Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0660A969D1811EFB28FCDB2762E951A.roa
File: C0660A969D1811EFB28FCDB2762E951A.roa (raw, json)
Hash identifier: SW+/45BQZDbrwJgzofe2ghqmLd24/58Nf7HAr6zRptA=
Subject key identifier: E0:A5:E4:92:3A:44:F7:12:11:0F:07:36:54:08:8E:75:35:06:E3:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010967
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0660A969D1811EFB28FCDB2762E951A.roa
Signing time: Thu 07 Nov 2024 14:58:30 +0000
ROA not before: Thu 07 Nov 2024 14:58:27 +0000
ROA not after: Wed 11 Dec 2024 14:58:27 +0000
asID: 203020
IP address blocks: 154.209.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67943 (0x10967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:58:27 2024 GMT
Not After : Dec 11 14:58:27 2024 GMT
Subject: CN=672cd596-cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:48:f8:ba:45:7b:19:37:c9:41:f3:55:85:
f4:d3:37:03:94:18:9d:23:93:01:ed:c4:37:c9:b0:
6d:91:d4:5b:da:94:81:72:56:4a:ed:89:4e:82:fb:
b9:17:c6:d5:fb:ad:b5:55:3f:2f:1e:f5:57:02:5b:
68:df:6f:d5:9a:33:5d:8a:f0:71:30:f0:18:28:16:
e9:b2:cc:ef:f1:ef:6b:b0:c2:f0:d7:94:5d:a7:fc:
ce:29:c2:3b:fa:cc:62:11:f9:f6:e6:91:85:27:50:
16:20:11:64:30:12:bc:18:b4:58:22:e4:f3:b0:d8:
fa:b2:a6:9d:d4:2d:80:ee:b3:37:4b:b5:8a:fc:e6:
fb:59:fa:bf:18:ac:5d:ce:4a:b1:4c:b4:a3:f8:74:
1d:08:bd:09:de:cc:20:15:11:67:0c:0e:0f:3e:98:
dc:bf:b0:eb:15:93:5e:9e:a0:ac:09:e8:69:15:c9:
56:0f:09:08:e9:9f:af:68:ed:b5:91:0c:ed:09:54:
c6:ad:d2:d8:c8:5b:29:80:bc:8d:15:f7:9a:c4:ea:
ba:4b:ab:a0:b1:6e:71:ee:db:8c:92:e6:57:e3:01:
7d:c7:c1:fa:7b:bc:0c:9f:b6:39:17:68:46:88:c5:
21:0a:10:91:96:46:85:33:6f:9c:ff:be:65:71:69:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A5:E4:92:3A:44:F7:12:11:0F:07:36:54:08:8E:75:35:06:E3:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0660A969D1811EFB28FCDB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.248.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:51:1e:1e:73:03:1e:34:e8:0e:46:85:fe:d2:7f:7d:91:b0:
2d:a6:a1:bf:a6:12:17:6f:93:9f:13:8b:98:76:de:32:b9:e8:
d3:d1:57:85:4b:82:e2:4a:b5:a1:3b:2f:a7:69:ba:09:f7:f2:
b6:1f:62:86:d4:4d:d5:50:1a:f0:74:48:9e:15:87:5b:8b:dc:
aa:64:bf:6b:25:2b:20:3f:5f:5c:88:6d:f2:6b:28:78:64:9b:
21:5f:9c:38:34:a4:76:9f:35:1f:aa:60:ab:26:9b:67:f4:e3:
bb:c9:90:99:3b:0b:c8:ae:5a:86:24:bd:50:da:d0:22:c8:54:
9b:80:fd:20:3b:54:27:44:fb:be:2d:b9:53:00:b7:11:91:68:
c0:54:5a:d3:01:22:cb:ca:96:81:76:4d:55:b8:e9:c6:1b:4b:
a1:e6:7a:c1:c9:83:a1:58:ad:97:a8:aa:6d:c9:1b:2e:ed:32:
00:f9:6e:d9:38:69:56:c4:89:c6:59:54:4b:d5:36:63:1d:b4:
32:67:e8:8b:6b:2c:9f:92:1b:65:6d:17:cd:01:43:58:bf:60:
20:56:bc:38:9e:17:ad:cf:df:b6:41:48:28:1a:c1:07:eb:93:
1f:08:9e:99:e9:2d:7a:25:83:b1:ae:53:81:7e:1f:6b:0c:99:
50:06:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org