Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46ACE0C9AAA11EFBF1A305F762E951A.roa
File: D46ACE0C9AAA11EFBF1A305F762E951A.roa (raw, json)
Hash identifier: Gbe0XRRkQjSXyE+iP4oaImKYbfmzGmKXraDFin5g8is=
Subject key identifier: 7C:64:45:11:99:45:4F:25:8C:0D:B2:AE:D5:AB:13:EB:AA:80:B8:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46ACE0C9AAA11EFBF1A305F762E951A.roa
Signing time: Mon 04 Nov 2024 12:46:37 +0000
ROA not before: Mon 04 Nov 2024 12:46:33 +0000
ROA not after: Tue 03 Dec 2024 12:46:33 +0000
asID: 139646
IP address blocks: 154.212.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67244 (0x106ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:46:33 2024 GMT
Not After : Dec 3 12:46:33 2024 GMT
Subject: CN=6728c22d-a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:3f:b6:11:f7:ef:a7:a1:63:22:54:78:c3:
3f:b1:0f:2a:e9:6d:ca:1d:5d:f3:e2:22:65:4e:0e:
7e:4a:f4:83:e1:b0:67:e4:84:d9:f2:6d:74:86:02:
a4:d7:8d:fe:f0:08:98:78:f8:c6:6a:00:9e:ea:e5:
70:8a:55:f9:ab:23:c4:2b:51:9c:7e:4a:32:05:80:
d3:cd:1f:0f:90:07:59:8a:7b:70:c4:4a:1a:e5:7e:
79:01:94:64:44:2b:21:0e:9f:e6:c9:bb:f7:4f:3c:
84:67:55:1e:d2:1a:b2:87:05:77:92:97:28:bc:cd:
1f:c0:3d:25:ea:8d:9e:3d:46:5d:2f:90:5d:45:65:
af:1b:e3:f5:0f:e1:62:5c:b8:61:67:7d:c2:ec:e6:
7e:78:de:4e:0b:61:5e:19:e6:51:0c:bb:44:6a:2f:
bf:33:a6:ce:ae:a3:b2:00:eb:b0:50:63:c8:c1:cb:
12:8f:8d:d3:c7:19:37:d8:ea:b0:11:52:13:ca:e2:
b4:f7:ef:13:9e:a6:09:c2:73:4e:ab:8f:43:e3:4d:
22:90:a8:10:15:7c:b4:8c:81:4e:16:80:3d:75:7d:
b0:81:ba:49:bd:f3:68:a4:f4:18:03:1e:a8:73:d0:
58:c8:78:1c:fa:54:b1:5a:18:37:29:fe:d4:af:59:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:45:11:99:45:4F:25:8C:0D:B2:AE:D5:AB:13:EB:AA:80:B8:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46ACE0C9AAA11EFBF1A305F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9b:f2:17:37:50:04:ec:0f:59:2b:17:8b:2d:c3:d1:6c:60:
1d:bf:2d:eb:e0:72:a4:75:c1:4f:6a:2f:4d:62:76:58:6f:d6:
89:4d:1b:4f:37:98:31:93:67:83:02:46:5b:3b:8a:9c:de:c3:
61:07:a4:ab:9a:06:11:52:5e:90:60:83:f7:18:75:2e:b3:e7:
f8:7b:60:05:3c:a2:d7:2c:50:bc:c9:33:59:4c:4a:ac:3f:d9:
c3:85:f5:eb:97:3b:c3:16:1a:64:f3:38:30:8d:3c:ce:2c:a2:
87:49:d8:6c:1e:d8:bd:00:ca:4d:35:11:4d:05:81:00:85:7a:
0c:3e:69:21:58:af:c8:22:7a:9f:dc:1c:7c:7d:32:3a:84:8f:
fe:b2:fd:83:51:5e:4e:b4:f8:22:b7:15:a0:68:62:ba:e0:c7:
dc:e8:26:95:a2:3a:c5:28:1f:ec:1b:83:a7:f8:a1:b1:a6:8e:
37:f8:5d:70:fc:80:95:61:5d:1f:2f:6e:be:81:44:1a:35:1b:
b7:e6:06:0e:5d:6b:bc:d3:3b:61:d5:c1:20:9d:b4:66:65:58:
15:81:a4:06:11:7a:f8:db:13:5d:2f:ec:1b:57:bc:92:68:14:
d8:7b:35:a8:d1:5a:9e:eb:81:89:72:fe:57:c5:c6:82:ec:4d:
a7:d5:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org