Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E74D569D1411EF8CA03A97762E951A.roa
File: 18E74D569D1411EF8CA03A97762E951A.roa (raw, json)
Hash identifier: XDWP7f36YhA79E6dKNKjqLKVkKtUuZ+9IW+x0LXq1to=
Subject key identifier: 4B:10:12:AC:7F:6C:65:63:56:D0:0F:96:57:7E:B1:F4:7E:9D:08:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01093B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E74D569D1411EF8CA03A97762E951A.roa
Signing time: Thu 07 Nov 2024 14:25:11 +0000
ROA not before: Thu 07 Nov 2024 14:25:08 +0000
ROA not after: Tue 07 Jan 2025 14:25:08 +0000
asID: 139057
IP address blocks: 154.85.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67899 (0x1093b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:25:08 2024 GMT
Not After : Jan 7 14:25:08 2025 GMT
Subject: CN=672ccdc7-4e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:25:44:cc:49:9a:ef:ae:96:e6:4a:14:0f:
28:f2:0d:e1:b7:e2:c3:9e:62:f6:e7:84:60:5e:13:
ea:e8:ba:b6:af:94:a9:c4:af:ae:89:fb:5a:7a:b9:
e3:40:44:4c:5e:06:e8:54:70:01:89:97:b5:43:13:
52:c4:cb:71:8b:62:ab:72:a0:7b:d1:ce:01:ac:ac:
bf:c0:50:f6:23:4c:64:34:ac:84:bc:34:a8:ef:78:
57:a8:88:ae:0b:07:e4:99:d5:46:1f:86:49:f1:f1:
e5:58:01:36:f3:9f:eb:ef:1a:22:88:64:40:54:72:
53:f1:74:33:55:a8:0c:7f:25:a6:6d:05:18:0b:9f:
ac:4a:0f:96:f7:1f:83:0c:4c:a2:b3:57:f0:66:3e:
1d:b7:bb:6a:6d:55:01:0e:93:fd:89:78:ef:e3:fb:
0e:70:30:50:f1:91:df:82:29:8f:d7:d4:8f:a8:c5:
45:0d:49:3d:58:33:a7:83:4b:42:70:ac:3e:93:33:
cb:34:80:00:7c:5c:12:8e:1b:ff:3d:23:41:e7:fa:
ea:88:51:91:36:e6:d2:e3:12:cf:83:05:66:15:76:
9e:ef:b1:9a:e4:66:84:9b:d9:57:8b:55:ee:55:56:
aa:77:07:85:54:b5:11:fe:67:f0:d7:55:23:a2:7e:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:12:AC:7F:6C:65:63:56:D0:0F:96:57:7E:B1:F4:7E:9D:08:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E74D569D1411EF8CA03A97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.86.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:4e:0d:cf:cc:88:11:bb:33:21:48:e1:57:cf:5b:a8:00:bb:
33:ef:7c:52:6d:e7:09:1f:a5:78:4b:d8:c6:59:ee:c3:ee:d1:
66:98:2a:65:87:3f:4a:f8:83:ca:4b:68:ac:32:3c:b7:ca:60:
ed:1f:42:f3:e4:1f:b3:af:95:0d:54:ad:59:e0:9d:4a:e0:d6:
7a:ea:1b:96:93:50:2e:b2:99:ba:71:8c:15:29:bc:fa:b5:d4:
e8:d9:06:05:6c:95:8a:cf:46:58:27:f2:bc:c0:8a:0d:4e:55:
48:05:5e:bd:e3:b2:e8:c6:c3:bc:29:47:66:a4:ed:93:66:84:
b7:6e:8d:fa:6d:a3:63:7e:44:a2:dd:a8:94:a8:26:4d:c1:15:
63:52:95:58:f1:bb:cc:cf:d1:af:5d:1b:ef:29:0c:7b:bf:1a:
d1:19:9e:76:1c:c2:f2:bb:eb:a4:a8:f1:35:d0:8e:59:72:3f:
c0:71:b9:d5:87:10:56:ea:3e:29:ed:52:df:d9:54:74:91:ec:
5d:1d:33:74:e8:da:61:df:80:e2:97:3e:bb:28:9e:35:50:ad:
98:b7:a6:be:6b:47:64:0f:b0:02:c4:0b:d6:e2:88:96:78:a5:
93:6a:1e:5c:8f:38:a2:c1:7d:08:d1:a7:78:de:91:d3:9f:78:
db:47:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org