Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F607E274CE11EFA9BB1C51762E951A.roa
File: F4F607E274CE11EFA9BB1C51762E951A.roa (raw, json)
Hash identifier: d4j26CZ+viTKXTc3WL5QQIzUKyoIJfy03g2cdvGcJEY=
Subject key identifier: 3B:CB:A1:C5:72:DE:CE:73:A3:0F:D2:87:9F:48:79:2D:1E:44:0E:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F00A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F607E274CE11EFA9BB1C51762E951A.roa
Signing time: Tue 17 Sep 2024 08:29:29 +0000
ROA not before: Tue 17 Sep 2024 08:29:26 +0000
ROA not after: Sat 30 Nov 2024 08:29:26 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61450 (0xf00a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:29:26 2024 GMT
Not After : Nov 30 08:29:26 2024 GMT
Subject: CN=66e93de9-d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:37:0c:b1:9e:d3:6e:07:c0:7d:d2:b1:4b:
5b:fe:a5:a8:73:6a:d6:02:02:ec:0e:c4:5c:0e:16:
5a:95:14:c7:fc:69:7b:bc:18:26:6f:90:98:5a:0a:
e2:51:ab:ee:cd:3a:cc:43:12:4b:99:78:13:34:c9:
29:1a:36:b3:0c:30:24:df:69:d9:3e:02:0a:c1:e6:
38:03:5c:b0:95:0d:5f:9e:bd:34:c4:46:5d:3c:94:
f2:6d:c7:eb:41:40:d3:fc:ff:5e:f0:8f:4d:10:51:
8e:d2:0b:c3:af:72:dc:d3:73:87:70:cf:a2:d3:34:
b2:9b:bc:97:7c:ca:35:2b:cc:93:16:56:b7:ef:da:
7f:45:3d:85:11:b3:b1:3f:f9:f7:e3:56:9f:2a:3a:
1e:fc:89:b0:e3:b7:33:03:a4:be:5a:30:03:a4:27:
1e:6c:90:9f:a3:3c:da:b4:cc:76:ab:e1:26:91:c0:
ce:f5:50:06:b8:f5:69:0a:91:ee:da:03:92:74:14:
46:f1:ac:3e:30:c3:9a:34:ba:44:58:06:b0:8e:a1:
62:1f:9b:f8:44:57:71:d8:e3:bb:4b:f5:3a:e3:50:
4a:ed:1f:b5:6d:a9:03:b5:ce:dc:14:e8:2b:90:86:
15:cd:22:12:c9:16:9a:71:5e:e0:e5:f8:8a:b3:aa:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:A1:C5:72:DE:CE:73:A3:0F:D2:87:9F:48:79:2D:1E:44:0E:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F607E274CE11EFA9BB1C51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:5c:0c:a4:1f:16:78:1b:3e:ee:23:5c:bb:43:f8:0c:f9:8d:
20:35:10:2b:1c:9e:cf:91:33:be:db:23:c2:d7:79:29:be:ab:
a9:cb:56:f9:40:f4:0a:80:11:04:32:22:2c:fc:5e:ac:ee:ae:
05:98:dc:1d:c5:54:6c:ff:4a:c8:6f:c5:9c:6f:90:06:a9:dc:
67:13:1b:0f:92:a6:ef:df:d4:a7:d3:34:ad:84:69:1f:9a:6c:
c8:b0:18:53:d4:b2:46:57:91:ff:67:12:71:6c:b3:43:05:d8:
4c:a0:bd:5e:22:b9:a7:5e:ea:b1:8a:ba:10:1c:97:9c:04:f7:
15:3a:77:96:68:81:a2:ce:40:f2:4d:86:c1:58:40:d3:95:9b:
ff:be:68:cf:ea:10:9c:70:ad:a9:d4:6a:e7:a6:61:e6:71:01:
04:d8:62:ed:e5:b3:cc:0d:53:dd:38:fb:33:4a:6a:ad:88:b5:
02:28:85:c0:bc:03:ea:47:03:f1:f5:a6:4c:83:44:dd:b4:a6:
b6:6c:06:c4:ee:a2:37:15:57:3b:47:6c:1e:33:20:1b:22:01:
9b:4a:31:46:ce:d6:f4:e7:f2:44:a7:d6:7f:dc:3c:d6:a5:44:
a0:ea:de:00:bd:0e:e9:29:25:51:d7:2b:59:c1:2a:8f:f1:7b:
68:24:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org