Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134083E985F11EFB5964868762E951A.roa
File: F134083E985F11EFB5964868762E951A.roa (raw, json)
Hash identifier: uT7i9DhxotGWv4hVQnoI8j7pNkcQ1G04OY2wKTcJKIA=
Subject key identifier: 60:53:1B:37:75:7E:D1:A8:60:98:6F:AC:E1:01:40:D3:9E:1D:4E:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134083E985F11EFB5964868762E951A.roa
Signing time: Fri 01 Nov 2024 14:45:31 +0000
ROA not before: Fri 01 Nov 2024 14:45:18 +0000
ROA not after: Tue 03 Dec 2024 14:45:18 +0000
asID: 203020
IP address blocks: 154.202.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66787 (0x104e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:45:18 2024 GMT
Not After : Dec 3 14:45:18 2024 GMT
Subject: CN=6724e98b-c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:4d:76:60:33:58:b7:68:df:01:05:04:dd:
7d:b7:ff:83:0b:e4:aa:b9:4e:f9:40:ba:18:72:f2:
fe:7d:78:cc:2e:84:b0:03:87:34:1b:af:e3:3f:aa:
f8:e6:be:71:6c:db:0e:49:e7:0c:c0:0c:6c:8b:1e:
36:a8:d3:1a:00:00:1f:57:dc:9c:04:b4:5f:a8:b8:
f5:7f:65:7e:3b:b8:4b:fb:88:b1:d6:5e:44:2a:2d:
87:5a:34:55:8b:8d:d8:49:d6:da:df:91:9e:35:89:
1f:f3:37:1e:65:85:b5:26:53:62:37:4f:c2:fd:a9:
b3:fd:d4:80:17:c5:ea:63:fb:f9:6f:9e:0c:29:ca:
e2:bb:8b:c8:a2:17:fa:7d:2a:12:69:18:ea:c9:21:
b4:b3:98:99:f2:04:9b:cb:73:0a:be:52:03:77:3f:
eb:fc:a4:eb:9b:83:80:3d:16:0c:58:bb:91:e9:6f:
1d:58:32:e8:20:6f:a5:c5:98:86:b9:bd:d9:24:d0:
48:56:ba:de:d4:46:51:74:8f:c5:51:a6:12:d9:16:
a4:2c:0d:4b:7a:ef:31:58:e5:0f:49:fa:b3:56:bf:
36:d0:da:b9:fb:cb:4c:c5:bb:10:7f:ab:b1:41:f9:
9a:da:ff:6d:5f:27:9b:1c:9e:06:c7:88:93:dc:e2:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:53:1B:37:75:7E:D1:A8:60:98:6F:AC:E1:01:40:D3:9E:1D:4E:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F134083E985F11EFB5964868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.70.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:ba:5c:7e:6d:ef:3d:7b:5e:a8:67:ae:81:98:b8:ea:bf:14:
b2:38:0f:40:af:78:fc:c4:b2:e8:2d:09:fe:56:6b:64:d8:36:
ba:4c:4e:ac:31:d1:04:1c:4c:61:e0:4f:ca:09:91:ba:6f:85:
e6:21:d2:38:23:a0:71:45:0f:68:e1:c6:55:8c:f5:60:e1:30:
f1:af:77:05:c3:aa:51:4d:ab:85:d2:97:e2:13:6c:be:b1:c0:
8d:5e:4c:94:34:a6:7b:a6:15:73:6e:c8:14:40:0c:0d:db:95:
c7:d3:21:2d:03:5d:af:91:65:0e:a3:20:01:93:1e:fd:24:8f:
da:5e:25:b6:64:da:2e:54:dc:2d:fa:b9:7f:59:94:3a:20:76:
36:a7:5a:a4:ad:93:b4:4e:f6:9a:51:29:f3:85:90:83:82:a6:
50:95:19:9f:f1:0c:d6:63:44:0b:5e:01:0d:03:8b:7d:d4:1b:
20:06:f6:0d:04:93:82:5f:02:90:ca:59:83:28:a7:eb:ee:e9:
78:9b:03:59:dc:ad:62:a6:42:44:b1:26:81:6c:d5:93:0e:41:
92:19:7d:63:a7:18:94:22:d7:a2:e9:13:2b:f5:d4:29:72:d5:
91:b0:34:57:a9:78:b1:4b:61:44:78:e8:3f:cb:2e:e2:52:57:
7c:23:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org