Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB602D0EA8EE11EF8CF82654762E951A.roa
File: DB602D0EA8EE11EF8CF82654762E951A.roa (raw, json)
Hash identifier: BYjofx0lXJxbOajtv79NRMo+IsdSYPdTGLWuY3JmmXI=
Subject key identifier: 66:AA:E8:37:B0:25:C0:3C:19:D0:38:47:6B:DC:4F:5F:B3:7E:C7:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011139
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB602D0EA8EE11EF8CF82654762E951A.roa
Signing time: Fri 22 Nov 2024 16:28:51 +0000
ROA not before: Fri 22 Nov 2024 16:28:47 +0000
ROA not after: Tue 03 Dec 2024 16:28:47 +0000
asID: 62240
IP address blocks: 154.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69945 (0x11139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:28:47 2024 GMT
Not After : Dec 3 16:28:47 2024 GMT
Subject: CN=6740b143-31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:77:33:da:f1:93:99:cf:49:4a:71:32:e4:
1f:8b:c4:45:64:73:13:52:c7:c6:af:53:fa:15:ba:
81:7e:31:52:1d:ae:08:72:e5:f8:df:24:cf:a6:75:
16:ba:74:ca:eb:37:f0:80:cd:cb:15:77:7e:ab:f1:
50:8f:0b:53:f9:94:cd:ca:7a:bf:ab:87:4b:42:61:
fc:62:0a:3b:0a:58:6b:77:51:1b:18:8f:e3:e7:bc:
10:be:72:f2:28:5d:4f:cd:4a:bb:9d:b4:63:b7:87:
db:de:a2:70:b8:e5:a2:01:27:dc:36:4d:34:1d:77:
d2:8e:8f:fd:e9:9b:99:30:42:1c:a0:7a:10:5e:8d:
a2:a2:2d:db:07:d0:6f:21:9a:b5:70:4b:e4:02:62:
9a:f2:aa:51:f5:b8:df:63:19:e4:40:15:93:a1:96:
e3:0d:ef:b3:c7:55:04:38:ec:70:84:ee:91:1e:f9:
d1:68:0d:c5:cf:09:00:49:b7:b2:b5:41:d4:5e:bd:
08:6b:12:0c:79:93:43:60:69:93:1b:a8:d4:20:4c:
7f:13:7b:ef:38:50:15:2f:b8:fd:44:7e:af:c9:7a:
3b:e8:44:a8:f4:79:6d:5b:f0:21:80:b0:14:eb:9a:
9d:cc:60:44:8d:05:5b:f3:4d:28:67:6d:1a:57:09:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:E8:37:B0:25:C0:3C:19:D0:38:47:6B:DC:4F:5F:B3:7E:C7:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB602D0EA8EE11EF8CF82654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:38:18:4e:da:60:d5:ac:81:2c:cd:c2:ee:4b:a9:47:f6:42:
91:c9:58:e7:e5:e7:92:c1:01:ca:8f:05:2a:0e:48:af:76:d7:
b8:84:bf:2d:b4:50:f9:95:a0:35:f1:63:d8:4d:f4:bb:71:db:
82:56:3f:32:b4:52:a5:4f:1e:1b:eb:84:8c:d5:e8:c4:c2:d8:
1b:9f:47:05:15:b6:42:ed:d4:5f:e3:ce:88:b1:7d:9b:b1:e9:
02:b7:89:8e:e4:3c:f4:ce:33:e0:9e:25:91:4c:8e:24:08:fb:
0b:e8:d3:91:54:80:7f:eb:56:ea:16:1d:24:50:82:4d:de:8e:
7c:e5:cf:ed:68:21:9d:9d:e1:a2:fd:1a:89:0e:bc:8a:0a:af:
71:5f:c4:89:ad:27:cf:05:48:4a:01:32:b8:ed:66:25:0e:ac:
12:ba:0b:21:6f:6d:51:18:02:ed:82:c1:2a:b2:96:92:73:8b:
4a:37:2f:f5:15:c3:3f:4a:52:83:12:6e:f1:e4:68:b3:12:29:
16:51:fe:8a:9d:79:e3:73:14:18:d3:44:1d:cb:89:47:ef:ce:
b4:fd:dd:9c:28:ab:fd:a9:ff:d0:63:69:04:1b:1e:50:3c:31:
4f:1f:1e:33:fc:4c:bd:1e:43:53:4c:cb:f7:46:e5:1b:dc:c8:
b7:05:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:41 2024 by rpki-client on console-ams.rpki-client.org