Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB647B69EA911EFA4F0CE86762E951A.roa
File: 0DB647B69EA911EFA4F0CE86762E951A.roa (raw, json)
Hash identifier: 0TwAP0KEjTJ+3PUCEXJBYPqnEQbD4G7E/a+7klej1Dc=
Subject key identifier: 14:7C:A1:06:3B:31:35:35:B3:7A:C2:3F:5B:2C:AE:48:0A:2E:B5:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB647B69EA911EFA4F0CE86762E951A.roa
Signing time: Sat 09 Nov 2024 14:43:59 +0000
ROA not before: Sat 09 Nov 2024 14:43:55 +0000
ROA not after: Thu 12 Dec 2024 14:43:55 +0000
asID: 395793
IP address blocks: 154.91.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68101 (0x10a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:43:55 2024 GMT
Not After : Dec 12 14:43:55 2024 GMT
Subject: CN=672f752f-819b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:2c:ce:c2:b7:52:02:21:6f:ba:95:61:b6:
dd:28:66:8d:4a:05:a5:5f:92:d3:b3:c1:af:63:58:
34:7d:06:6f:ee:61:3e:9a:f5:a1:46:2f:9c:0f:a4:
26:d9:a4:b7:3b:e9:cd:84:56:2b:12:35:81:29:60:
9e:8f:85:38:15:9f:01:f3:0d:da:60:cd:99:d2:4f:
0a:15:d1:13:9f:da:29:87:f2:69:a8:6c:52:70:dc:
fa:15:a7:b1:35:d3:46:be:c9:13:26:84:4e:72:a1:
e8:d3:d8:71:ba:49:d6:92:b5:71:22:e1:7b:f0:ce:
2e:7a:04:5c:fd:bc:55:04:c1:50:47:78:47:97:d7:
dc:8a:b0:58:dd:f1:86:0c:63:6c:72:dd:6c:57:ff:
45:37:00:dd:a6:23:09:ab:47:20:d1:53:44:b4:7d:
c3:f4:9e:1e:c6:ec:e7:e9:fb:c5:70:1f:5a:24:b0:
fc:9a:d7:a0:27:5a:40:e1:f2:2f:f9:03:e2:c3:0b:
ab:ad:35:e5:86:ce:01:ad:6c:57:98:c4:18:33:fe:
02:8d:b1:ba:5d:26:0f:0a:95:d2:cf:fe:cd:cb:c3:
f0:81:fd:71:66:19:32:c5:31:c5:27:3b:c9:43:c4:
e2:23:9b:e9:00:7c:8c:7a:c7:84:56:b0:bd:09:12:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:A1:06:3B:31:35:35:B3:7A:C2:3F:5B:2C:AE:48:0A:2E:B5:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DB647B69EA911EFA4F0CE86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9a:6b:4e:97:f2:23:40:21:24:55:b8:66:96:3b:73:5c:eb:
24:03:15:1c:54:29:b8:d4:e1:5c:cb:73:46:a4:07:4e:45:0e:
fa:e8:08:f3:cf:28:fd:e2:f6:b8:9a:86:1e:28:c4:1c:b3:e4:
08:c5:11:7f:d6:1a:67:8a:c0:04:81:4d:39:bc:e4:de:59:ba:
75:53:92:22:50:3f:97:9b:9c:74:b6:48:16:ec:3c:69:d2:de:
54:26:83:05:67:20:9e:d8:ff:ff:c0:ce:61:93:1b:f2:5f:ca:
ab:ca:93:06:5a:e5:df:5f:34:44:4d:5f:3f:90:04:3c:5f:d5:
c2:f0:70:7f:d9:49:fa:6e:3b:0c:d8:3d:49:ef:c5:e9:ed:e7:
a9:2e:ae:fd:4b:2e:fb:6a:99:49:e8:74:a0:c2:11:24:28:02:
ab:a6:3f:4b:c2:7f:b1:05:fe:3b:a4:eb:36:98:d5:94:d6:18:
c7:b3:60:8f:de:7f:fb:5e:81:ef:17:8d:d8:23:6a:9e:d3:f9:
98:6f:5c:ab:0d:43:a2:25:3a:2e:8d:bf:ad:a3:b7:e7:ca:e8:
1c:ed:ee:d5:fa:75:30:3c:4b:01:35:6c:d6:63:a4:c7:b0:10:
dc:94:ed:da:9b:32:85:a1:b8:fa:f4:21:91:f8:f4:b0:6c:b1:
47:32:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:03:58 2024 by rpki-client on console-ams.rpki-client.org