Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C625215A9EAE11EFB801FCA8762E951A.roa
File: C625215A9EAE11EFB801FCA8762E951A.roa (raw, json)
Hash identifier: ZFBgI1ycQTaca6vT2sLutzIhYkzgLsPgSz+o2UM2aUs=
Subject key identifier: 6F:BA:3D:FF:0A:67:19:55:0B:08:2B:F7:71:30:C2:3F:94:46:1F:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C625215A9EAE11EFB801FCA8762E951A.roa
Signing time: Sat 09 Nov 2024 15:24:56 +0000
ROA not before: Sat 09 Nov 2024 15:24:52 +0000
ROA not after: Wed 04 Dec 2024 15:24:52 +0000
asID: 45194
IP address blocks: 154.84.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68129 (0x10a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:24:52 2024 GMT
Not After : Dec 4 15:24:52 2024 GMT
Subject: CN=672f7ec8-7c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:69:1e:5c:8a:99:1b:d6:6c:29:61:94:64:
bc:c2:17:1a:a6:c7:89:e1:9f:7a:c5:7b:f8:a7:4e:
b5:08:c8:dd:4b:ff:f4:d6:f3:dd:f2:e5:c3:64:c0:
fa:14:7a:21:f8:3d:81:69:59:2e:6c:4d:16:f4:ab:
34:dc:94:63:1f:df:1f:3c:3b:e1:1a:0d:9a:19:12:
15:85:32:1c:a8:bb:ed:37:73:8d:1e:f4:ef:bd:76:
82:0c:fe:03:41:40:52:44:1e:4f:dd:0a:d2:f5:02:
2c:12:97:52:3e:fc:2f:20:82:6e:43:ca:fa:3e:30:
b5:00:97:25:ea:59:89:a1:6d:26:b0:8d:66:5d:e1:
69:7e:9f:1a:87:d9:d8:46:e3:ea:66:bc:18:c9:fe:
6e:a1:9d:4e:c7:47:0b:73:e7:68:db:ea:25:36:a3:
58:4b:6d:ad:df:c7:0b:70:4c:b5:b3:c5:1d:c3:8c:
b9:1a:27:e9:94:2f:58:5f:a3:39:ed:78:09:b4:89:
4a:e3:ef:2d:12:13:f5:b7:b5:ba:e4:d7:9f:8e:b9:
e1:b7:a0:37:e9:27:bd:63:43:5c:73:0a:13:bf:8a:
fd:5e:b4:26:5f:88:9d:df:ee:96:c8:9b:84:7e:9f:
4e:21:23:50:86:e5:9a:fc:22:3a:07:80:69:c5:f4:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:3D:FF:0A:67:19:55:0B:08:2B:F7:71:30:C2:3F:94:46:1F:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C625215A9EAE11EFB801FCA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/18
Signature Algorithm: sha256WithRSAEncryption
cf:f7:9a:ed:4a:93:ab:fc:db:86:b0:44:69:b5:cb:39:f0:17:
eb:f9:ad:fd:92:e0:fc:6c:76:27:14:17:11:80:3d:2a:b0:e9:
18:f6:c2:f0:d0:17:7d:15:1a:dc:78:0e:11:ae:d5:c2:7f:88:
44:9c:76:4e:e6:46:37:43:81:0f:a1:8c:fe:5e:15:66:9e:7a:
9c:b1:dd:0a:c3:9b:fc:d1:9c:24:fa:d4:bc:49:e7:e6:5f:a0:
4e:fd:b3:c1:f2:8e:3b:3d:11:0b:ab:54:5d:4b:6c:c6:9c:c6:
0c:8b:b5:98:63:c2:f0:6d:2a:52:d6:37:68:ce:6a:a6:7c:f6:
d9:25:2a:33:ea:d7:4d:db:e0:d4:8a:49:cc:18:55:a5:f6:5a:
d5:a5:1e:81:28:df:a5:3b:71:55:1f:ba:c0:63:dd:21:09:37:
0e:71:ab:8b:20:05:f1:65:93:e7:9b:2a:79:3a:2e:ee:a9:70:
50:70:be:21:d8:32:ef:c1:db:c8:fe:56:87:73:b9:63:bc:4d:
22:32:c1:05:bd:f9:38:38:c0:0e:1b:5a:90:27:f5:6e:14:16:
85:7d:10:79:b5:43:f1:b4:88:26:79:6e:54:c9:ca:85:81:b1:
4d:ed:d2:6e:e6:a2:f7:c9:e4:0a:c1:32:2f:0a:7c:9d:d8:ce:
a8:ba:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:38:27 2024 by rpki-client on console-fra.rpki-client.org