Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C3EE40A92011EFB2F90F84762E951A.roa
File: 25C3EE40A92011EFB2F90F84762E951A.roa (raw, json)
Hash identifier: lZXsJW3/r/cRSeRL7UAzRub6trNjEM68gb1CTUr4G20=
Subject key identifier: CA:4B:86:ED:F8:70:65:F9:BE:2F:7E:A3:30:F8:83:94:5D:4F:BF:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01115B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C3EE40A92011EFB2F90F84762E951A.roa
Signing time: Fri 22 Nov 2024 22:21:41 +0000
ROA not before: Fri 22 Nov 2024 22:21:37 +0000
ROA not after: Tue 03 Dec 2024 22:21:37 +0000
asID: 62240
IP address blocks: 154.195.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69979 (0x1115b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:21:37 2024 GMT
Not After : Dec 3 22:21:37 2024 GMT
Subject: CN=674103f5-7334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:52:d0:ae:85:03:c5:50:95:ea:53:0a:0c:
4a:bf:f9:77:24:dd:60:99:81:20:a2:e7:21:03:f2:
52:09:55:e2:d4:a4:f1:c7:0b:ff:72:de:15:24:0b:
c1:b8:5f:1b:b8:c8:ad:c3:4d:32:2a:65:3f:ee:64:
fa:fe:6a:fa:51:f6:77:69:5a:38:55:2b:16:91:9d:
49:c9:15:9a:ec:66:b1:f7:5d:25:01:d5:2d:34:26:
1d:53:19:af:0b:3b:39:71:91:4c:d9:4d:5d:c6:21:
95:73:88:cf:a8:1c:a6:cb:c8:0a:fc:75:d5:8e:09:
ba:b0:5a:6a:c3:51:5b:75:68:ea:b5:9c:7b:e7:c5:
61:b4:61:6a:8b:3a:71:b3:88:da:45:19:ab:75:49:
4d:b6:18:26:b6:30:81:52:ef:5b:a7:19:9d:af:0a:
0e:d7:7f:6a:ec:19:ee:0d:91:6d:59:55:11:32:33:
8e:e3:37:a2:1c:33:d3:fd:a0:55:57:cc:29:38:7c:
de:25:b6:20:9d:7f:bd:80:fc:8f:9f:6e:86:78:36:
09:40:6f:a1:c0:00:71:a5:49:18:12:a5:56:16:79:
f0:20:aa:8b:37:6a:fc:c1:95:e6:57:44:e6:46:1d:
8d:b1:b0:01:39:e1:08:f9:e3:ad:bf:a6:33:01:a0:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:86:ED:F8:70:65:F9:BE:2F:7E:A3:30:F8:83:94:5D:4F:BF:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C3EE40A92011EFB2F90F84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/20
Signature Algorithm: sha256WithRSAEncryption
28:2d:5f:fd:dd:ea:97:99:bd:aa:cb:19:6b:1b:53:1a:55:21:
1f:29:dc:cc:20:c2:d2:8c:c6:43:30:df:b3:23:49:04:85:1c:
0e:f9:9b:d0:69:d4:72:4e:74:4b:5d:4b:c8:44:ee:15:ef:64:
53:03:c6:ff:49:70:bf:0b:18:83:08:ea:2b:a9:c2:3b:67:a0:
00:87:b2:b1:a4:84:fa:63:53:07:78:7d:52:8d:cc:3e:b1:18:
c9:9b:76:9f:e8:5f:f2:cb:a7:cf:79:fc:07:53:b6:5a:42:88:
c3:ca:cd:f4:0b:8c:30:01:00:d0:08:86:66:03:c9:0e:5d:cb:
54:b0:f9:9a:65:b5:25:ac:c3:c2:58:58:12:d9:c1:9f:f7:8f:
59:0f:ee:a6:fd:80:d0:cf:c2:1c:b1:1b:3e:71:6a:c9:63:ab:
c1:2a:91:7a:5e:63:20:81:64:75:41:8c:a0:85:88:58:b8:db:
5a:2e:13:3a:29:0b:03:20:46:5d:d1:b6:d2:8f:b5:94:fb:7d:
96:f6:86:8c:31:22:e5:12:72:fd:5f:7f:a3:dd:bc:25:26:85:
79:ff:96:9d:80:2a:4e:37:e7:2d:0d:83:48:e2:46:f6:ea:89:
51:08:2e:52:bd:3d:1e:46:8e:b0:0d:bf:ed:ca:3e:70:71:f9:
55:ed:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:24 2024 by rpki-client on console-fra.rpki-client.org