Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43D91EC9D1911EF8FA181B9762E951A.roa
File: C43D91EC9D1911EF8FA181B9762E951A.roa (raw, json)
Hash identifier: CmxIu5gQkKG8vh9+S15mYNdXXH0g7Miftmn5Ypfg5U8=
Subject key identifier: A3:C0:60:04:33:97:6B:19:22:BE:D1:E7:C9:37:DD:87:41:26:DC:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010973
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43D91EC9D1911EF8FA181B9762E951A.roa
Signing time: Thu 07 Nov 2024 15:05:46 +0000
ROA not before: Thu 07 Nov 2024 15:05:43 +0000
ROA not after: Wed 11 Dec 2024 15:05:43 +0000
asID: 203020
IP address blocks: 154.202.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67955 (0x10973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 15:05:43 2024 GMT
Not After : Dec 11 15:05:43 2024 GMT
Subject: CN=672cd74a-b368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:78:80:a1:c2:74:51:cf:62:4a:e9:c5:3a:
9a:02:c3:41:2d:83:18:c7:02:a1:d4:31:92:7c:91:
74:8d:76:07:00:b8:13:30:16:25:62:96:e9:f0:e0:
e5:ca:0d:65:aa:cb:95:62:c8:32:96:92:a0:63:ca:
5e:63:53:d9:7a:f0:46:72:15:36:4e:a9:f4:90:19:
85:03:3f:88:80:57:30:36:b8:c8:a8:45:10:65:82:
30:67:32:2f:ae:50:ed:8b:cc:52:b3:88:6b:17:1b:
ac:c4:3d:67:26:df:4c:a6:79:e7:c1:e3:57:d7:ea:
bc:4d:a7:cf:b7:14:d7:9e:fa:f4:ab:0f:4e:3a:07:
8b:ba:3c:9a:10:27:0f:a4:54:93:56:39:19:6d:a7:
7b:d9:f9:b1:81:5e:d6:e1:fc:35:bd:ad:fe:93:2e:
ac:0e:86:90:ee:6b:dd:0e:83:28:ce:4f:37:00:55:
c6:40:8f:21:50:9b:9f:d2:1f:0c:6e:cb:fc:d8:97:
08:36:fd:0a:f2:81:42:5b:5b:80:b6:0c:a3:45:03:
3f:c5:5f:83:cf:7c:a7:4e:47:71:2f:c2:77:2a:e3:
a9:b5:d2:52:a3:59:67:e6:c2:21:bf:a1:43:b8:fb:
44:5d:52:47:6d:4d:f8:c1:e1:c7:4d:9d:29:50:5f:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:60:04:33:97:6B:19:22:BE:D1:E7:C9:37:DD:87:41:26:DC:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43D91EC9D1911EF8FA181B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.106.0/24
Signature Algorithm: sha256WithRSAEncryption
67:44:69:af:2b:20:6f:07:b1:3e:5a:22:e6:b7:32:81:99:d0:
06:a0:02:2e:36:3b:49:b6:e6:36:38:86:af:fa:db:d7:70:38:
cf:67:9d:3f:8c:03:ca:32:e6:c8:d8:9c:e4:91:9c:8a:4c:f4:
37:78:b0:15:06:9e:a6:2d:42:5f:29:dc:b9:e1:81:bc:85:06:
45:40:91:9b:fe:f2:28:f0:be:18:e9:04:04:09:01:0f:f4:b6:
fa:cc:5c:f1:5a:c1:9e:2b:69:95:8a:5c:9c:cd:48:93:0e:80:
76:1c:b4:2c:05:08:e6:51:01:0b:c5:d9:97:5d:bd:8e:58:43:
a8:5a:1c:f8:e7:4d:d9:01:fd:cc:14:9f:2f:b7:31:b6:57:9a:
e5:51:35:e0:f3:21:64:28:9a:fe:20:2a:82:b0:9b:4d:45:eb:
f5:2a:5f:f2:9b:be:09:71:52:16:be:d9:d5:49:dc:60:87:a0:
6e:f2:80:76:eb:95:e5:e4:95:70:36:28:e4:b3:24:16:c5:b8:
9d:15:90:4b:37:c1:df:6c:f7:5c:d9:8f:c1:71:5e:e6:63:27:
27:30:dc:c2:2f:04:8d:a4:5e:14:a1:c4:df:4c:e9:93:8a:cf:
99:ed:72:90:2a:e4:79:b3:a7:ed:a4:9f:74:cb:e0:f8:4f:65:
66:dc:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org