Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C07CA474CA11EF90A0AEB5762E951A.roa
File: E8C07CA474CA11EF90A0AEB5762E951A.roa (raw, json)
Hash identifier: TIP7Xu5tqg9d/Wq/Zfdbr//B4XESvNKvQe0Pf3LxOe8=
Subject key identifier: 44:A9:2A:09:B7:18:B7:5A:51:00:15:36:A3:FD:52:C6:A2:ED:F5:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C07CA474CA11EF90A0AEB5762E951A.roa
Signing time: Tue 17 Sep 2024 08:00:31 +0000
ROA not before: Tue 17 Sep 2024 08:00:28 +0000
ROA not after: Sat 30 Nov 2024 08:00:28 +0000
asID: 142403
IP address blocks: 154.221.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61400 (0xefd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:00:28 2024 GMT
Not After : Nov 30 08:00:28 2024 GMT
Subject: CN=66e9371f-43ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:55:4e:b0:17:43:57:c3:27:ec:f4:f8:56:
ad:ba:52:b9:f7:ba:6f:98:3e:50:de:7b:47:9f:ee:
77:20:e3:fd:94:7c:6b:58:a2:fd:eb:17:a1:b8:c4:
4f:d8:09:2b:a7:45:33:b9:f5:8c:d7:b4:be:30:7f:
1e:90:68:ad:59:2f:7e:e6:d1:ab:78:10:20:0d:b9:
cc:2a:26:41:52:56:63:dd:24:3d:7e:88:93:78:b0:
e6:7c:c0:ed:ba:d2:2f:b2:07:f5:12:0a:49:a0:df:
7b:c2:69:b2:0f:28:6a:a7:e3:46:6b:cf:27:50:79:
0c:e2:93:fb:14:c0:ea:aa:2f:64:4c:1a:86:06:da:
67:9f:84:01:7f:e3:99:20:42:ef:72:e7:b9:18:04:
85:9e:a9:4a:e2:e4:95:ba:70:17:54:5d:14:aa:64:
cb:77:a4:f0:9c:4e:be:4a:1f:62:55:35:21:d5:f0:
bf:88:f3:00:ad:1d:63:73:87:3e:32:7d:64:38:24:
06:9d:96:47:c5:2b:f2:77:8a:ee:2a:39:38:7c:ef:
4c:40:cf:c1:e2:63:a9:42:43:9d:81:e6:db:9e:d6:
90:45:32:6f:5e:4f:da:45:40:cf:09:e6:ec:7d:89:
0c:8a:44:a3:80:16:65:85:09:28:50:96:07:51:66:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A9:2A:09:B7:18:B7:5A:51:00:15:36:A3:FD:52:C6:A2:ED:F5:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C07CA474CA11EF90A0AEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.29.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fd:51:5b:05:8b:35:86:73:48:7d:09:88:7f:55:c2:d1:a2:
a4:ed:98:be:8a:c7:b2:8e:76:55:54:f8:fa:37:f3:77:34:14:
5c:bd:de:0a:a8:49:96:d1:73:f4:ff:cb:f0:01:05:83:0f:86:
93:f5:12:87:78:93:f6:94:6a:db:c5:c2:18:b1:8f:08:87:c5:
bb:4e:c9:2e:a6:59:3d:1d:24:c4:50:f0:45:26:cd:a8:fc:0b:
1c:9e:64:63:22:d7:c6:49:77:a7:88:34:e3:88:d2:ac:f5:fe:
80:c6:e5:a2:66:cd:84:22:36:00:80:f5:e2:e0:40:e3:e0:7a:
a0:ca:81:84:92:cf:4e:93:af:4f:7e:ae:01:77:3f:bb:63:84:
ae:28:61:0e:ae:6e:fd:0d:3a:71:04:fb:3e:95:07:fb:8d:c3:
d4:e9:b7:32:21:12:ee:ce:cd:1b:df:6c:9a:0d:11:d0:e7:39:
0f:b3:cb:3e:1e:44:f5:f8:cb:33:8b:1c:76:c2:40:2a:87:34:
dd:70:70:c1:dd:b7:96:7b:ec:6b:10:9a:45:0f:04:15:8c:12:
f4:9b:1e:aa:b6:22:b2:7f:6b:db:24:16:6c:06:0c:14:03:75:
1d:cd:33:52:fa:67:af:6a:6d:17:f0:23:6d:cf:ea:fd:7e:e1:
6d:16:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org