Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAC1B58A8E111EF8608BF7B762E951A.roa
File: 0FAC1B58A8E111EF8608BF7B762E951A.roa (raw, json)
Hash identifier: kZCD/A5/Q29g+wrONf3B67VeoqBiXdSGWajiNYRvvsA=
Subject key identifier: 43:1C:B3:38:0C:42:99:AA:19:9A:BA:FC:B8:28:FA:01:6B:55:39:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011093
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAC1B58A8E111EF8608BF7B762E951A.roa
Signing time: Fri 22 Nov 2024 14:50:06 +0000
ROA not before: Fri 22 Nov 2024 14:50:02 +0000
ROA not after: Tue 03 Dec 2024 14:50:02 +0000
asID: 62240
IP address blocks: 154.194.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69779 (0x11093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:50:02 2024 GMT
Not After : Dec 3 14:50:02 2024 GMT
Subject: CN=67409a1d-d8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:47:97:fc:3e:e0:5b:db:3e:82:c0:0c:93:
e1:25:e4:60:9b:7f:a8:e5:45:0e:6f:a0:a3:11:f1:
c0:11:0e:84:8c:a7:c9:38:77:d8:74:de:ad:9a:91:
af:13:4d:f2:61:fd:67:01:00:2e:09:8e:96:bd:ab:
fe:1b:8d:02:66:0f:e7:4f:b3:22:a3:77:52:9f:1b:
9c:e2:0b:7c:79:d6:bb:13:b2:0e:6d:5c:18:54:eb:
1c:14:b9:80:16:49:aa:ce:c4:2d:da:67:ae:d9:cf:
28:52:c2:94:52:ec:5a:e2:44:4f:49:d6:32:31:2d:
a3:3e:91:d7:c0:e7:02:38:ad:df:85:47:4c:f9:65:
8f:61:04:64:27:a1:19:42:b6:e2:46:21:71:09:8f:
3c:b8:03:df:8d:6c:f4:19:9f:db:28:cf:10:83:5b:
86:b9:ab:f0:d5:e8:49:a0:4a:47:7d:ed:b0:f1:df:
5e:18:bf:8f:16:45:0f:3b:a0:ae:e1:b3:dc:d5:58:
dc:37:84:f8:71:0a:67:ce:9c:99:81:e6:b8:19:7d:
65:7b:ea:47:dc:d7:5c:e4:93:41:6f:86:36:cd:cd:
38:18:41:99:3a:75:32:57:da:93:37:0b:6a:61:a5:
45:01:b1:c8:ba:59:f0:d1:0a:06:eb:1b:8d:fa:fb:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:B3:38:0C:42:99:AA:19:9A:BA:FC:B8:28:FA:01:6B:55:39:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FAC1B58A8E111EF8608BF7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3d:3f:1a:3b:c4:97:35:61:62:1a:a3:75:42:62:07:74:6a:
dc:b0:4f:56:1a:ce:a6:06:31:9d:1b:e7:8b:86:6b:69:3a:83:
5b:05:ee:4d:cb:a2:69:a6:83:47:e6:31:6c:cb:46:ce:ff:d0:
ef:43:a6:9e:32:62:08:69:cc:a5:f6:8d:0d:ff:b2:f9:14:bb:
4a:40:85:f8:98:aa:a9:bc:c6:70:82:14:04:f2:65:34:2b:16:
d0:b4:48:19:ee:52:0f:da:33:51:54:69:81:0e:87:2e:32:58:
1a:3d:49:3f:d7:f4:e1:ee:03:a5:91:62:1d:de:cb:cf:fc:06:
b3:4c:66:ba:f5:1f:e1:fb:73:d1:b0:90:83:91:27:62:93:56:
6a:8c:0e:85:db:f2:f5:ed:78:b5:2f:03:0e:f4:9f:e7:a4:46:
66:a8:c5:1c:67:5b:ce:ee:ff:5f:84:9b:04:05:56:bd:c9:ff:
6c:a5:fd:3a:71:f8:b5:39:e2:3a:cf:be:db:50:b6:da:92:f1:
f9:93:95:d2:2c:a5:7a:aa:fd:9a:01:19:d7:01:19:51:6f:e8:
56:30:0d:dd:46:6b:b4:bf:1c:83:56:f3:4f:ba:d0:04:c6:e7:
d6:61:59:7a:6b:6b:6c:b6:20:72:fd:60:ba:7a:ee:87:bf:69:
39:76:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:56 2024 by rpki-client on console-ams.rpki-client.org