Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8A88A4D111EFB28A6978762E951A.roa
File: 0F8A8A88A4D111EFB28A6978762E951A.roa (raw, json)
Hash identifier: Wr2E/w2BVxroJns2QoKIQ2L3K6Wrd6uKxKwchtGbIO4=
Subject key identifier: 4C:E6:DE:38:DE:24:A8:36:ED:1A:E5:25:F2:27:A9:17:1E:0E:B6:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8A88A4D111EFB28A6978762E951A.roa
Signing time: Sun 17 Nov 2024 10:45:29 +0000
ROA not before: Sun 17 Nov 2024 10:45:25 +0000
ROA not after: Mon 25 Nov 2024 10:45:25 +0000
asID: 9009
IP address blocks: 154.92.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69304 (0x10eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:45:25 2024 GMT
Not After : Nov 25 10:45:25 2024 GMT
Subject: CN=6739c949-5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:49:18:cf:f2:0b:1e:d3:df:2a:2f:7a:39:
9f:27:7a:e2:e5:59:b8:c6:41:68:8e:d2:e5:b9:9a:
08:24:c3:99:e6:d2:2a:93:a3:2c:97:98:4a:f7:f6:
75:c2:de:67:07:4b:ca:bb:43:94:18:62:4c:d5:90:
4d:74:e1:3f:37:59:ba:0a:9a:27:6f:0a:4b:42:42:
06:48:8c:22:c5:85:da:d7:44:c4:1c:b6:72:71:d1:
ec:d8:34:96:8b:33:48:32:00:50:05:b4:b2:32:82:
97:e4:a7:08:c4:4d:94:b9:b8:fa:4c:fc:f2:f9:4c:
cb:86:a1:28:e7:99:44:50:ee:05:43:e0:74:c3:53:
89:73:87:03:1b:7a:e0:62:23:92:02:9a:c9:44:fb:
19:33:3b:f4:e4:1a:8c:96:52:f0:c4:01:12:ff:5a:
89:62:07:47:a2:77:b3:34:55:5f:b3:de:6c:d5:4c:
ef:bb:46:f6:a0:79:8f:00:53:55:6a:a6:f0:f0:1f:
5e:bc:c3:0c:a8:65:8b:00:19:fa:a1:55:ac:df:a3:
25:8c:c3:52:e5:b2:95:b0:42:2f:bc:1a:44:65:6f:
e4:ba:03:00:77:b7:f0:c5:43:2c:b4:79:51:6f:45:
6f:b9:92:d6:ec:98:f5:32:3c:22:ac:7d:41:ac:f5:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E6:DE:38:DE:24:A8:36:ED:1A:E5:25:F2:27:A9:17:1E:0E:B6:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8A8A88A4D111EFB28A6978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:10:33:9e:f2:d4:c7:cd:34:63:e5:27:98:1e:74:8a:0a:
d9:cb:b0:ef:72:a7:e6:02:ca:98:f2:e1:db:21:89:72:cc:46:
4a:e3:69:0b:75:99:79:ca:19:21:e9:70:97:b6:dd:51:cd:e6:
9d:50:37:05:0c:8c:86:75:89:9b:f9:01:e3:7f:03:71:b3:8e:
61:82:7d:81:c5:47:b8:25:81:ec:bb:41:7a:73:3f:be:3b:ab:
95:b4:4f:77:56:33:02:48:bc:a3:78:5c:df:d7:29:06:88:dc:
5c:08:55:e3:4a:dd:63:b0:68:33:ce:64:90:32:40:b3:c2:09:
d1:d6:31:29:aa:98:ac:59:64:80:7e:09:b6:8d:cd:02:4b:ba:
d4:e8:1d:ab:f2:b7:24:31:a1:8d:22:90:fe:9d:0c:4d:67:f9:
f5:a8:4a:2e:13:ad:9c:ac:52:16:24:a7:ff:34:c5:b3:46:f5:
19:54:b2:c5:0c:8d:b5:a1:03:1f:2c:d6:50:e2:57:73:bc:ce:
9a:5e:38:34:a5:c9:e8:4f:6e:ba:5d:48:d7:46:ac:72:8d:3e:
55:13:f1:64:26:60:6b:4e:8b:95:32:17:a4:38:b6:5c:8e:ba:
a5:0e:a1:20:f7:b0:61:16:38:3f:5b:98:b9:28:b8:e7:04:be:
b7:6c:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:36 2024 by rpki-client on console-fra.rpki-client.org