:fb:
06:b8:47:4e:87:a1:7c:c0:06:0d:be:4c:58:fa:f5:76:89:aa:
7e:5c:7f:91:6b:d3:ab:5c:85:c5:14:35:8a:90:49:bb:64:83:
12:18:79:e4:49:8e:fe:f5:10:c4:5c:4e:c5:18:38:9b:92:2b:
50:76:dc:78:d5:e2:d6:23:e5:0e:be:33:60:4c:f5:b0:a0:72:
d2:96:0e:a4:db:06:3e:0d:d1:2c:c9:c0:e4:b5:e3:bc:8b:de:
c6:48:ac:9e:ef:80:dc:c8:5c:e0:cd:28:58:d2:70:da:f1:03:
c2:95:a1:a9:4a:ec:ea:c2:a1:67:9b:55:2e:f6:78:08:75:86:
d2:5e:41:26:32:65:f6:36:c7:18:85:a4:2f:81:8e:0c:f6:ce:
82:d9:34:95:ce:18:83:ad:9c:fd:cb:cc:5e:b4:df:6b:6e:be:
1a:d6:d0:54:e1:7f:ee:a1:ce:3e:86:5e:f6:92:0d:ab:35:5d:
31:47:54:c5:9a:07:13:4a:62:f4:fa:2d:8b:b7:62:46:3c:1a:
24:0b:51:dd:93:d5:0a:e7:4b:c2:59:a4:49:a3:3a:6e:7e:9c:
01:bc:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:25 2024 by rpki-client on console-ams.rpki-client.org