Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4870E8A4C511EF97ECE8B1762E951A.roa
File: DA4870E8A4C511EF97ECE8B1762E951A.roa (raw, json)
Hash identifier: v1Grf9LJpcR1eSuxxHtD1cWNCkW2YqCvGAhNSfsZ0gQ=
Subject key identifier: A6:04:42:6D:5C:16:D7:91:9A:D4:27:EF:CB:4E:EA:3D:BE:55:0B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4870E8A4C511EF97ECE8B1762E951A.roa
Signing time: Sun 17 Nov 2024 09:25:15 +0000
ROA not before: Sun 17 Nov 2024 09:25:11 +0000
ROA not after: Mon 25 Nov 2024 09:25:11 +0000
asID: 5065
IP address blocks: 154.207.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69252 (0x10e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:25:11 2024 GMT
Not After : Nov 25 09:25:11 2024 GMT
Subject: CN=6739b67b-0695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:75:6f:37:7a:00:18:54:ef:61:1b:b2:c2:
5b:81:76:6b:c1:45:5e:35:a8:d5:5e:75:e3:e0:59:
a9:57:05:b0:58:e4:78:70:ce:00:5f:a4:06:42:7d:
df:f4:35:6e:96:43:17:85:26:a7:d4:f1:8c:6c:fc:
06:de:3b:db:ff:8d:29:dc:b4:97:47:43:a6:e0:9f:
4f:2e:5c:3d:24:45:f0:70:14:07:ca:10:1f:f7:6c:
52:f9:89:d9:5f:c4:71:05:27:30:fc:d2:52:33:70:
9f:37:7c:af:12:a2:08:e5:11:12:ec:c7:7f:90:c0:
5b:a4:5c:33:4d:ee:17:09:af:5b:31:04:db:dc:35:
48:6c:b0:23:25:33:91:3f:64:97:67:62:4f:b0:ac:
29:f6:b0:d0:06:3b:9d:ac:1a:08:84:c6:2f:ef:c0:
a7:4e:ca:cc:dd:1a:6f:be:c2:9e:c1:f9:f4:c4:67:
1a:6b:9b:5c:01:72:ca:d0:44:19:d0:ec:21:94:ee:
ee:44:46:04:71:f8:30:46:4d:11:87:d3:c5:73:95:
53:19:11:a4:1d:e3:ba:97:bb:26:58:09:f6:00:77:
bd:53:4b:cc:b7:c6:8a:3c:86:71:df:d9:00:ad:bf:
75:28:41:ab:0a:40:d6:39:b3:58:e9:52:73:71:7a:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:42:6D:5C:16:D7:91:9A:D4:27:EF:CB:4E:EA:3D:BE:55:0B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4870E8A4C511EF97ECE8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.176.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:4b:4b:1c:b3:04:b3:b3:19:e7:ab:2f:68:f9:6d:e1:30:cf:
17:b8:d0:17:06:73:4e:10:e1:0f:82:58:59:e0:a5:2d:31:30:
09:16:c2:9b:87:74:4a:4b:5c:77:33:c6:1d:f3:ae:ac:e0:3f:
e1:09:36:e7:4a:13:9e:40:dd:91:9b:0a:27:a0:a2:81:7c:c8:
10:16:cc:d1:f7:d0:11:30:0d:53:ca:a0:c3:85:8a:fa:dd:a1:
80:a1:bd:dc:25:13:b0:85:82:82:53:b1:1d:e0:f8:0b:13:3d:
37:ec:d5:a0:89:18:ad:db:c8:a2:67:19:5b:29:d4:46:8f:ab:
42:44:a1:68:a2:da:73:13:19:57:e1:16:c3:07:f1:6f:3c:e2:
46:5b:ea:dd:18:db:3b:cc:42:38:da:55:fa:5c:6b:56:c8:46:
c6:a7:af:83:7f:4e:8d:a0:02:44:55:e0:66:70:5f:15:ba:b8:
59:ed:d1:0e:ab:d1:05:06:8a:76:73:f8:08:5e:64:d3:ba:82:
2a:5b:99:ab:0d:ff:f1:ce:51:5f:41:6f:1d:53:e8:73:ac:7e:
ae:29:e9:b4:15:1f:2c:29:db:8c:20:e8:34:5b:dd:84:09:3e:
8c:df:43:9f:3a:16:c3:1e:1f:97:61:62:c0:03:d0:d7:e5:50:
64:8b:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:10 2024 by rpki-client on console-ams.rpki-client.org