Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB1E772A72511EFB91AC893762E951A.roa
File: 1DB1E772A72511EFB91AC893762E951A.roa (raw, json)
Hash identifier: dSmP/scCmLmN6uGw924uVmUlbno0nXUGsjWXx+Ooj+E=
Subject key identifier: 19:DF:A1:CA:D3:48:C5:9A:75:83:A6:27:F6:AD:4B:47:5D:9E:20:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB1E772A72511EFB91AC893762E951A.roa
Signing time: Wed 20 Nov 2024 09:52:13 +0000
ROA not before: Wed 20 Nov 2024 09:52:09 +0000
ROA not after: Sun 15 Dec 2024 09:52:09 +0000
asID: 51396
IP address blocks: 154.213.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69499 (0x10f7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:52:09 2024 GMT
Not After : Dec 15 09:52:09 2024 GMT
Subject: CN=673db14c-3058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:5d:7e:f1:fa:b3:03:ea:a8:b2:ad:f5:ff:
38:01:8c:50:af:74:87:73:0f:19:bf:80:18:49:d4:
b5:6a:cd:5d:1d:e6:12:65:ac:9c:7b:b7:45:42:a4:
19:0d:26:31:56:9c:07:eb:74:b8:04:e3:72:51:c8:
3b:a3:2d:9f:e3:f0:57:9f:d6:c5:7c:77:f9:49:81:
db:b3:b7:da:02:0c:92:ae:86:a0:11:3a:5b:b6:04:
14:6a:9c:2e:1a:41:83:87:d6:d1:ea:1b:3d:b1:0d:
a0:94:a5:b5:03:13:59:b5:42:fd:78:81:d7:ea:34:
6f:25:cf:b1:37:5d:27:d6:90:6a:ba:04:a7:45:26:
78:b3:80:9e:f1:94:2e:41:74:36:70:aa:df:00:d5:
7b:23:89:97:75:3f:58:a8:0d:40:b2:d4:f8:64:7e:
75:ef:dd:00:95:dd:cd:6f:e8:1f:bb:55:ec:e0:66:
22:d4:ec:cf:f7:77:97:32:ca:8e:da:a5:aa:17:75:
6d:5d:3a:62:c5:f7:85:04:ab:85:17:0a:1e:e2:c8:
6e:e0:a6:bd:77:da:c1:0c:29:8b:62:80:0e:b7:33:
d5:ee:5d:45:d7:f8:40:cb:9c:4a:61:0f:e0:ac:41:
4d:98:f6:e7:8d:c2:a5:9d:14:95:80:19:63:fa:2b:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:A1:CA:D3:48:C5:9A:75:83:A6:27:F6:AD:4B:47:5D:9E:20:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB1E772A72511EFB91AC893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.184.0/21
Signature Algorithm: sha256WithRSAEncryption
65:69:0d:59:27:be:aa:61:ba:ba:06:e2:14:61:4a:e5:6a:13:
e0:55:4e:c6:66:e9:4d:63:ae:8d:db:94:57:ca:32:7d:da:75:
d6:6d:cf:87:ad:57:0d:49:a7:41:37:c2:b2:bb:c8:e0:03:19:
11:10:f2:40:8c:bc:54:a1:87:63:62:4f:38:b5:89:b4:8f:88:
78:e9:c2:f8:f5:11:f5:4a:63:78:6a:43:05:21:15:73:54:f5:
7b:b4:15:8b:90:b7:6d:d8:05:a7:1b:d9:8a:75:45:76:d4:16:
41:9f:f3:66:f2:6f:e1:6e:66:ab:7b:0d:2c:4e:f0:a0:c9:f2:
ae:33:e1:3a:e2:ae:5d:38:85:85:df:4f:2e:ae:4b:2c:2c:aa:
a2:26:af:75:e1:9b:f5:7b:0f:ce:e3:11:44:a0:c7:49:8f:66:
06:31:96:71:89:4b:ba:75:ab:01:1c:08:a1:6e:07:87:e9:b1:
74:e5:43:12:17:23:ce:ba:2d:66:4f:63:1c:be:75:8c:13:5c:
b2:ca:43:1d:4a:06:75:fd:78:c1:a7:4c:47:6f:f0:7a:46:bd:
00:5b:ff:53:00:1b:0e:e2:b5:3e:71:84:d7:45:ee:55:a5:5c:
93:61:b3:d2:f4:01:78:c4:b7:87:f9:f1:97:fe:4a:c7:d1:40:
8a:9a:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:56:48 2024 by rpki-client on console-ams.rpki-client.org