Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0EE84C9C1A11EF96F70372762E951A.roa
File: 2E0EE84C9C1A11EF96F70372762E951A.roa (raw, json)
Hash identifier: iHCNCOo92wqkU3QFmu6ly+Lbs8d/D8XamNutu30q93E=
Subject key identifier: 0F:7C:26:B6:01:B8:7E:B7:A4:8C:B6:0A:B8:86:97:87:06:2F:58:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0EE84C9C1A11EF96F70372762E951A.roa
Signing time: Wed 06 Nov 2024 08:36:13 +0000
ROA not before: Wed 06 Nov 2024 08:36:09 +0000
ROA not after: Mon 30 Dec 2024 08:36:09 +0000
asID: 138915
IP address blocks: 154.94.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67666 (0x10852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:36:09 2024 GMT
Not After : Dec 30 08:36:09 2024 GMT
Subject: CN=672b2a7d-79e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:d6:d9:4b:17:9b:cf:17:dd:60:b0:f6:09:
83:d3:26:e0:6f:78:30:86:2f:59:79:ad:83:1b:e0:
9f:7e:bf:ef:66:d5:04:c2:2b:ca:93:4f:bc:ef:d2:
60:c5:bc:da:e5:0b:fc:84:8f:18:c9:e3:ab:c3:c5:
05:7d:03:6e:68:d5:eb:df:69:bb:39:bd:57:66:c4:
5a:d2:2c:9a:df:a8:70:48:2a:69:b9:e4:7f:22:84:
d8:65:0c:a4:e4:cc:d6:50:43:92:54:d6:b5:66:41:
40:72:63:a6:8b:d1:6f:1b:3c:a0:ac:e4:e5:29:16:
bf:20:be:0e:e9:4f:c1:7d:da:66:a2:0b:ed:df:fb:
9e:cd:5d:b3:c5:72:63:7c:15:81:c4:86:c9:53:f0:
f5:6c:ae:c7:8e:86:f5:4b:20:34:6c:cd:02:8d:95:
ce:1a:ef:98:07:9c:b7:58:13:b6:7c:50:62:63:90:
4e:30:46:92:bd:7e:1d:e3:da:0f:fe:d1:56:43:18:
76:23:bc:f6:ef:cf:de:24:e8:0f:87:a7:90:6a:43:
b8:ec:7c:91:9c:3b:18:1f:5a:94:78:fc:3e:30:9e:
b2:3a:a8:0b:84:23:d6:c1:ad:84:b3:ee:25:b5:94:
43:17:52:11:05:76:6b:fc:f4:5b:71:4d:12:72:79:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:26:B6:01:B8:7E:B7:A4:8C:B6:0A:B8:86:97:87:06:2F:58:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E0EE84C9C1A11EF96F70372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:73:6c:93:1c:e2:8e:4c:e6:39:e7:d7:aa:0f:0c:e9:c4:44:
ca:42:89:9a:3c:7b:4a:73:25:2d:c5:c3:02:b9:ba:fb:8c:98:
03:13:14:02:aa:fb:57:20:04:e8:64:9b:69:0f:48:ed:a2:78:
72:88:2b:50:c1:5b:76:97:0a:0b:53:cc:6f:9b:85:ed:1f:ad:
6a:71:9f:6a:72:62:d8:e8:4d:ca:ef:79:1e:03:bb:3a:ee:e0:
41:5a:53:72:d1:52:a3:d8:a8:73:fc:b9:47:51:e5:a6:b8:b2:
76:b5:ed:1f:28:1d:57:5b:69:42:e5:97:95:d7:bc:d4:00:fa:
f1:fd:bd:53:fc:a4:3b:e9:1e:0b:0a:84:f6:25:c7:3c:2b:cd:
f0:fc:bb:37:6a:e2:5c:54:78:9d:e4:2f:77:d7:06:98:da:38:
48:4d:2e:1d:34:16:d7:b3:44:ab:94:ae:7f:de:cc:eb:dc:a4:
54:f8:25:b3:d6:fb:20:15:69:0e:c7:14:ec:15:02:81:4e:48:
09:70:79:75:6a:38:70:d3:c3:80:9c:92:35:d1:a0:77:55:40:
9f:4f:51:1e:b4:e2:f8:4b:d3:e0:a0:26:53:74:cc:37:70:1f:
09:25:c8:1e:74:67:ef:0b:d9:fd:c8:ae:b9:b3:8e:04:bc:1c:
93:3f:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:26 2024 by rpki-client on console-fra.rpki-client.org