Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769DC206AA111EF9FF6E470762E951A.roa
File: E769DC206AA111EF9FF6E470762E951A.roa (raw, json)
Hash identifier: HCg2czJXeSDwKOK07OBOKHweMdx05e8D4NwX0VMtliI=
Subject key identifier: B7:51:B9:0A:DF:53:7B:F3:20:32:D6:42:70:16:CE:A9:38:E9:02:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769DC206AA111EF9FF6E470762E951A.roa
Signing time: Wed 04 Sep 2024 09:41:48 +0000
ROA not before: Wed 04 Sep 2024 09:41:44 +0000
ROA not after: Thu 24 Apr 2025 09:41:44 +0000
asID: 63888
IP address blocks: 154.207.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59955 (0xea33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:41:44 2024 GMT
Not After : Apr 24 09:41:44 2025 GMT
Subject: CN=66d82b5c-5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:73:ca:1c:d2:92:e6:e3:79:80:50:59:7d:
db:38:01:74:6e:f0:ae:eb:b2:fd:fd:71:3e:66:33:
9b:59:67:8e:d7:3e:a7:66:fd:fb:2f:44:61:fc:39:
95:60:71:5f:65:6c:33:41:b1:45:74:c5:27:21:0b:
37:05:58:ee:55:73:0d:e2:b4:b2:cc:d6:2c:42:09:
3f:95:f8:77:e1:f4:9b:d3:7b:d9:5a:2c:49:7f:21:
4b:0f:e2:9c:4c:d8:e8:5a:f9:21:71:83:1e:34:01:
cb:41:7a:87:43:7f:f3:70:8a:bf:da:73:de:f8:10:
68:a0:00:72:65:b8:26:7a:aa:9f:87:57:6b:ac:cd:
c0:9e:68:e2:d9:bc:ea:37:85:98:ab:8b:f1:3a:dc:
15:81:05:87:b4:74:ea:18:c5:75:b9:3c:c3:74:83:
1f:b6:83:4b:9e:20:88:1a:18:98:52:c8:e5:56:82:
81:8c:2b:6d:76:da:4a:00:37:36:9a:2c:35:20:40:
1a:1c:d4:74:2f:13:15:58:53:c6:91:53:af:08:2b:
11:55:a7:ef:80:c3:27:b6:da:ee:49:fb:86:fe:23:
b5:13:a9:11:6b:9d:32:9b:5e:d6:45:04:ab:81:48:
e1:6c:bb:61:75:f1:d1:dc:37:52:09:cc:15:73:2b:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:B9:0A:DF:53:7B:F3:20:32:D6:42:70:16:CE:A9:38:E9:02:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769DC206AA111EF9FF6E470762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.104.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d2:9f:35:5c:90:3a:27:93:9b:ba:14:65:a8:0f:4e:16:6a:
e3:84:da:b3:3a:c4:14:0c:08:d7:38:e6:d4:2d:00:25:ef:96:
93:ba:2b:0d:22:52:68:be:78:7b:b9:b6:a7:62:98:7d:34:a8:
be:7f:4f:33:2b:08:91:1f:4f:fe:e7:cc:df:14:2c:fa:b9:5b:
73:3f:5c:13:32:fa:38:8c:bf:1e:84:ad:2c:1b:87:d4:ad:7a:
db:bb:a1:db:89:6a:52:82:d1:c8:9c:ef:78:41:61:99:d8:39:
d9:98:45:e2:39:82:39:2a:21:b1:18:e8:54:6f:16:88:4b:70:
c2:b8:91:f8:bf:fa:a1:68:25:ea:b2:c9:6d:6b:08:24:fc:be:
0e:9e:a8:02:59:69:50:db:26:bd:ac:18:e4:22:53:64:e3:9c:
39:d3:51:63:d5:00:05:9a:e6:51:b9:d0:e0:25:54:27:71:4e:
bf:6e:69:a1:c3:17:33:af:53:68:63:e8:28:30:41:5e:1c:8c:
ba:43:3a:7f:cf:f9:42:ad:ff:18:7f:80:3f:a1:8a:60:20:ad:
03:6f:f7:74:c0:18:5b:58:63:9f:51:d9:d1:7e:b1:01:79:b5:
02:8a:d4:fa:f7:13:2b:be:8c:b4:14:84:80:b5:a2:64:e3:1e:
3a:3d:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org