Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B8A0CEA19A11EFA6CFA1BC762E951A.roa
File: E1B8A0CEA19A11EFA6CFA1BC762E951A.roa (raw, json)
Hash identifier: JOkOhcWi59Qcf/KTuM4hLIbjA570io+UQyNtD3I7p28=
Subject key identifier: EF:3C:01:D6:81:46:BE:8F:16:C3:EC:43:A9:CD:E5:FE:E6:FD:20:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B8A0CEA19A11EFA6CFA1BC762E951A.roa
Signing time: Wed 13 Nov 2024 08:40:05 +0000
ROA not before: Wed 13 Nov 2024 08:40:02 +0000
ROA not after: Sat 23 Nov 2024 08:40:02 +0000
asID: 138630
IP address blocks: 154.212.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68793 (0x10cb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:40:02 2024 GMT
Not After : Nov 23 08:40:02 2024 GMT
Subject: CN=673465e5-b37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:c2:b7:ca:57:7c:d7:d1:4d:9e:ad:86:2e:
78:5c:06:ef:20:cb:30:bf:3a:bd:09:66:a3:bf:99:
61:fa:b1:df:94:21:b6:6f:bd:1b:b1:21:bd:23:25:
89:55:89:65:2a:c9:c4:6b:64:c3:a4:59:61:93:2e:
cc:c3:32:cc:88:2e:4b:57:45:ae:fa:73:55:6c:44:
e7:f7:48:08:78:e0:c0:69:82:6e:a9:ac:cf:94:54:
69:80:49:0d:17:01:e2:16:e2:3d:ea:73:38:a0:1b:
bf:60:37:e3:bc:ef:c6:0a:d6:54:d1:03:f2:9e:4b:
03:d6:34:6c:99:d4:aa:86:86:98:49:d6:58:b1:73:
68:cd:5c:1c:ec:84:8a:8d:03:6d:e9:da:c3:3f:47:
47:24:01:6e:88:3f:88:0f:3b:9f:ef:cf:2a:22:ac:
d5:7b:fa:6e:47:b5:e2:52:42:9a:21:db:95:4a:79:
7e:e3:22:34:68:da:bd:37:aa:2e:8b:ad:08:2c:90:
ad:73:5c:8f:a1:1d:1a:0d:80:35:82:81:8b:a1:55:
3e:9a:42:a3:80:43:8d:92:b4:b4:8b:2c:19:60:59:
e0:0e:9c:33:d7:99:96:de:57:c5:4d:7f:a1:4a:ae:
95:57:f3:f5:9e:0f:40:8a:a5:e6:90:61:05:68:de:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:01:D6:81:46:BE:8F:16:C3:EC:43:A9:CD:E5:FE:E6:FD:20:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B8A0CEA19A11EFA6CFA1BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/20
Signature Algorithm: sha256WithRSAEncryption
70:82:8b:84:f8:8a:b9:76:06:df:8d:48:fa:5d:f1:b5:04:c7:
06:ec:73:6c:51:4b:77:e6:87:6b:96:c4:a3:24:62:79:b0:f4:
49:76:c8:e9:e1:99:72:a8:1a:05:d2:9f:7b:70:49:b8:74:c1:
3b:55:a2:92:f1:0f:ba:42:b9:3f:75:af:67:f7:36:bd:82:6f:
11:4a:ef:f5:61:82:81:94:0b:88:a3:97:c2:1f:36:69:92:04:
b6:77:f9:63:04:87:8d:d3:df:c9:d3:6d:20:07:2b:2e:ec:ed:
bd:65:1b:37:63:4b:3e:c1:47:01:08:50:a0:55:86:f1:41:1a:
f1:1d:e2:7c:34:ff:23:5e:63:e4:fe:01:71:4d:28:e1:89:bb:
37:6b:52:33:2f:fd:4a:41:1d:d5:35:b7:51:a2:ad:08:27:21:
ad:6d:8b:5e:c2:da:7f:57:38:d8:f1:32:2d:60:8f:4d:dd:1c:
96:03:9c:29:c1:67:89:f3:cf:dc:f9:db:a0:1a:fb:03:fa:99:
35:d1:8c:1d:86:8e:79:af:4b:7e:5a:ee:dd:65:64:b8:07:f8:
59:09:df:b6:cb:69:65:61:72:9d:54:c0:08:5c:25:81:38:fb:
96:6f:19:44:94:87:9f:67:7c:f5:d2:85:89:5d:9d:a2:5a:cf:
0d:fe:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:31 2024 by rpki-client on console-ams.rpki-client.org