Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E0A7C26A9111EF8BDB8988762E951A.roa
File: 04E0A7C26A9111EF8BDB8988762E951A.roa (raw, json)
Hash identifier: eOyIRBzcYrxarQ0uuDMidcnDoQSzO8GFIAN+LNZlAjk=
Subject key identifier: 77:A7:D3:21:FA:42:B7:42:0C:DD:F9:90:E4:70:A5:69:02:77:3C:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E0A7C26A9111EF8BDB8988762E951A.roa
Signing time: Wed 04 Sep 2024 07:40:56 +0000
ROA not before: Wed 04 Sep 2024 07:40:52 +0000
ROA not after: Thu 04 Sep 2025 07:40:52 +0000
asID: 140595
IP address blocks: 154.92.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59943 (0xea27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 07:40:52 2024 GMT
Not After : Sep 4 07:40:52 2025 GMT
Subject: CN=66d80f08-2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:1a:e6:e5:9f:4a:b1:c3:a0:5c:00:58:d8:
ba:47:d2:26:79:d6:6d:93:84:e8:2d:09:33:07:5d:
bb:13:95:6f:05:37:c4:af:a6:3a:32:c5:12:89:96:
12:75:48:fa:01:ae:16:70:57:c6:1c:80:e2:e5:57:
4e:7b:2e:65:ff:8b:3e:af:e3:b3:9a:fc:0d:d1:15:
7c:cc:b2:0e:c4:e8:6d:ee:59:6d:02:d8:35:21:e0:
e2:b2:76:9d:cb:2c:df:72:bf:7c:c3:c9:f7:0a:21:
e6:b8:d3:9c:be:e9:a6:e7:e4:2d:17:b3:a1:53:17:
69:9c:82:9f:0d:61:01:ad:62:70:59:05:ed:60:cc:
08:ee:58:01:f4:c8:98:0d:d0:6f:da:0f:31:c7:86:
75:be:a5:c4:88:9a:48:03:1b:de:94:a6:b5:a2:cb:
b0:43:ab:74:89:f0:46:56:db:96:13:26:6d:98:3a:
03:0b:f9:e8:54:11:ab:09:30:0c:b5:d7:29:8f:ea:
67:e2:3f:6d:f6:5d:39:5f:ef:e9:09:97:b8:59:b7:
8a:87:4b:30:52:5a:10:87:69:2b:d4:51:63:a8:af:
c1:3b:80:98:96:fe:bc:12:c3:0e:c5:76:d5:38:d4:
ce:0e:cb:a2:73:5d:ee:5b:da:14:72:1b:20:c8:0d:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:D3:21:FA:42:B7:42:0C:DD:F9:90:E4:70:A5:69:02:77:3C:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04E0A7C26A9111EF8BDB8988762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e4:85:ea:94:e3:02:81:73:fc:ff:0a:b1:bf:18:99:93:c4:
28:84:7a:ce:7d:c7:0f:90:4b:4b:2b:94:2a:09:66:b6:9d:75:
a5:40:3f:83:ee:dc:11:0c:1e:2d:63:c9:71:ba:a5:81:c1:5f:
ac:f7:54:54:2a:06:85:38:dd:9b:ab:55:4e:89:20:79:b9:cc:
fa:79:4d:72:19:8e:21:63:37:92:a7:5e:3d:1d:a7:32:d4:ec:
ce:43:f5:d4:29:60:46:05:33:dd:ea:12:5f:84:28:7d:18:e4:
00:fd:83:6e:ee:28:96:ce:55:a0:57:d6:96:33:0c:ce:88:c7:
c4:f7:4e:19:67:66:9c:cd:80:02:55:a6:83:7c:e3:2b:f6:c2:
36:62:5a:b7:34:46:fc:a0:18:5e:d2:56:ba:60:4d:17:26:5b:
61:22:3f:b0:73:2a:4c:5f:5d:13:d3:8e:78:27:1d:45:e6:1c:
da:8b:b6:b6:d0:10:8d:b6:9e:a8:22:1d:20:09:73:b4:21:f7:
c0:5e:c1:34:cf:f5:f0:79:18:37:78:6e:2f:f2:07:da:ba:e4:
95:ac:34:90:32:cd:81:e1:34:e8:34:56:6c:6a:ca:e6:9a:ea:
3a:40:5d:e5:6a:e3:3b:e2:e6:72:cb:86:ec:07:39:2e:18:90:
70:bf:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:20 2024 by rpki-client on console-fra.rpki-client.org