Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E161FE72A0D711EFBF151B46762E951A.roa
File: E161FE72A0D711EFBF151B46762E951A.roa (raw, json)
Hash identifier: +Sg7Kqdpbst9zVmfIqxlqrdqUBxz25NjOdFsvC1mRy8=
Subject key identifier: 21:C6:21:50:73:7F:EA:46:A8:B1:C2:E9:63:C7:25:CA:A6:A0:F6:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E161FE72A0D711EFBF151B46762E951A.roa
Signing time: Tue 12 Nov 2024 09:24:13 +0000
ROA not before: Tue 12 Nov 2024 09:24:09 +0000
ROA not after: Sat 07 Dec 2024 09:24:09 +0000
asID: 63139
IP address blocks: 154.223.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68618 (0x10c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:24:09 2024 GMT
Not After : Dec 7 09:24:09 2024 GMT
Subject: CN=67331ebd-e3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:8d:f2:e6:b2:1e:61:cf:f7:1d:a1:7a:a3:
8e:b6:93:bc:b9:d7:37:0f:1e:19:ac:29:d9:1f:89:
4d:93:24:6b:28:9c:df:4e:cc:8a:ad:e7:3f:71:ef:
e3:e0:19:02:10:e8:f7:16:44:5d:8b:2d:50:83:23:
25:28:83:cf:62:23:dc:bf:55:c1:81:3e:68:6f:07:
3e:3f:98:50:05:14:4c:2c:8e:b7:9e:7b:21:b8:4f:
90:42:e5:c7:69:58:38:a0:39:4c:2c:2b:68:e5:83:
ad:2e:e5:00:8f:24:44:1b:a7:9a:57:44:92:17:d9:
d8:b2:bb:76:b8:ac:db:84:06:40:0b:84:9e:f2:da:
6c:67:bc:5c:c5:d7:0b:4c:3f:b8:b6:bc:ca:5b:ac:
68:4e:d2:32:d2:0e:20:b7:d9:34:7b:c4:09:56:00:
99:cd:e6:22:83:5e:12:23:54:5d:2a:89:b0:17:12:
5f:10:b4:5d:98:ba:40:c1:bb:78:cd:7e:6e:16:fd:
1b:ae:f0:52:ba:b6:07:fd:f2:3e:ec:df:22:a2:d2:
58:9a:c0:d1:0e:40:c0:b2:49:44:a8:c4:d7:9b:06:
4b:ba:7a:dc:63:67:33:a4:38:e0:50:0c:9c:16:b5:
b9:5e:06:30:b1:83:56:be:6c:5b:af:c9:a3:9f:fe:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:21:50:73:7F:EA:46:A8:B1:C2:E9:63:C7:25:CA:A6:A0:F6:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E161FE72A0D711EFBF151B46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:46:c2:11:4b:a0:13:ac:1f:67:1e:57:2e:98:b2:76:1d:1f:
d2:db:c3:b4:36:2b:eb:75:03:f2:2f:71:8f:cd:43:6d:cc:db:
01:6c:78:92:b4:8e:b3:df:2f:ec:aa:70:b2:53:bc:2c:e3:75:
08:32:47:9a:1d:3e:7f:46:9a:f1:75:11:13:20:1f:1c:6f:40:
fa:3e:ac:3f:c8:32:71:fc:b0:41:bf:a4:20:25:f0:a2:f8:b2:
f4:be:3d:ce:cc:3a:34:9e:99:75:18:04:e9:af:42:e8:39:24:
c9:83:65:06:20:ff:fc:7f:52:52:8c:5a:85:61:d3:36:e4:90:
97:87:4c:09:a3:65:43:1a:36:c2:a1:25:3c:b3:72:a1:1a:b7:
5c:07:d4:b7:5c:8a:c6:4b:a5:6c:aa:64:01:9f:d1:1b:6c:46:
fe:49:87:09:d6:4d:fd:ff:74:6a:72:e5:a0:dd:a6:0c:c7:68:
3d:83:17:58:88:18:8c:fe:67:df:07:68:1e:fb:4d:4d:f2:38:
88:b4:1b:53:6f:5e:46:d4:24:0e:4f:7c:f3:2b:f8:81:e6:69:
f8:5c:d4:e5:4e:10:a5:9e:40:6e:96:4b:7a:29:23:ce:ea:87:
1f:92:ea:e0:52:4b:a4:f1:3f:87:28:96:66:ea:27:b2:6c:a4:
fe:2a:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:31 2024 by rpki-client on console-ams.rpki-client.org