Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDBAF70C953011EFA196AD53762E951A.roa
File: FDBAF70C953011EFA196AD53762E951A.roa (raw, json)
Hash identifier: HVwvwMHcnVqdMZl2aHV6/nzfl79vLdpzHBh+e0/vyqI=
Subject key identifier: 30:8F:3A:E6:E1:3C:A2:5C:33:57:3A:D4:F0:3B:D8:2F:DD:58:95:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDBAF70C953011EFA196AD53762E951A.roa
Signing time: Mon 28 Oct 2024 13:31:52 +0000
ROA not before: Mon 28 Oct 2024 13:31:48 +0000
ROA not after: Mon 25 Nov 2024 13:31:48 +0000
asID: 48529
IP address blocks: 154.206.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66289 (0x102f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:31:48 2024 GMT
Not After : Nov 25 13:31:48 2024 GMT
Subject: CN=671f9248-ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:6a:2e:6f:28:af:13:c3:0d:f1:93:8d:60:
97:c8:78:84:1d:a9:14:c6:35:e5:42:97:67:e7:2c:
9b:f3:99:cf:9e:06:ea:9d:a7:83:3c:b4:bd:20:bb:
38:ac:c9:80:66:7f:f1:03:30:c0:19:cf:59:e2:5f:
85:d7:17:52:83:2f:a7:c7:02:f4:12:18:19:85:a6:
c7:02:a5:4c:da:8c:b8:0c:5b:cb:b3:e2:e9:b3:17:
f2:30:7d:cc:9f:68:2d:19:bb:e1:84:58:e6:47:2a:
e9:b2:c0:43:ef:0c:3d:9a:82:9c:2c:2f:66:f5:99:
43:7d:3e:51:69:43:6d:94:eb:f8:30:00:25:5d:67:
67:3e:09:bb:f9:45:eb:2d:4d:70:4c:dd:a0:4f:e4:
2e:f7:3b:8e:fc:d0:b4:2a:e2:21:36:d8:ae:0b:2d:
e6:ea:93:ec:88:85:fd:b2:36:d3:59:a9:9c:87:ef:
eb:a4:cd:3f:8b:02:70:6a:7a:37:10:17:ce:59:24:
34:6c:7f:a9:a5:44:8a:ec:61:17:13:71:cf:67:89:
9c:48:56:ed:91:55:66:8b:25:74:7e:98:ca:06:f8:
67:d4:c6:9c:67:f3:80:30:e8:f6:0f:9d:03:47:04:
c9:b2:7f:a9:aa:6d:53:d1:4c:55:83:a9:18:4c:4c:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:3A:E6:E1:3C:A2:5C:33:57:3A:D4:F0:3B:D8:2F:DD:58:95:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDBAF70C953011EFA196AD53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.46.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:05:2d:21:a9:5b:83:66:60:5f:29:1a:69:02:a7:5f:f7:
4f:bc:60:b7:e3:70:47:b4:78:1f:35:0e:fc:9a:de:70:38:68:
14:7d:f2:ed:2d:e0:c2:1f:64:29:f1:d9:4f:06:d4:47:56:93:
bc:92:0c:16:fd:b5:13:6b:fc:15:7c:d9:09:4a:d7:3e:85:90:
41:16:0c:b2:be:b2:a5:59:07:a7:ff:4c:d7:1c:6a:6d:f9:45:
ef:34:65:43:0f:42:77:06:e8:2d:d1:54:d9:da:c2:00:fe:4f:
46:8d:ed:e1:1e:09:41:5f:1d:b3:2e:e1:09:cd:42:48:4b:ed:
d8:1e:41:4f:bb:82:cd:75:31:60:42:2e:6c:c3:db:16:39:91:
40:36:59:94:4a:f8:a4:e4:6a:29:bb:a3:cf:b6:81:e8:ea:4b:
96:b8:8e:b3:ab:8c:ca:90:48:ac:0a:53:cb:4e:6f:c8:73:dd:
20:55:bb:51:d7:f4:09:88:2a:86:86:82:c1:dc:ed:8a:19:c9:
b3:f1:8d:70:50:80:78:43:99:a8:73:d5:dd:10:66:7a:b5:e3:
ce:d9:23:4a:e9:11:2d:62:f1:a2:85:e9:89:ec:8e:e1:51:c2:
34:0a:b5:3e:25:99:c8:21:45:73:93:06:f6:c4:17:6e:f6:cc:
05:6b:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:47 2024 by rpki-client on console-ams.rpki-client.org