Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0744E492E211EFBEFA774C762E951A.roa
File: CD0744E492E211EFBEFA774C762E951A.roa (raw, json)
Hash identifier: K6sw65Ztwer8pVkbpuWpxT4c6cOz5oD3afrCggKBo0A=
Subject key identifier: 42:40:82:75:5F:D5:74:86:BB:2D:C0:23:CE:CF:ED:1E:29:7F:13:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010260
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0744E492E211EFBEFA774C762E951A.roa
Signing time: Fri 25 Oct 2024 15:07:07 +0000
ROA not before: Fri 25 Oct 2024 15:07:03 +0000
ROA not after: Mon 25 Nov 2024 15:07:03 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66144 (0x10260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 15:07:03 2024 GMT
Not After : Nov 25 15:07:03 2024 GMT
Subject: CN=671bb41b-ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:dc:99:c9:15:2e:ba:74:de:c4:6d:24:cb:
38:4b:e3:c0:44:9a:8b:93:71:d6:fc:ac:82:a7:c6:
0f:34:88:2c:80:7c:e0:f2:72:04:f7:9a:a8:c0:2d:
f5:68:d1:66:68:f8:bb:d8:80:fc:30:5d:26:94:86:
2d:12:08:82:4f:ed:4e:f2:7d:a4:0d:ce:99:66:8e:
94:54:80:32:ce:26:e7:52:f5:6d:0c:f2:4e:00:90:
eb:b6:27:97:5a:7e:ca:a4:14:b3:8d:93:09:4b:e7:
1b:a3:28:5d:01:dd:f1:b7:2f:e1:21:ba:40:73:ac:
ae:27:b0:dc:0c:3f:a8:6c:6f:14:0a:69:c9:09:f4:
aa:88:5e:c1:1d:00:f1:77:b5:af:21:72:08:ab:13:
4e:c2:bc:95:c7:88:d9:d4:74:a5:0c:c8:e5:43:fe:
0f:2c:27:56:58:39:53:ac:d1:d9:eb:e8:a9:89:4c:
9d:4d:fb:15:62:b2:8c:3f:7a:13:c7:c9:ae:f7:f7:
3b:c9:ef:f4:ad:53:8f:24:98:70:07:a5:63:3e:8c:
21:77:e0:5a:f0:e6:cf:26:5b:24:95:df:d9:c6:00:
a5:fc:47:93:8d:06:bb:41:ee:0e:63:64:47:ef:94:
62:67:b0:06:d6:75:bf:a1:c8:70:dc:7d:17:a7:33:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:82:75:5F:D5:74:86:BB:2D:C0:23:CE:CF:ED:1E:29:7F:13:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0744E492E211EFBEFA774C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
94:39:65:b1:be:2d:07:cf:c9:a5:67:3f:0f:c6:61:af:ba:c0:
dd:79:42:70:60:8b:38:05:97:d9:a8:4d:2d:bb:c6:34:48:0b:
3e:f3:b5:24:cf:b2:18:cd:58:d7:20:bb:8a:17:51:fe:cb:85:
e9:23:10:e2:ca:a7:57:f9:cc:45:6e:6d:cb:2d:5c:06:e0:fb:
30:3e:e7:84:ff:24:6b:6e:4e:2c:07:af:f3:ef:23:91:92:3c:
bf:f4:c6:5b:9c:7a:0d:0a:c8:76:d2:f5:d9:0b:59:11:dc:3a:
40:d4:c7:0b:ff:64:94:ff:cd:f8:21:52:99:f1:8d:2a:be:93:
d6:b2:9a:ff:a5:33:1f:c8:30:4b:53:5f:f1:0e:91:f8:0c:d2:
d5:29:86:73:55:7f:75:fb:0f:35:d9:15:41:a7:0c:58:0c:6d:
6e:c6:d6:8a:7d:bb:68:6e:76:51:c3:92:c8:d0:5d:68:dc:9c:
a7:68:c1:11:b1:f5:0e:46:23:19:37:7d:95:a7:11:42:c4:44:
cf:37:8d:7f:4f:4f:a5:5a:0e:5c:e4:86:45:59:d9:67:b9:b9:
e8:9c:7e:62:6b:97:a3:f9:72:75:41:10:f3:bf:d7:27:5b:ce:
d1:0b:0a:20:dd:ae:65:2d:80:72:dd:03:07:64:2d:b8:7a:5f:
3e:17:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:07 2024 by rpki-client on console-fra.rpki-client.org