Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C275BF3A69D711EF8EE20878762E951A.roa
File: C275BF3A69D711EF8EE20878762E951A.roa (raw, json)
Hash identifier: xohU38VdXdRdjZZDPm+9sh1aEPdz2mdPeMR62sBsDfw=
Subject key identifier: 5C:9E:9E:56:12:13:0E:10:1A:12:73:60:EA:2D:DC:32:F6:AF:61:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E92C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C275BF3A69D711EF8EE20878762E951A.roa
Signing time: Tue 03 Sep 2024 09:34:47 +0000
ROA not before: Tue 03 Sep 2024 09:34:44 +0000
ROA not after: Thu 28 Aug 2025 09:34:44 +0000
asID: 140227
IP address blocks: 154.197.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59692 (0xe92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 09:34:44 2024 GMT
Not After : Aug 28 09:34:44 2025 GMT
Subject: CN=66d6d837-ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:bb:42:0e:a5:91:3b:32:97:65:0a:b8:c4:
55:3d:a2:3d:4e:85:6d:ce:e5:5f:df:8b:3f:d9:6a:
ba:32:5a:d6:7a:44:63:80:fe:43:b7:ff:5f:85:9d:
72:d9:c4:ec:1c:ca:41:91:16:92:ee:b5:68:1c:a7:
e5:66:03:47:f4:04:3d:a6:cc:c8:c4:e0:da:7a:64:
5b:cc:d4:25:ba:ab:b1:8d:35:6c:70:c5:a4:6c:b5:
ca:b1:95:4e:a2:57:84:3f:20:e7:67:45:50:63:46:
00:00:8e:3e:2b:4b:97:9a:45:5d:ac:6b:67:e1:ee:
2b:75:31:e1:dc:17:a5:fa:7f:78:6a:a5:73:82:18:
7c:ee:91:9c:71:44:e2:e7:64:45:81:42:e9:9c:c7:
9a:a5:67:49:d2:24:41:73:54:21:b0:85:4e:28:94:
23:61:f9:00:ef:12:12:83:0c:25:60:08:55:be:90:
74:4a:aa:a5:ed:d9:14:96:7c:90:c3:93:9b:d4:c0:
ac:55:74:03:89:f1:27:55:4a:7f:8c:2a:0b:03:6b:
d2:b3:7e:39:cc:52:a1:5d:c2:5a:e2:3e:84:27:6c:
b8:84:bd:9e:aa:a3:81:68:a4:6e:32:01:d5:e1:bc:
1e:28:ac:02:8a:00:53:01:ee:a2:5f:e3:1c:64:84:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:9E:56:12:13:0E:10:1A:12:73:60:EA:2D:DC:32:F6:AF:61:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C275BF3A69D711EF8EE20878762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:eb:32:2b:24:91:8a:fb:6a:b2:ed:1d:d8:9f:02:3f:0b:bb:
00:6a:02:4e:53:e4:aa:4a:4b:1d:05:80:ce:6b:a0:ae:62:eb:
3e:4f:09:94:b4:1b:7c:ed:45:eb:c1:ca:7f:83:19:0d:b2:71:
e1:9d:3a:c9:e0:d0:da:cf:bb:36:d9:20:8f:a9:df:2b:f0:04:
dc:e8:a3:07:9d:9c:5f:57:a1:56:68:a7:5b:99:c5:df:f6:cc:
0f:82:d4:0e:d3:5e:20:87:11:7d:63:c4:ff:5e:96:f1:86:eb:
20:82:b9:9d:94:99:b8:88:7a:d8:4b:ef:1e:50:81:0f:fc:49:
a6:0e:2d:5d:da:65:1a:b3:12:a6:b2:fa:14:1d:55:9a:0e:cb:
fa:f3:4d:b1:5d:17:1d:ed:43:13:ed:83:8d:fd:da:75:7e:3e:
51:fe:5b:98:70:85:8b:39:f2:e6:05:17:f9:73:36:38:f4:78:
5e:30:e9:7c:78:65:74:d3:fc:69:f2:22:d2:3a:e1:6a:58:e0:
97:46:ef:33:cf:a3:bb:6a:ce:33:f5:ae:de:84:a4:57:79:3e:
f2:af:d1:24:83:ff:77:b3:56:1e:97:e9:fd:09:45:dd:8b:48:
a9:cf:ac:52:ac:81:da:1e:f5:59:77:b7:d2:19:aa:83:83:4e:
0b:8e:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org