Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D94D088A71C11EF87901A5B762E951A.roa
File: 0D94D088A71C11EF87901A5B762E951A.roa (raw, json)
Hash identifier: r8eT++pc1NGKa0ZcSEXt6mFhtBVrrfutSlpFDBzxPUQ=
Subject key identifier: 9B:71:34:2E:1D:0D:4C:28:DD:E4:EC:C3:8E:23:C9:D2:73:8A:77:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D94D088A71C11EF87901A5B762E951A.roa
Signing time: Wed 20 Nov 2024 08:47:20 +0000
ROA not before: Wed 20 Nov 2024 08:47:16 +0000
ROA not after: Thu 05 Dec 2024 08:47:16 +0000
asID: 21859
IP address blocks: 154.94.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69429 (0x10f35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 08:47:16 2024 GMT
Not After : Dec 5 08:47:16 2024 GMT
Subject: CN=673da218-0bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:c3:3b:b0:b1:3d:a5:c8:2f:fb:96:58:bd:
99:70:44:c4:46:66:41:5a:cf:df:17:9e:9a:4b:49:
8f:ed:02:1c:e4:33:8e:1d:0f:07:24:ab:16:23:75:
f4:14:7a:3b:96:12:eb:13:2c:00:f4:ea:6f:d9:88:
25:7b:4e:5c:98:d5:f0:e9:af:b5:6e:ff:20:12:23:
83:33:c2:dd:e6:b3:85:9b:e4:93:aa:c7:79:64:f0:
7e:7d:23:76:85:dd:b4:d7:9b:0a:f6:ad:33:ee:94:
5a:c7:cf:be:70:4b:20:d2:fd:84:ba:8a:2c:87:a7:
77:ac:61:07:0a:7e:c1:d3:c2:67:ff:5d:f2:0c:3f:
f7:86:87:da:63:06:a1:0a:8a:03:c5:60:04:29:11:
3d:b1:09:98:ab:b4:50:e3:86:f5:c5:6e:a7:51:b1:
01:db:93:c2:2b:d0:3f:c2:83:1f:b1:e8:43:ee:cf:
8b:3f:b6:bf:0c:1d:21:4f:fb:92:52:cd:51:98:08:
d0:fa:4e:6e:2e:e4:28:ea:6c:cc:ec:ea:79:11:79:
39:85:d2:55:52:db:d7:7c:84:c5:20:7a:f2:37:03:
aa:0b:d3:df:08:79:8c:29:49:77:b4:d7:4b:37:d2:
21:74:3e:89:c6:59:36:df:3e:2d:51:ce:cb:81:19:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:34:2E:1D:0D:4C:28:DD:E4:EC:C3:8E:23:C9:D2:73:8A:77:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D94D088A71C11EF87901A5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:bc:0c:a9:67:73:26:09:3f:03:d6:74:ba:ac:9d:04:03:7b:
66:db:81:10:6a:c8:10:fd:06:ee:58:e4:23:fa:0a:d8:53:05:
ca:18:d1:de:e1:2f:bf:c3:e4:b5:05:98:db:81:7a:73:f3:fd:
71:60:d9:d7:ac:f6:00:ab:f7:d0:d2:1c:9e:2a:f6:54:46:d6:
c4:9d:77:e2:92:06:45:3c:8a:b7:f2:3e:83:aa:5d:fa:f7:a3:
cb:5d:cb:32:4a:e9:e1:08:3d:56:2d:98:5a:3a:9f:cf:6c:99:
9f:1f:13:18:d7:c4:2c:85:f2:50:1c:5e:12:db:81:ce:01:10:
04:61:d2:44:68:4e:12:59:fc:48:86:f1:29:6d:c3:fd:c2:2d:
b5:1b:8a:79:74:1c:ec:a1:2b:cc:75:14:e4:42:b4:ee:0a:fa:
86:a0:d5:fb:d0:a0:30:fc:28:d5:69:59:dc:66:f8:ae:1b:67:
9c:13:d5:bd:15:2a:52:b1:32:65:6f:ac:b0:a2:d5:44:cd:33:
5d:9d:66:3e:3b:42:6b:72:3f:6f:a1:a4:22:48:4f:18:2e:99:
bd:03:ce:bd:c8:cc:94:0f:ac:b1:f9:48:44:61:f2:ef:27:c3:
e6:4b:b3:b1:f0:20:30:33:b4:30:7f:58:ac:ac:0e:39:3c:ab:
1b:7a:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:30 2024 by rpki-client on console-ams.rpki-client.org