Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264730CEAA4311EFBFFF7DB8762E951A.roa
File: 264730CEAA4311EFBFFF7DB8762E951A.roa (raw, json)
Hash identifier: P0fkh2BEPnI3nfQkz38g1LwIBfk/ZqoR5dQhmPNq7CE=
Subject key identifier: 02:A4:8B:F3:AE:91:28:5B:24:F5:14:33:55:7E:3B:A9:B0:D6:F0:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011245
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264730CEAA4311EFBFFF7DB8762E951A.roa
Signing time: Sun 24 Nov 2024 09:04:45 +0000
ROA not before: Sun 24 Nov 2024 09:04:42 +0000
ROA not after: Thu 26 Dec 2024 09:04:42 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70213 (0x11245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 09:04:42 2024 GMT
Not After : Dec 26 09:04:42 2024 GMT
Subject: CN=6742ec2d-26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:40:fe:7f:af:c7:9b:e5:d4:ef:e7:d5:9c:
57:86:8a:46:f3:3c:52:79:d2:59:fc:93:d6:f7:dd:
2d:76:0c:ac:86:4c:36:9a:d4:e8:32:81:d1:f3:30:
2a:2a:5f:de:26:a8:53:3f:4c:c9:ec:07:5a:e6:d7:
e8:93:be:36:92:da:85:5f:1a:75:b8:29:13:c2:7f:
89:0b:69:cd:a5:0f:03:63:c7:7d:ab:13:e7:cd:e5:
4c:0d:98:e4:0f:44:38:ba:37:40:0a:b8:fc:fb:09:
f3:c1:60:32:f1:ff:ae:8e:8b:e1:06:1b:33:69:fc:
60:9e:f6:b3:8e:61:07:f5:2b:0f:d8:fa:0a:01:e7:
f5:c8:32:39:43:3a:cd:db:e0:3e:6d:1c:59:6c:6e:
11:92:1a:7a:59:e1:17:c7:d7:bd:00:c4:0c:0a:c7:
6d:1f:94:26:27:a1:19:d0:07:0a:c9:68:e3:c9:31:
cc:c1:43:36:65:cb:52:84:4c:46:d0:5d:5c:15:36:
c2:3f:a1:98:60:10:a0:d6:13:0b:81:4d:de:f0:34:
f6:d2:2f:05:52:f5:07:3a:69:a5:43:51:70:9c:69:
5a:37:f3:50:79:09:03:88:53:65:2b:cf:25:8a:e2:
90:ee:8a:30:2e:c8:95:c4:df:32:81:00:76:af:74:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:8B:F3:AE:91:28:5B:24:F5:14:33:55:7E:3B:A9:B0:D6:F0:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264730CEAA4311EFBFFF7DB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:74:28:33:e5:9e:cb:e0:8b:a5:f7:1b:e0:6f:41:ad:4c:ab:
cf:b9:df:35:31:cc:67:31:b1:be:2a:c5:eb:7f:34:1c:88:35:
2b:65:03:1f:c5:6c:f9:14:89:49:ae:66:e0:e3:d0:b9:c0:0f:
01:6e:46:d5:6a:f0:c9:ee:cb:3e:17:9d:a4:d2:5d:d0:b4:09:
e9:49:1f:af:b2:58:c3:28:7e:1b:40:10:1c:8a:44:ee:57:73:
2a:15:aa:f0:d1:a5:f9:6e:41:c3:c8:77:c2:2c:a4:a6:0f:69:
36:7c:ba:3e:6b:6b:34:88:62:58:31:1c:22:8a:eb:ce:99:f5:
6c:b8:2e:63:bf:73:d6:43:03:36:55:35:80:2e:1a:3c:86:fd:
92:fe:11:75:0c:b5:c3:1d:99:ab:c3:6b:31:e8:c1:e3:6f:f6:
ee:3b:92:72:71:fb:7e:fd:2b:8d:84:56:65:36:21:33:60:dd:
25:b2:26:90:91:e7:f0:72:0c:84:77:5d:a5:89:99:e9:a8:3d:
6b:ec:d9:4c:90:03:73:ac:df:90:19:a1:51:27:12:a6:18:4e:
42:fb:b5:9e:8f:c8:43:0a:1e:0a:12:72:fa:61:11:85:86:7b:
2b:99:2a:17:b7:8e:5a:6a:b3:83:8b:db:a3:af:a3:09:88:87:
bd:92:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:37:33 2024 by rpki-client on console-fra.rpki-client.org