Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CBF9A0A9C311EF9333428F762E951A.roa
File: E0CBF9A0A9C311EF9333428F762E951A.roa (raw, json)
Hash identifier: E/ZDRIST8DFvFJ34uk3Tf72yxNNdw5pZ0lpfmi4ci/c=
Subject key identifier: A8:66:DB:3A:42:02:6F:4C:8F:A7:95:2A:D7:33:99:75:7B:A8:B9:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CBF9A0A9C311EF9333428F762E951A.roa
Signing time: Sat 23 Nov 2024 17:53:43 +0000
ROA not before: Sat 23 Nov 2024 17:53:39 +0000
ROA not after: Mon 09 Dec 2024 17:53:39 +0000
asID: 5065
IP address blocks: 154.206.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70098 (0x111d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:53:39 2024 GMT
Not After : Dec 9 17:53:39 2024 GMT
Subject: CN=674216a7-5aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:a5:ad:d5:88:09:88:fc:12:fc:f3:3a:a9:
d9:dc:e4:a0:cd:cf:c8:17:51:38:bd:ef:a9:db:3d:
ee:1d:bc:21:8e:bf:4a:58:e3:4c:6a:a1:d3:9a:25:
b5:c5:c0:43:0a:a7:e8:05:39:48:02:55:84:68:76:
a9:bb:7b:ae:4d:c6:e4:a2:01:cc:b5:24:3e:66:91:
76:21:3f:19:44:e0:04:26:d8:88:d6:87:0d:74:8f:
fe:3f:55:7a:b7:0b:71:3f:18:95:d8:1d:05:b3:84:
36:17:f6:62:8a:1f:d3:4b:12:68:f9:e9:85:8b:f9:
11:74:6a:94:ae:a2:85:08:95:87:66:4d:8e:87:08:
21:95:c4:b3:af:27:60:d4:d5:b0:35:1a:6c:98:4c:
a6:42:11:2a:cb:af:7f:de:fc:2c:c1:20:02:eb:f8:
7b:fe:dc:6c:1c:29:e4:e7:87:0a:98:e7:74:06:f7:
16:b7:dd:ff:ff:e9:39:3e:a5:b3:81:0f:71:11:41:
ce:15:af:46:75:37:bd:51:26:77:78:54:c6:0a:83:
d7:f8:b3:88:d4:62:1e:e3:b0:0b:df:eb:dc:12:41:
f4:7e:14:0e:c1:ac:69:22:2f:0b:54:74:0e:22:74:
99:5c:3a:28:6a:ef:75:50:01:26:c2:5d:1a:1c:ea:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:DB:3A:42:02:6F:4C:8F:A7:95:2A:D7:33:99:75:7B:A8:B9:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CBF9A0A9C311EF9333428F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:09:62:90:1f:5c:d7:75:01:3b:22:b7:80:28:79:e5:1a:56:
88:14:77:80:03:3c:f5:a9:48:95:b5:da:d1:fc:79:c4:88:e8:
e6:f3:93:b4:37:a0:f9:d3:2e:28:b3:37:24:f1:51:06:40:c2:
ef:6b:77:89:92:ca:46:01:aa:2f:69:c1:60:cd:be:25:3a:1e:
cc:b1:78:34:d9:54:4d:d0:de:3b:df:c5:58:78:ab:82:ec:82:
22:61:d5:be:65:83:df:cd:8f:53:0a:5b:07:31:d1:9b:36:53:
92:b2:dc:a3:a3:3a:5f:1f:43:ca:d7:a1:3a:bd:e9:99:e7:56:
0c:05:fb:8b:02:e0:a2:98:06:3d:3f:b0:85:ec:58:fa:ac:a0:
d7:ef:08:bb:20:37:28:b1:5f:4a:b4:ca:80:c1:5c:30:fd:24:
c4:6b:2b:d2:f7:63:0c:79:40:2b:a0:17:1f:e6:f4:0e:83:1d:
cf:94:0a:79:0c:96:ab:8b:87:f5:27:36:fa:5f:8f:28:47:42:
84:b0:19:63:a4:97:21:b8:75:7f:92:8b:b2:7a:d3:a0:89:93:
b6:45:f0:7d:1d:ed:7c:02:3c:55:1f:80:25:b1:2f:36:5d:f8:
fc:93:a7:4c:46:26:78:55:54:91:4d:dd:f5:2d:1c:43:88:6b:
87:95:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:50 2024 by rpki-client on console-fra.rpki-client.org