Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C758CD02A65011EFAF63A160762E951A.roa
File: C758CD02A65011EFAF63A160762E951A.roa (raw, json)
Hash identifier: jlRhQQALUqNulqfTVBWBJf28FUP01P2Gtxgn9wZ6+84=
Subject key identifier: 97:8E:00:17:B7:53:C9:F7:28:2A:F0:EA:88:13:4A:F7:F4:47:9E:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C758CD02A65011EFAF63A160762E951A.roa
Signing time: Tue 19 Nov 2024 08:32:14 +0000
ROA not before: Tue 19 Nov 2024 08:32:11 +0000
ROA not after: Sat 23 Nov 2024 08:32:11 +0000
asID: 149014
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69412 (0x10f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:32:11 2024 GMT
Not After : Nov 23 08:32:11 2024 GMT
Subject: CN=673c4d0e-481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:31:82:e1:41:19:8f:81:6d:86:2a:a9:13:
4c:76:b9:8a:da:b9:0e:e5:12:75:96:13:a3:c9:5d:
2a:61:ff:90:e0:6f:9f:ff:f5:7e:de:d7:8d:95:a1:
47:ec:c5:55:ba:77:4a:fd:b6:81:76:3d:04:90:d2:
51:1e:67:c1:b1:65:18:60:0a:ed:79:45:92:ba:99:
3f:96:58:0b:74:8b:d5:27:d6:03:03:94:06:3c:96:
49:a1:ea:18:6b:32:63:f9:81:45:ff:ae:49:15:97:
52:6a:a6:6f:41:b1:9c:5b:7d:f1:82:b2:d1:2f:f1:
7c:0f:c5:04:d7:3b:0f:19:8f:d7:32:1b:47:cf:f5:
1c:68:2f:df:a9:7f:98:62:ff:c8:cc:c1:53:81:ba:
b4:36:51:b2:59:2b:c1:94:36:2a:81:3c:fa:6f:ea:
57:d9:81:e6:99:78:ab:f9:2e:ad:75:a4:27:b2:b4:
ec:25:51:2d:2f:e3:d9:98:78:17:d0:c9:35:74:a1:
70:d5:f7:59:4f:72:e0:69:b0:18:12:23:fc:a6:0d:
74:c1:41:11:c7:d2:80:a2:62:b7:9d:25:51:a5:f4:
e9:3d:26:0d:c0:75:00:cb:0a:35:8a:4a:9e:59:34:
a2:29:b4:1f:53:9a:95:07:e5:79:a5:53:2d:80:06:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:00:17:B7:53:C9:F7:28:2A:F0:EA:88:13:4A:F7:F4:47:9E:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C758CD02A65011EFAF63A160762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:cf:93:0e:c6:0f:06:2e:9f:ce:94:1f:4c:6b:0c:a0:12:e7:
d1:84:2a:4c:40:a9:e9:34:d3:d8:3d:54:82:22:45:47:3c:b1:
80:88:44:05:24:c8:c2:15:fe:d5:c0:02:ea:b2:62:b9:f0:b1:
12:f8:bc:36:86:e4:83:98:01:bd:6d:4f:1d:3d:6f:75:7b:e9:
a2:28:92:72:9f:38:8f:f1:33:1f:02:13:56:49:6e:3b:d2:1d:
1e:43:0a:9a:80:1e:87:3d:98:a8:a7:d1:3c:aa:7f:af:e9:4a:
21:ea:e1:93:b2:5f:61:15:ed:5c:dc:95:6b:24:8c:d6:55:8b:
26:fd:e1:22:8b:90:c3:d2:4c:e5:d5:a4:9b:fd:a7:60:5c:0a:
35:4f:98:a2:e2:25:82:78:71:00:a2:e4:02:90:5e:f4:7c:b7:
3d:f8:ef:ab:fa:a4:73:98:ca:a5:98:ee:72:a8:fc:f1:05:43:
a6:ff:87:9e:96:0e:63:72:6b:f1:65:9f:90:99:b1:2a:38:40:
47:bf:17:e5:1c:4d:17:04:aa:0e:9a:58:16:5b:31:3b:9a:62:
40:a8:c8:47:f5:c4:5a:fd:db:15:3d:02:58:e3:fc:d8:92:1b:
7f:95:47:4e:e4:d7:39:36:22:55:e1:12:33:5d:72:94:0f:6b:
fe:93:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:27 2024 by rpki-client on console-ams.rpki-client.org