Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C7E39CA8CD11EFA4B88D7E762E951A.roa
File: 19C7E39CA8CD11EFA4B88D7E762E951A.roa (raw, json)
Hash identifier: PezWl9j+uVZTWafUTMtaOrC/JUTiWdL2zIJIHi5EU/s=
Subject key identifier: B2:5F:CC:CA:96:6D:12:E3:63:18:AF:61:85:95:62:C0:32:3A:80:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011011
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C7E39CA8CD11EFA4B88D7E762E951A.roa
Signing time: Fri 22 Nov 2024 12:27:13 +0000
ROA not before: Fri 22 Nov 2024 12:27:09 +0000
ROA not after: Sat 30 Nov 2024 12:27:09 +0000
asID: 137443
IP address blocks: 154.223.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69649 (0x11011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:27:09 2024 GMT
Not After : Nov 30 12:27:09 2024 GMT
Subject: CN=674078a0-f526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:5d:34:35:c6:1a:b2:8f:a8:08:81:99:08:
1f:0d:de:65:2e:ad:de:de:b2:c5:92:71:42:4d:80:
58:f5:d7:2c:28:01:96:ac:0d:1f:41:cd:43:09:b1:
67:94:f7:d9:6c:8b:f6:84:09:25:f6:6d:d0:fc:b8:
fd:dc:8c:12:d7:9d:b9:a3:cb:24:04:a0:6b:d9:19:
5b:05:26:17:8e:f4:cf:a7:46:68:79:1d:70:c6:f5:
1b:90:64:11:88:1a:a3:b0:3c:60:51:92:e2:85:af:
f9:df:ae:ef:d3:f1:ce:c5:8e:65:d9:2a:2c:d4:42:
2f:d7:45:61:0a:90:f0:cd:df:d1:48:aa:04:fc:b1:
31:75:cf:26:e7:94:11:5b:f4:fe:ec:22:b5:b0:25:
4e:39:75:06:4c:d0:4a:e3:f8:78:cd:8d:28:13:11:
93:fa:8a:db:c6:21:23:40:10:a7:7d:59:a5:f8:b0:
d0:2a:34:aa:53:74:eb:e4:09:a6:35:37:47:b0:e9:
de:c7:b5:c1:4c:5d:b5:fb:da:ba:8b:9d:0a:08:68:
12:41:30:0e:f8:57:be:38:c1:48:66:14:60:37:f1:
e2:45:ec:eb:1d:33:8e:a9:78:2f:6e:46:9c:ec:7f:
ed:4b:7a:36:85:e1:d4:42:f1:67:7f:a4:29:17:4c:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:CC:CA:96:6D:12:E3:63:18:AF:61:85:95:62:C0:32:3A:80:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C7E39CA8CD11EFA4B88D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2a:ba:7f:44:4a:47:72:2a:e4:f8:d8:f7:42:92:33:ac:56:
91:dc:2b:a7:ff:e6:a5:d9:d4:cc:78:13:1b:0d:29:cd:ac:4d:
5d:e4:a7:47:c0:95:6d:5a:5c:f8:ff:fe:58:47:2d:65:52:ef:
d0:08:3b:9e:7d:c2:da:73:47:3d:fb:a7:eb:42:c1:26:18:10:
37:ca:e5:88:9e:6b:2a:85:ed:28:b2:9b:94:93:33:bc:89:68:
93:22:cd:e5:f7:4e:ca:d4:6a:81:f2:b7:1d:37:0f:4e:d5:e3:
a9:f3:0f:55:b4:e8:f7:2b:43:3a:eb:d3:23:fe:7a:97:85:27:
b9:bc:f7:cb:9d:9f:82:27:01:be:b6:ea:46:c5:eb:d8:3c:2d:
78:44:54:42:56:fd:61:91:3a:44:eb:d3:8b:ae:97:7b:2c:f2:
6a:bf:96:20:1d:c2:30:96:06:1d:f0:92:02:66:19:5e:8f:36:
5d:cb:9d:f9:4d:9c:b0:83:c0:e2:20:2b:70:d6:72:d0:34:cb:
e0:a4:83:bf:74:6e:80:88:3f:dc:72:ed:71:66:85:62:b7:48:
33:f6:82:8b:33:3f:b2:01:de:1f:35:89:42:0b:8c:6f:cf:24:
67:b6:0a:13:fb:b9:63:3a:68:bc:09:bb:6c:1f:71:ea:c7:d3:
38:c2:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:58 2024 by rpki-client on console-ams.rpki-client.org