Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D08CD4A45611EF81C86D6E762E951A.roa
File: E1D08CD4A45611EF81C86D6E762E951A.roa (raw, json)
Hash identifier: 3wiOKZlZK7LZKbeqw6Vx2SnB0KYXMYKe4I5Yk8rlGaI=
Subject key identifier: 1C:C6:C7:97:C4:13:FB:26:D0:0F:0C:9A:96:97:99:E7:FC:A6:63:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D08CD4A45611EF81C86D6E762E951A.roa
Signing time: Sat 16 Nov 2024 20:10:53 +0000
ROA not before: Sat 16 Nov 2024 20:10:50 +0000
ROA not after: Tue 26 Nov 2024 20:10:50 +0000
asID: 141167
IP address blocks: 154.212.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69175 (0x10e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 20:10:50 2024 GMT
Not After : Nov 26 20:10:50 2024 GMT
Subject: CN=6738fc4d-4458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:db:dc:dc:f8:71:c4:40:95:ea:64:7c:27:
63:a1:1f:3e:f0:f4:8e:a1:35:f5:88:1e:3f:fd:c7:
c8:69:ee:76:e8:4d:e2:fa:73:90:2e:72:f6:52:16:
07:48:08:4c:c7:87:b9:c3:60:b8:4b:3e:82:48:de:
9b:74:47:47:da:49:81:97:93:ff:cb:7c:ec:62:4f:
d2:b7:0f:f6:60:04:4d:30:b8:d6:d2:37:39:e4:e9:
0f:8b:68:6f:f9:ad:df:09:22:2f:84:df:0d:3a:f8:
00:11:13:58:31:69:6d:30:39:5d:fc:e8:6b:51:ae:
f8:aa:e0:41:a7:d5:1d:c6:3f:1b:d0:5f:5d:70:ae:
cc:b7:ac:8d:09:07:0d:9d:a6:f9:dc:2d:49:92:99:
2a:27:78:7e:4d:77:2a:8c:43:1c:36:3b:7c:85:18:
45:b1:06:b4:f4:2b:e8:31:06:b6:75:9e:b4:dc:f5:
41:b7:78:43:49:8e:e4:ca:c6:fb:11:f9:a2:d0:06:
3b:fc:61:61:84:41:cf:d3:aa:4b:d3:c8:d5:10:57:
a8:98:8e:24:2e:76:f1:4f:ce:a9:d9:68:a9:21:5e:
7f:2f:ef:36:e7:4a:3c:51:c3:40:03:a4:f1:9f:ea:
0b:48:40:64:fd:84:a1:f9:71:75:cc:8d:18:d7:5b:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:C7:97:C4:13:FB:26:D0:0F:0C:9A:96:97:99:E7:FC:A6:63:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1D08CD4A45611EF81C86D6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.140.0/23
Signature Algorithm: sha256WithRSAEncryption
66:a4:e7:9e:71:80:86:33:0e:2f:2b:fe:b2:a5:dd:13:13:42:
7f:43:69:0d:c9:b7:ca:8f:0c:1f:7a:5d:b6:55:13:e6:4a:02:
9a:6f:9a:e0:4e:32:2d:1f:5e:90:1e:6a:1e:47:8d:c2:e4:87:
b0:27:fc:f4:88:20:54:99:af:82:66:a9:8a:3b:1e:78:9d:ba:
53:6b:90:98:a1:35:66:90:ec:c3:4e:ef:6c:ad:ff:88:4f:c8:
a5:d9:7c:65:9e:4a:dc:eb:51:37:c8:14:56:59:c7:a5:d4:7b:
d7:96:6e:c0:52:77:19:dd:62:d1:0b:ab:16:c4:48:79:3a:a0:
66:d5:b2:f0:24:2d:a2:44:2e:d3:b9:ae:45:f2:77:51:6f:d3:
b7:9b:d5:ca:47:11:ea:4d:e4:e1:36:65:5f:80:5e:db:d0:20:
b5:bc:9c:06:45:f5:03:28:99:70:7a:7b:f3:8a:da:f7:51:89:
79:93:33:25:03:e3:c5:eb:f1:26:23:67:b3:b9:c5:05:ca:23:
8e:7e:d4:ad:65:a5:6e:ba:29:4d:8b:a9:82:56:d9:2d:9e:92:
87:a5:b9:23:7f:80:ad:df:2c:c0:cb:ec:5d:6b:d9:0c:38:27:
7f:70:b4:24:43:33:ea:c7:3d:5d:38:1a:78:ad:a9:1a:d8:35:
37:78:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:31 2024 by rpki-client on console-ams.rpki-client.org