Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19F046529C1B11EF9485D477762E951A.roa
File: 19F046529C1B11EF9485D477762E951A.roa (raw, json)
Hash identifier: /Qqd9aCUXBOSZ1rcPLdS8BoqWIzrmUO/ujUgEkF1o5c=
Subject key identifier: B9:CE:0A:95:00:87:C2:7C:83:DE:95:96:BD:FF:3A:AF:B2:92:98:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01085E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19F046529C1B11EF9485D477762E951A.roa
Signing time: Wed 06 Nov 2024 08:42:49 +0000
ROA not before: Wed 06 Nov 2024 08:42:45 +0000
ROA not after: Mon 30 Dec 2024 08:42:45 +0000
asID: 138915
IP address blocks: 154.93.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67678 (0x1085e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:42:45 2024 GMT
Not After : Dec 30 08:42:45 2024 GMT
Subject: CN=672b2c08-c3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:ae:ee:58:0a:c1:19:5d:74:76:7c:3e:f2:
00:39:9f:2d:70:48:7a:f3:8b:93:3d:3d:ed:21:b5:
e3:63:4b:59:1f:11:db:af:4e:1e:ac:cc:cc:99:65:
ba:d3:a7:48:ed:da:c8:37:09:9e:b9:0b:b3:71:da:
4f:1d:21:4e:bb:a4:d8:84:eb:5d:1b:9a:fb:bb:c6:
2e:34:33:8e:d1:86:36:97:68:9c:55:ed:d6:dc:ac:
02:d1:14:d0:5f:32:c6:c5:ca:de:e6:d8:58:c6:e5:
2b:48:73:e9:37:e5:4d:b4:40:5f:8f:74:ef:c6:38:
f2:70:7b:15:ff:19:2a:ad:c2:77:9e:3b:ed:37:d2:
be:2e:54:cb:01:b8:be:91:94:d0:ca:97:36:dd:e1:
b4:e1:b5:78:d4:31:8c:46:f4:b9:c7:2d:51:2a:7d:
8d:e5:2b:ce:70:96:88:43:a6:1d:63:f6:c7:56:e0:
66:62:c4:4d:42:6a:94:37:fb:5b:d7:c1:20:3f:8c:
af:35:b4:cb:6d:95:32:13:c8:f0:45:79:41:58:4a:
11:dc:8b:f1:43:9c:52:31:c6:f7:14:5a:cd:24:a8:
55:db:33:ef:75:bc:46:43:7e:e0:d9:b8:41:f8:07:
72:af:d4:4b:0d:e4:da:bc:66:2c:d6:12:b7:38:88:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:0A:95:00:87:C2:7C:83:DE:95:96:BD:FF:3A:AF:B2:92:98:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19F046529C1B11EF9485D477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.106.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:f5:a2:2d:1a:3f:fc:e5:bd:02:d9:97:49:f0:03:ba:9c:93:
11:39:7b:09:9e:46:6c:0e:6c:f5:0f:78:44:90:11:8f:18:08:
0f:5e:8c:02:4f:97:f7:f8:aa:48:d8:39:38:5f:9a:5b:c3:df:
11:27:4a:16:5d:ca:f8:52:b0:dd:4e:86:d3:92:67:ad:91:10:
6f:73:2a:c0:77:0c:af:e2:fe:a6:ea:43:75:2a:67:76:c7:a5:
49:87:77:35:8a:6f:8b:41:e3:67:2d:32:ac:91:f5:5d:70:fe:
26:1e:39:26:1d:95:f9:1c:83:a2:8b:ad:8c:fe:df:40:12:fd:
6b:3a:e0:c5:ef:40:ae:5e:1e:f3:17:35:91:d4:69:5a:33:35:
af:ce:fd:8b:d9:1d:79:7e:b6:e2:f6:b7:d5:03:cc:90:97:b9:
c5:ac:d9:80:b8:9a:12:66:40:7f:eb:51:d6:29:71:ef:78:07:
84:34:7a:70:32:b6:17:94:c1:ac:c3:64:ad:05:61:87:93:93:
b9:ed:51:09:70:bc:5b:33:90:e7:9c:32:b5:c1:fb:7d:1a:33:
b8:de:3d:ae:04:86:b7:99:37:4a:98:d0:b6:22:02:d0:d6:b5:
d1:3a:c9:b0:a5:17:3a:c3:46:de:62:da:43:55:83:03:21:58:
8e:a5:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:13 2024 by rpki-client on console-fra.rpki-client.org