Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F344C034A9BA11EF8F149F56762E951A.roa
File: F344C034A9BA11EF8F149F56762E951A.roa (raw, json)
Hash identifier: tUxvH14H9Tokf7NeX6gf4EaAp4jZk2/aidWVJn/Kejs=
Subject key identifier: B6:7B:35:61:BE:00:F0:87:60:EB:2F:F1:18:32:51:A9:64:3A:32:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F344C034A9BA11EF8F149F56762E951A.roa
Signing time: Sat 23 Nov 2024 16:49:48 +0000
ROA not before: Sat 23 Nov 2024 16:49:44 +0000
ROA not after: Sun 01 Dec 2024 16:49:44 +0000
asID: 55933
IP address blocks: 154.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70056 (0x111a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 16:49:44 2024 GMT
Not After : Dec 1 16:49:44 2024 GMT
Subject: CN=674207ac-693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:c2:d7:f6:47:64:ff:6c:2c:6e:f6:5f:d6:
4d:d0:ce:80:22:a7:62:a7:ea:fe:6b:01:5b:7f:ed:
38:f6:8a:a0:a2:a1:e6:9c:07:89:20:11:61:3a:e0:
49:cc:20:79:2b:25:48:f0:a2:03:b1:43:13:e6:64:
07:37:32:31:70:46:ad:f3:68:b4:98:09:29:fb:bc:
e2:8e:79:f3:6c:14:08:a8:ac:27:a1:38:f6:86:d2:
20:56:ac:ca:e0:5e:5c:27:8d:9a:21:25:bd:ab:e9:
9a:42:2e:3e:c1:b1:57:82:20:d8:0f:bf:e4:69:5e:
bf:9e:08:9a:17:04:91:b1:d7:01:30:44:6a:84:e8:
44:db:cc:7a:b1:32:5b:b8:58:9f:88:6f:14:f2:39:
70:7f:a4:1a:d5:03:04:84:61:98:c8:f6:cf:ab:96:
c6:0f:13:7e:cd:27:ad:1d:5e:7e:20:92:c8:b2:ce:
47:9a:5b:9a:12:e5:0e:d5:cf:de:51:83:95:d2:35:
5d:1f:7c:e4:ea:41:7c:bb:a3:b7:2c:df:56:52:ab:
c2:9a:34:66:51:42:af:b1:4e:29:67:e0:4b:72:8e:
de:93:a3:25:4b:f5:0b:ba:db:e8:f3:b7:d0:8f:6f:
4b:f9:cf:53:54:21:33:db:01:e6:02:5d:2a:57:35:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:35:61:BE:00:F0:87:60:EB:2F:F1:18:32:51:A9:64:3A:32:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F344C034A9BA11EF8F149F56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:e2:bf:18:fe:4d:ad:78:4d:4d:21:c4:48:f7:c6:6a:fd:94:
12:1f:6f:05:ee:b2:58:de:62:4c:e3:9c:e9:82:79:2b:d0:d7:
66:8d:8b:fb:23:cf:e3:6f:87:24:e3:76:00:6e:ae:fd:8b:b6:
cb:83:52:1d:97:3e:db:42:4c:db:0c:b8:fe:62:5e:9d:63:cc:
f8:11:5c:de:c1:62:1a:d4:88:7e:4c:1d:1f:48:ee:5d:15:2f:
bc:83:c5:24:7b:a6:c3:29:f9:81:87:03:9a:8e:df:13:e0:8f:
72:53:29:02:75:6d:cd:af:94:14:14:5f:37:48:bb:44:72:cc:
7e:e6:ae:fe:d1:5a:12:9e:38:83:53:8e:2a:45:f0:a5:4d:31:
b3:ca:cb:49:2f:70:09:ad:3b:0d:9d:48:d3:bd:e9:9e:e8:81:
3c:c5:27:51:1f:93:0a:69:a3:1c:0c:9d:bb:03:79:00:71:02:
13:b0:4c:d7:13:f5:b8:0a:dd:c8:2f:72:d6:ba:bd:4e:68:cb:
26:75:9d:44:ff:02:54:92:16:b2:b6:94:ca:59:fb:a3:1f:29:
67:13:e0:7d:44:61:50:e5:82:99:c5:a6:9f:bf:83:9d:7f:66:
a3:bb:78:f1:1a:2c:41:45:80:7b:ac:b0:c3:6a:62:e4:ed:f3:
88:6e:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:53 2024 by rpki-client on console-fra.rpki-client.org