Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095C2E00A64D11EF8317FA4A762E951A.roa
File: 095C2E00A64D11EF8317FA4A762E951A.roa (raw, json)
Hash identifier: FMqJCU5HEJ4MQfUX4nZOJ5cyMj41e48K1s9WsfA0bOk=
Subject key identifier: 2A:1C:A9:6E:22:11:79:FE:1F:3C:F5:43:F6:80:05:4F:21:FF:BD:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095C2E00A64D11EF8317FA4A762E951A.roa
Signing time: Tue 19 Nov 2024 08:05:27 +0000
ROA not before: Tue 19 Nov 2024 08:05:23 +0000
ROA not after: Sun 15 Dec 2024 08:05:23 +0000
asID: 51396
IP address blocks: 154.213.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69390 (0x10f0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:05:23 2024 GMT
Not After : Dec 15 08:05:23 2024 GMT
Subject: CN=673c46c7-b719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:67:fe:dc:e9:45:c5:d2:11:64:2c:13:a1:
e6:4a:79:e6:ab:f1:b1:3a:91:93:cb:59:46:16:82:
d6:2e:b5:42:2e:80:62:3f:eb:cd:1c:66:dc:57:08:
aa:ae:d2:f9:c1:ce:72:86:fa:01:6e:86:66:f3:23:
16:a5:25:2e:c1:58:09:38:8b:c5:b2:18:97:64:11:
b9:01:81:e4:6e:9b:9e:55:4b:06:e7:02:d5:9e:a2:
3e:66:d2:34:73:ee:ae:64:4b:a8:e5:13:30:7f:bc:
d6:31:9a:00:7f:31:9c:94:f5:17:3a:80:3d:54:aa:
eb:8a:1f:1b:fe:2c:8a:4f:9d:fb:75:bf:da:07:18:
d1:6a:94:dc:ed:15:b8:c6:9e:3a:6f:11:e5:3e:68:
64:31:21:3e:f1:a0:3f:14:d3:6c:02:bc:9f:2f:e2:
d3:d2:4d:5e:42:83:58:dc:85:43:aa:5a:f1:5e:27:
4f:36:a0:59:3b:af:35:ab:63:ba:14:7f:ba:5c:c0:
bd:7a:b9:39:8c:d8:72:7a:2d:ba:b6:30:28:af:68:
ea:da:1c:1b:3c:e2:18:d4:e5:53:d6:83:c6:ad:b6:
1c:59:37:e3:33:75:c5:4d:94:ed:db:57:76:89:ec:
02:e7:57:9c:9e:eb:77:36:81:24:c4:0d:44:48:46:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:A9:6E:22:11:79:FE:1F:3C:F5:43:F6:80:05:4F:21:FF:BD:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095C2E00A64D11EF8317FA4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:08:04:ce:ae:a0:45:ac:38:b9:0f:2a:9e:e9:ab:19:24:ef:
35:53:c3:26:84:18:0d:8e:c6:59:6b:89:be:5b:1c:fc:cb:c1:
a9:68:f8:8f:76:da:97:38:6d:3f:2b:2f:29:11:cb:f0:c0:da:
e1:d8:03:c3:59:ea:1c:96:e0:b3:a4:a3:b0:2e:70:8d:19:2e:
b9:e9:ba:4e:43:5f:4b:33:e0:9f:8e:68:85:e4:92:6f:6a:aa:
48:6f:ed:26:2b:61:9c:b6:88:09:21:fa:b6:68:80:9a:af:51:
a4:6c:f6:78:43:a0:35:1c:31:3b:60:49:10:c0:1f:dc:cb:8a:
66:e6:aa:9d:18:08:73:e8:2c:97:c2:da:72:b0:ba:4d:c1:51:
d5:62:97:06:74:4a:95:18:93:3c:1f:16:d0:28:a6:f6:6f:c0:
84:f6:ff:5e:70:08:d9:47:86:db:9f:b5:16:b6:d0:e5:4a:f4:
83:c9:a8:88:1e:09:62:46:2c:da:ff:61:f5:0f:48:a2:74:28:
7a:45:37:e5:22:65:b7:dc:27:43:fb:79:65:8a:ed:9a:64:e0:
3b:6d:ef:ef:bb:a2:eb:13:3a:7a:85:6c:0f:e0:59:7c:44:79:
d5:90:2b:e3:3f:c6:ee:c1:29:74:b4:56:93:5b:cb:ea:40:2d:
87:5a:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:56:45 2024 by rpki-client on console-ams.rpki-client.org