Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5260A1E9F8111EF942B1A5C762E951A.roa
File: E5260A1E9F8111EF942B1A5C762E951A.roa (raw, json)
Hash identifier: 6ERb1N/NWvYRz9/LEM973qarEeT6yCEG8iqk/md1M4o=
Subject key identifier: 0C:B9:60:9A:05:78:D3:56:98:07:99:74:A8:27:03:E0:46:E0:40:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5260A1E9F8111EF942B1A5C762E951A.roa
Signing time: Sun 10 Nov 2024 16:36:12 +0000
ROA not before: Sun 10 Nov 2024 16:36:08 +0000
ROA not after: Fri 17 Oct 2025 16:36:08 +0000
asID: 137443
IP address blocks: 154.91.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68384 (0x10b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 16:36:08 2024 GMT
Not After : Oct 17 16:36:08 2025 GMT
Subject: CN=6730e0fb-537d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:a8:fd:67:92:34:6b:44:24:fb:13:25:02:
43:4f:07:b8:8a:95:ce:0a:ea:22:ba:2e:17:50:86:
ea:35:7f:84:33:8e:18:92:f4:a8:cf:a9:d9:17:0c:
75:53:33:a7:1b:c0:22:99:05:3f:51:fc:4c:e1:04:
53:50:6b:73:d6:01:72:47:4d:c7:f2:ef:20:db:45:
b2:09:cb:ea:79:59:18:4a:48:f6:b6:3e:e2:d0:71:
cc:35:3e:a7:f7:1f:6b:e1:ba:ec:d1:4c:50:14:59:
c0:41:ee:15:df:12:9d:a4:86:46:9a:87:13:e8:98:
f1:20:d0:c0:e2:b2:39:1e:c9:fb:cf:0d:10:e6:f4:
a7:62:7b:43:ad:1c:4e:c8:40:5d:1a:93:6c:88:69:
6a:e7:42:ab:d6:6b:39:f4:0f:f3:c9:21:3c:f7:6f:
70:23:b1:33:6c:7d:8f:45:43:be:d7:47:fa:a4:74:
cc:85:63:89:f2:df:d7:6a:6a:3d:6a:65:fc:d3:8c:
2c:bf:fd:63:77:0b:0f:71:c2:db:5f:04:69:76:4b:
dd:97:3f:e2:9d:6f:00:d2:25:7d:a6:1f:fa:13:97:
78:08:e7:75:e1:e4:a1:a4:65:3d:c1:35:3b:f0:8f:
51:6d:38:62:47:4a:d3:57:2e:8c:e2:86:86:70:29:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:60:9A:05:78:D3:56:98:07:99:74:A8:27:03:E0:46:E0:40:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5260A1E9F8111EF942B1A5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c7:1c:b7:33:89:5a:55:ef:f8:b2:99:61:a4:2e:d1:3c:97:
45:f5:4d:cc:72:76:c6:05:97:d7:e8:cc:af:38:cc:6e:84:d2:
e0:da:7e:f5:d8:55:32:a0:d8:be:bb:a3:3a:a4:70:d4:ec:70:
3d:e1:34:62:c5:f1:1d:dc:af:e2:13:ba:76:68:8e:a0:05:84:
ca:79:82:1b:af:e0:22:ed:5d:d9:fc:95:41:21:5b:d9:39:ef:
bc:37:a5:85:fe:76:6a:7f:63:56:e3:9c:7c:27:fd:ff:93:0e:
1d:d9:a5:94:dd:61:2d:ab:6d:94:27:3e:d5:84:ef:6d:32:d7:
82:fa:bc:d5:c7:d7:33:d1:31:0d:6e:b9:4a:24:b4:01:c4:07:
15:c0:b6:21:fe:3f:5a:bc:c6:b5:ee:07:d9:94:fb:76:14:0c:
4d:14:a3:a6:5d:08:b2:45:6e:b2:5d:e7:85:a3:c0:7d:b3:c3:
c8:3a:ca:e5:17:83:c4:3b:18:b6:e1:bf:28:34:69:f9:f1:ba:
e5:8f:46:d4:f1:e9:3c:f7:69:ce:64:49:86:6d:c5:c0:a1:5b:
49:98:4b:47:9f:9a:29:fb:88:f4:d1:9c:e8:05:bf:65:b3:0e:
81:e3:c2:62:a1:e0:e9:23:88:48:73:c6:a5:0b:34:57:9f:51:
d0:aa:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org