Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4F8A60A32311EF8BC04574762E951A.roa
File: EF4F8A60A32311EF8BC04574762E951A.roa (raw, json)
Hash identifier: tHfeiiOunkYVNFOpiItHixb1QmDhidneyYFIBxftaF0=
Subject key identifier: AF:3A:AA:CC:1A:73:58:9E:2E:BB:99:E2:4C:80:C2:A0:4A:84:23:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4F8A60A32311EF8BC04574762E951A.roa
Signing time: Fri 15 Nov 2024 07:33:41 +0000
ROA not before: Fri 15 Nov 2024 07:33:37 +0000
ROA not after: Thu 12 Dec 2024 07:33:37 +0000
asID: 394432
IP address blocks: 154.196.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68920 (0x10d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:33:37 2024 GMT
Not After : Dec 12 07:33:37 2024 GMT
Subject: CN=6736f954-e22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:75:06:15:e9:4a:4b:4c:42:92:4c:16:1f:
4a:ec:12:a0:c2:84:22:bb:17:9f:2e:22:e0:9c:2b:
b0:20:0d:b9:82:ed:70:44:ed:a5:50:c8:7c:35:c6:
23:67:65:3d:36:02:7d:4a:9d:7b:57:68:68:46:28:
ef:82:fa:23:b3:33:08:59:7d:1d:72:a7:6e:53:d1:
ee:0b:66:46:b5:87:3a:fc:4d:41:b1:65:17:46:3b:
38:08:f0:17:52:36:10:c9:19:26:3f:09:43:10:21:
f3:fb:b6:eb:ce:6b:c9:f2:1b:de:7c:70:97:0b:35:
20:aa:05:70:6a:d8:36:9a:a8:df:47:f2:83:64:0a:
2e:ca:ee:f8:52:57:70:81:52:10:be:29:46:b3:95:
87:65:1c:21:01:cb:f0:b4:65:2c:32:da:3d:e0:75:
92:4b:c0:43:be:2e:80:51:30:87:c8:af:5a:02:e4:
9f:be:d6:5e:07:41:af:30:5e:52:50:90:70:8a:69:
13:b2:6d:04:4b:dd:7b:52:16:58:06:d9:f7:e8:e1:
04:b7:e5:6c:eb:2c:bf:15:aa:26:6d:22:28:94:50:
6e:46:7c:7c:30:91:b8:96:3b:f4:96:18:d5:84:65:
ad:3a:b9:d0:9f:fc:be:2f:98:4d:94:09:b4:ae:46:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:AA:CC:1A:73:58:9E:2E:BB:99:E2:4C:80:C2:A0:4A:84:23:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4F8A60A32311EF8BC04574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.197.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f5:0e:26:4f:30:84:f1:55:97:4c:d7:f1:37:7f:a2:7b:88:
fd:fd:ad:32:51:3c:59:16:b3:f6:6d:2c:a0:7b:a6:f2:69:e4:
fb:d8:92:c7:e2:a2:b8:36:94:23:10:23:8a:b2:2c:2b:8e:ec:
e3:6d:5e:19:0a:0f:da:71:98:90:2f:1c:c1:cf:06:2a:c7:a2:
87:8c:82:bf:de:98:e0:80:46:9c:6d:17:1c:99:62:60:d9:72:
89:d1:cd:fa:52:f5:9e:d7:01:8e:2e:1d:d9:86:69:73:f7:1c:
b0:b9:b7:96:24:d9:bc:56:6b:d1:53:a0:1c:59:e2:cf:1a:c0:
a7:b8:5a:09:5a:69:6c:ae:54:89:e2:c4:73:a1:e4:e7:8a:18:
07:b4:44:da:24:e6:9a:de:10:44:54:2e:8a:6e:61:c1:75:b4:
fb:24:44:af:f9:57:88:3f:95:3c:41:a0:77:80:f4:62:d2:5f:
37:33:ad:64:a3:bd:c4:fb:00:c1:8d:56:97:79:d5:5e:9c:49:
ab:2f:8e:f1:63:80:c6:cf:01:13:e2:73:88:c8:e2:08:ea:4e:
dd:77:df:34:aa:e3:a6:76:50:65:74:bb:86:8e:42:d5:87:2c:
bc:c9:bf:e8:22:e9:ff:1e:5b:75:10:4e:2c:8f:50:7f:1d:97:
65:45:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:44 2024 by rpki-client on console-fra.rpki-client.org