Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26342C4A8CC11EF94567F7E762E951A.roa
File: F26342C4A8CC11EF94567F7E762E951A.roa (raw, json)
Hash identifier: 22UvnP78og6KqHnuumSstyZ7xefrCCtpv1yjDmk9+sU=
Subject key identifier: CB:E3:AD:87:84:B5:EC:68:0C:C9:45:3D:58:7B:2D:CE:4A:1E:B6:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01100F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26342C4A8CC11EF94567F7E762E951A.roa
Signing time: Fri 22 Nov 2024 12:26:06 +0000
ROA not before: Fri 22 Nov 2024 12:26:03 +0000
ROA not after: Sat 30 Nov 2024 12:26:03 +0000
asID: 137443
IP address blocks: 154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69647 (0x1100f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:26:03 2024 GMT
Not After : Nov 30 12:26:03 2024 GMT
Subject: CN=6740785e-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:30:0d:09:5c:50:62:d1:93:7e:a2:52:ad:ec:
de:87:3b:91:b3:43:e7:b7:64:20:96:8f:70:b3:9a:
99:2b:b0:9f:3b:24:59:17:59:a8:cf:4c:32:f2:75:
a6:39:1d:c4:37:ce:99:63:68:8d:f9:36:78:0e:71:
e2:ea:18:02:37:5b:84:9a:38:e0:f1:36:da:2f:17:
c3:0b:72:b3:ad:13:84:fd:37:37:f6:d9:ba:7e:f7:
49:b5:c6:17:b4:6b:e3:9b:af:37:4f:7f:67:b9:b8:
26:32:92:46:0f:7a:ce:02:47:2d:dc:4c:07:e9:95:
d0:9d:e7:36:16:46:f4:7c:f6:ca:21:e4:81:5c:8d:
d7:71:f1:dd:fa:5a:45:ab:8c:9d:60:dc:b8:f5:9d:
65:53:c1:91:e5:8c:6d:7d:59:90:0c:fd:ad:5f:0c:
a2:93:97:1d:99:01:0f:ba:9d:61:96:2e:93:eb:50:
96:76:a2:ae:29:58:2d:e1:f5:30:e5:db:2c:d1:9b:
8b:99:6c:93:37:7d:08:71:ff:d1:ff:78:c9:d6:50:
b8:0e:64:f7:65:86:63:5b:26:3f:f2:97:39:d0:41:
05:b2:fd:52:5f:43:76:03:71:35:a1:6e:b4:b3:42:
0f:2c:6e:06:ad:a1:d9:1a:00:c3:18:48:22:e0:9e:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:AD:87:84:B5:EC:68:0C:C9:45:3D:58:7B:2D:CE:4A:1E:B6:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26342C4A8CC11EF94567F7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.191.0/24
Signature Algorithm: sha256WithRSAEncryption
62:72:07:fd:e4:8c:9f:ed:d3:c9:54:66:ef:df:eb:8b:23:67:
d6:7e:2f:bf:bc:fa:dc:8c:74:eb:ea:30:64:00:fb:49:86:c1:
64:87:d2:f9:5b:32:0f:f8:ce:9a:af:b2:ea:78:79:a8:4c:9c:
f0:da:57:23:fb:34:47:af:b0:95:f2:b5:0e:f2:bd:06:3b:4c:
c1:34:d5:df:79:cd:58:5d:25:45:54:a5:95:65:99:4f:98:0f:
19:cf:ea:a1:28:18:bb:0d:b7:72:4d:53:a6:61:2b:da:c2:f8:
c8:40:8a:b3:45:8d:ea:44:55:7a:4b:2a:6c:35:6b:e1:11:41:
43:a1:3f:01:de:5d:18:59:2f:3a:f7:d7:68:ea:3e:3d:fc:9e:
a8:62:57:7a:f3:58:39:7a:08:a7:2f:65:fd:35:01:71:c6:09:
cf:6d:1a:39:e7:6d:ae:21:c7:8f:ff:9b:9f:71:dc:57:87:de:
d0:4b:ae:98:cc:4b:98:e2:d5:a0:61:fb:71:52:ef:57:10:c2:
7b:f1:41:70:1c:4a:7f:8e:fc:37:55:21:df:8f:2d:56:aa:04:
66:9f:79:87:f4:9d:6c:98:d2:bb:bb:47:91:0f:ee:f4:9b:78:
1a:f1:8f:d6:64:fd:5e:30:96:4b:9c:53:0f:c2:a0:3a:ce:10:
f6:5a:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:45 2024 by rpki-client on console-ams.rpki-client.org