Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E627E248A8DC11EFA581C663762E951A.roa
File: E627E248A8DC11EFA581C663762E951A.roa (raw, json)
Hash identifier: 1ecXrftkhTvXkq1U8lmJ215ZvLTxHMqN0jmgDAZS/+M=
Subject key identifier: 2B:77:11:F0:58:75:E2:EC:C1:07:7F:68:33:56:49:E8:99:EA:3A:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011061
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E627E248A8DC11EFA581C663762E951A.roa
Signing time: Fri 22 Nov 2024 14:20:18 +0000
ROA not before: Fri 22 Nov 2024 14:20:14 +0000
ROA not after: Mon 09 Dec 2024 14:20:14 +0000
asID: 5065
IP address blocks: 154.206.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69729 (0x11061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:20:14 2024 GMT
Not After : Dec 9 14:20:14 2024 GMT
Subject: CN=67409322-6818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:df:9a:1d:10:fd:52:c7:76:9d:1e:b5:e1:
8c:13:50:f8:47:93:e3:27:6f:12:08:c0:9b:af:55:
50:4e:69:7e:82:75:d8:bf:66:2d:85:e0:39:51:fa:
7c:3f:9e:a7:b8:8c:ca:81:b1:fa:58:8d:27:4e:91:
eb:70:7b:75:1a:68:9f:a1:99:9f:26:0e:b2:ab:8d:
ff:ca:7c:35:eb:a4:94:8e:7b:21:5d:c1:e1:a3:bc:
9a:04:88:eb:97:fc:a0:78:22:f2:d2:87:ff:1c:78:
99:d8:60:36:f1:90:20:0e:2b:f2:c0:32:9f:48:81:
12:fd:d0:e7:8d:df:2b:1e:24:3f:94:be:96:3e:76:
67:16:fd:b1:1c:52:f5:a2:23:c1:e8:e3:a2:b2:fe:
28:2d:ed:5b:91:40:5f:88:1e:96:91:26:e7:d5:91:
eb:87:7b:3a:3c:98:31:35:53:55:32:1c:33:d0:84:
7d:01:49:9d:7c:9b:1f:f7:de:d4:f9:8f:01:af:32:
07:ba:06:76:b8:00:34:4b:79:f6:9e:66:69:8c:39:
fa:e3:42:d1:ee:29:84:c8:a3:3b:ed:95:ab:99:dc:
0d:b3:d5:25:91:cd:3b:9e:b0:d3:d5:5e:48:80:44:
7b:7a:3c:71:58:67:ed:c3:8c:af:89:bd:6e:8c:01:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:11:F0:58:75:E2:EC:C1:07:7F:68:33:56:49:E8:99:EA:3A:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E627E248A8DC11EFA581C663762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9f:16:d2:b7:c7:e5:bd:dc:4f:39:6a:63:de:da:26:e7:8a:
e9:5a:93:bf:b1:ff:83:86:cc:85:40:9e:09:df:d4:a4:5f:b5:
d9:1c:d3:54:d9:a4:bb:99:1c:21:73:5b:0e:f9:f4:30:e8:08:
67:6e:84:92:30:36:f4:65:27:40:d0:44:28:55:c5:d3:dd:5e:
bc:6a:19:a6:7f:64:93:46:27:70:dd:28:bb:73:39:cc:09:aa:
3b:9c:88:2b:67:e4:d5:18:92:98:5e:ae:39:7e:03:50:59:a6:
62:52:e0:36:37:85:4e:8d:c9:c2:5a:ca:10:0a:43:35:1c:9b:
64:91:dc:86:3d:17:0d:47:2f:29:f4:1f:1e:38:c2:d2:9f:15:
dd:f6:66:a3:84:8a:f7:34:e6:6e:11:5c:94:69:81:31:dc:11:
2a:23:75:d8:a8:69:43:4d:5d:ff:60:04:39:28:b0:02:36:d2:
f0:c2:6e:a4:2b:66:1b:15:d4:56:ef:0c:1b:28:9c:b9:0f:cd:
24:7b:f3:4b:b3:c1:33:0f:c5:0b:ed:4f:29:e9:e8:20:df:69:
35:ae:6d:48:39:d6:71:65:ff:37:9d:d0:1e:f9:09:6b:b8:49:
f1:42:cb:20:0d:90:d7:1f:ab:15:01:59:46:9e:6e:ba:b6:62:
31:b2:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:43 2024 by rpki-client on console-ams.rpki-client.org