Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB84337296B311EF9D98705D762E951A.roa
File: DB84337296B311EF9D98705D762E951A.roa (raw, json)
Hash identifier: g+C3pLtQfE5U0SWpm2PNFqW1pFDUfXSObPakpXImthg=
Subject key identifier: FA:CE:C6:AC:98:4F:C8:D9:5B:DF:77:96:F3:13:38:A9:FF:B9:B8:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010411
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB84337296B311EF9D98705D762E951A.roa
Signing time: Wed 30 Oct 2024 11:41:10 +0000
ROA not before: Wed 30 Oct 2024 11:41:06 +0000
ROA not after: Wed 11 Dec 2024 11:41:06 +0000
asID: 138915
IP address blocks: 154.203.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66577 (0x10411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:41:06 2024 GMT
Not After : Dec 11 11:41:06 2024 GMT
Subject: CN=67221b56-539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:5c:79:5c:aa:da:44:97:1e:44:54:83:0a:
29:1d:25:6f:f6:47:54:b0:1e:e2:2f:d8:99:cf:79:
c6:6f:db:a2:c7:b9:92:9d:0c:79:ea:d2:25:78:4f:
7c:b0:4b:b5:98:63:ee:c4:8b:f1:bb:39:6d:68:52:
3f:37:14:00:e9:ae:b5:d7:f7:1e:43:03:8c:13:99:
8b:12:c1:28:76:3e:bd:fe:82:2f:7c:ce:18:16:67:
88:e3:9e:f2:b9:14:f7:93:64:36:fb:71:2d:08:26:
8a:b1:92:ab:02:7e:57:4d:67:26:15:64:85:37:eb:
82:f3:33:ac:2b:3c:f3:59:dc:e1:28:02:79:86:da:
36:d1:15:d0:7c:c9:70:a2:f4:1a:21:88:93:03:6c:
04:ee:c3:b4:22:26:d3:30:18:ce:9f:d5:e0:c2:c2:
7a:76:cf:b5:4b:cf:f9:27:e3:61:ef:7d:85:0a:e4:
1f:e4:82:1a:98:d1:0e:92:e6:84:2f:1e:bd:45:94:
49:95:16:00:23:75:3b:6c:75:fa:e0:c5:8b:82:13:
2f:8b:4e:76:62:7c:99:7c:6e:5a:61:0e:43:b0:69:
73:ce:87:2e:7f:3b:62:e2:52:b4:29:89:93:24:83:
1b:9b:63:d7:b5:c5:e5:35:2b:49:12:dc:5c:7b:ef:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:C6:AC:98:4F:C8:D9:5B:DF:77:96:F3:13:38:A9:FF:B9:B8:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB84337296B311EF9D98705D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.140.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:5a:18:00:28:bc:fc:b7:52:d0:2c:dd:9c:36:5f:ef:60:a9:
dc:7e:be:e2:a6:a6:7c:11:57:51:7e:3e:23:c8:03:fe:a0:4b:
db:7f:11:ac:a9:b2:c8:67:29:d7:f5:c5:48:03:47:c9:84:e4:
fb:a7:68:ad:21:c1:f3:f7:89:6a:22:41:5b:e3:f2:89:3a:0c:
5c:67:27:3d:d2:7a:66:2d:73:44:f0:57:c5:98:dd:7c:21:78:
2a:ef:24:c2:a7:b6:24:68:c7:fd:a7:12:8a:d3:0e:54:83:7b:
67:d0:65:90:85:0c:0d:98:1d:e7:69:43:8e:7e:4e:21:39:47:
c3:94:6f:75:9b:be:5e:95:19:6e:29:34:d9:3a:47:c8:19:e3:
01:62:ef:9b:9d:b3:8a:b1:ac:63:cc:2e:2c:91:1d:f1:14:40:
91:95:91:54:8e:9a:f0:3c:43:37:67:d1:20:5d:68:a1:3c:db:
16:22:8e:e3:15:64:75:4e:0c:6a:72:52:33:d6:bd:c6:3b:a5:
9f:4e:31:76:68:ba:a2:e1:06:f3:3c:a3:2a:c8:7b:3c:09:3b:
cf:21:38:2c:92:2f:78:7b:70:ae:92:6c:81:bb:89:27:53:da:
c0:f1:37:bc:5b:a6:4a:14:bc:22:a4:b8:3f:9f:a8:13:96:ea:
8e:8d:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:41 2024 by rpki-client on console-ams.rpki-client.org