Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D424E49B8811EFBC885854762E951A.roa
File: 21D424E49B8811EFBC885854762E951A.roa (raw, json)
Hash identifier: f4S39SppTR/jAVCGPADcXFUZDA4Yv7h75hHokFKx3Q4=
Subject key identifier: EA:7E:34:72:75:0E:84:46:A6:71:C2:AD:2E:C5:76:B5:01:D8:FF:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010821
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D424E49B8811EFBC885854762E951A.roa
Signing time: Tue 05 Nov 2024 15:10:46 +0000
ROA not before: Tue 05 Nov 2024 15:10:42 +0000
ROA not after: Wed 04 Dec 2024 15:10:42 +0000
asID: 200373
IP address blocks: 154.94.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67617 (0x10821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 15:10:42 2024 GMT
Not After : Dec 4 15:10:42 2024 GMT
Subject: CN=672a3576-a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:5a:a9:98:73:fe:c2:1a:c0:6e:89:95:c3:
dc:a6:c8:ce:15:ae:39:0a:47:cd:06:9f:90:b5:50:
12:45:4b:2f:7d:11:1c:a7:b4:35:ad:53:b7:e4:92:
70:1a:4a:b2:00:75:66:2b:ff:a4:7d:9e:18:9e:33:
8a:f2:c1:42:4e:29:ba:9c:9b:5a:75:40:65:6a:06:
9f:84:88:0f:2f:1f:eb:47:07:d3:ca:77:c6:e4:97:
cb:9a:ec:13:46:70:a8:46:78:0f:3a:d9:b6:42:e4:
51:f7:99:97:21:b6:ac:93:98:a8:63:16:12:d8:e6:
4b:3d:c9:50:90:ca:48:8f:48:a1:b6:f0:97:f8:f8:
46:65:47:10:11:e0:16:a7:9e:32:89:1a:88:61:4e:
a1:55:cb:55:ab:24:32:3f:fb:5e:bc:f9:a0:c2:dd:
23:c7:53:35:2e:1c:0b:b2:69:d8:65:a4:94:54:81:
da:01:cf:a3:f6:98:da:ab:30:d8:74:2a:03:77:ab:
07:d0:7f:e1:d7:0f:88:f4:8b:72:22:13:6b:35:e8:
83:b7:dd:bc:45:c1:bf:fa:31:86:b7:10:ae:6c:21:
0c:3f:c5:a9:d5:b0:f2:8b:fb:69:bd:88:ca:f8:17:
0a:c0:6c:5c:b0:84:d3:66:90:2b:04:ff:31:f3:ac:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:34:72:75:0E:84:46:A6:71:C2:AD:2E:C5:76:B5:01:D8:FF:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D424E49B8811EFBC885854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:14:17:fe:11:64:84:6e:61:63:6a:88:27:f5:90:4c:1a:5c:
32:68:16:d4:77:45:1e:18:c6:37:5a:34:4b:7d:42:4d:df:45:
fe:bb:6c:5a:ac:a4:dd:f2:79:10:b1:7e:4d:d8:01:47:b6:2c:
f5:10:0d:3e:1d:75:80:a0:44:fe:24:e1:49:a2:82:49:bd:30:
29:2e:51:4f:35:b8:dd:f5:4a:b6:f0:72:5c:3b:bf:55:1d:0e:
08:65:6e:51:fe:cd:fb:ab:c9:d6:c7:9b:3a:75:39:22:2d:10:
21:1e:a3:61:bc:39:64:90:de:84:bb:25:e9:d5:e9:b8:ec:b8:
d5:1e:2c:68:23:10:34:08:af:10:08:e0:aa:55:b9:93:47:ca:
0f:5e:3f:fa:07:3f:7c:22:11:af:b7:39:2e:bf:7a:9d:4f:dd:
46:6b:ba:c0:a9:89:0f:be:55:76:99:ba:77:4f:1d:b3:1c:0b:
26:a1:3a:b0:00:bc:b4:fc:7b:8c:4a:ed:2a:9b:79:a6:41:16:
bc:13:e7:fe:26:c9:eb:1a:88:ff:8b:a1:88:d5:d7:8a:b8:b4:
bd:d6:2a:6f:ff:c7:77:6f:e7:37:25:60:e9:07:88:18:94:74:
01:b6:a0:1f:b2:ae:72:1c:a2:6a:84:9d:fe:85:14:5e:29:d0:
32:ff:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org