Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BE7AE6736611EFBA584CBF762E951A.roa
File: C4BE7AE6736611EFBA584CBF762E951A.roa (raw, json)
Hash identifier: Cqd6guv1FR0GA+bl7ih176tqyfFP48WZ1d2eZiRYs2w=
Subject key identifier: 15:9F:6F:9F:F5:F2:F0:DC:BB:A7:76:59:98:38:B5:29:56:65:1B:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BE7AE6736611EFBA584CBF762E951A.roa
Signing time: Sun 15 Sep 2024 13:31:10 +0000
ROA not before: Sun 15 Sep 2024 13:31:06 +0000
ROA not after: Sat 30 Nov 2024 13:31:06 +0000
asID: 136970
IP address blocks: 154.197.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61206 (0xef16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:31:06 2024 GMT
Not After : Nov 30 13:31:06 2024 GMT
Subject: CN=66e6e19e-81ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:25:d4:bc:f5:ec:cd:a5:35:4c:1f:5c:e9:
e3:df:5c:43:f0:6f:0b:c6:6c:e5:e5:19:ee:9a:78:
5c:fb:b9:ec:3a:f3:de:c4:66:fb:00:86:c5:f6:ee:
de:06:1c:c9:54:ca:5c:1f:8a:81:19:62:15:ff:92:
78:56:be:c9:02:10:16:66:a7:12:c6:8f:1f:96:6c:
87:4f:43:27:60:4a:8c:06:90:af:c5:54:d6:71:41:
ff:5f:31:bb:3b:b3:44:f0:56:c1:82:84:91:10:45:
07:a1:7e:da:d7:a7:35:9c:07:3a:06:37:b1:5f:1d:
cf:d3:39:e7:09:3b:56:7f:58:9f:8a:8a:74:20:8b:
d1:15:cc:e4:22:0a:85:c1:80:53:d6:44:d9:8e:56:
41:00:5d:6b:b8:60:df:f7:46:66:9f:8e:0c:19:92:
fd:e4:3d:41:0d:a0:53:80:ae:98:ca:97:76:a6:ae:
6b:30:c7:03:6b:87:74:d1:13:41:77:f8:b4:a2:3c:
bd:aa:09:cf:9b:1f:cc:55:ab:3e:42:c5:e9:0c:74:
ac:69:a1:68:39:b8:9b:b8:8e:12:73:46:8b:cd:c8:
0a:fc:b9:d0:79:a6:eb:a8:ba:56:27:9d:ec:df:05:
2b:1c:6d:5f:82:23:72:ac:fc:81:9c:44:97:33:bd:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9F:6F:9F:F5:F2:F0:DC:BB:A7:76:59:98:38:B5:29:56:65:1B:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BE7AE6736611EFBA584CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.5.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f9:23:f7:aa:6f:7c:c2:25:3e:3e:6f:14:59:b6:33:94:a1:
29:3b:16:2e:a1:ee:6c:cf:fd:20:7a:73:a6:8b:55:31:e9:11:
dd:a1:52:d8:28:e1:ee:a0:95:f0:9b:19:9f:bb:ac:11:d0:cd:
7a:72:00:d2:0d:c8:0b:64:bf:07:9b:77:9f:a1:34:ed:14:8a:
36:8a:40:08:4f:02:8c:8f:e4:ce:ac:16:f6:f5:34:f4:ae:8a:
be:d3:cb:18:f4:f8:fb:dc:07:99:5b:8e:ae:e9:6a:2f:e2:23:
34:25:48:03:01:0e:ea:d2:6a:9b:d2:ec:eb:35:95:ae:4a:00:
4b:ae:d0:8b:e9:e2:5d:ba:53:68:84:9f:c6:e3:77:30:5e:35:
e8:00:e9:b5:80:58:1d:6c:2f:cd:fe:1b:39:2a:80:a7:af:fb:
63:65:58:ef:c4:92:03:d8:88:6e:c2:91:97:38:ab:6e:8e:50:
f6:3b:91:86:0d:d4:74:98:40:fa:ae:5b:3a:06:9d:2d:db:33:
f1:16:82:e5:f9:75:44:3d:18:90:9d:4b:f3:3c:fa:57:76:33:
f9:78:ac:0c:b3:13:8b:2d:9b:c6:f0:21:e3:ce:88:35:c7:a8:
b7:93:5d:d2:2c:18:8c:7f:83:bd:8b:2a:53:df:7d:4c:98:d9:
9c:07:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org