Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE8C804A45311EF8A64D056762E951A.roa
File: 2FE8C804A45311EF8A64D056762E951A.roa (raw, json)
Hash identifier: pMfH4eSLvECuDJ5U7AfW5ahpZjBjQvX3ojpL2phvl9Q=
Subject key identifier: 45:32:49:0C:19:0F:F6:7C:F2:E0:4A:B6:C0:06:E0:01:87:63:CC:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE8C804A45311EF8A64D056762E951A.roa
Signing time: Sat 16 Nov 2024 19:44:27 +0000
ROA not before: Sat 16 Nov 2024 19:44:22 +0000
ROA not after: Tue 26 Nov 2024 19:44:22 +0000
asID: 9009
IP address blocks: 154.199.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69163 (0x10e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:44:22 2024 GMT
Not After : Nov 26 19:44:22 2024 GMT
Subject: CN=6738f61a-2fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:ee:08:8c:20:a7:06:54:a9:6c:0e:5d:c0:
b7:b0:89:e6:d0:ff:91:fd:00:34:48:22:96:83:ab:
0d:15:f0:27:c7:51:5e:86:75:58:99:24:51:19:07:
84:cd:b9:b1:d7:07:8b:50:4a:a2:f1:40:fa:5f:9b:
51:63:9b:bf:a1:04:d2:cc:d4:5e:e2:71:3b:6f:38:
73:cf:83:cb:81:59:c4:a4:b0:8a:40:c3:15:26:46:
dd:73:3a:09:b7:4e:1f:66:98:7d:94:83:3d:bf:1f:
fc:5c:1a:26:0e:5d:b6:3c:34:46:d5:22:71:e0:e2:
ba:75:74:34:15:a3:ca:ad:9c:bd:dc:8e:61:2d:dd:
81:1a:04:92:c3:a5:dd:cc:52:6a:79:6b:0a:be:16:
5b:8d:21:05:c6:10:5e:5c:61:ad:ef:76:f2:c0:01:
3d:b6:59:50:db:3b:cc:01:ef:ff:7c:8c:41:55:bc:
08:30:0e:2f:d5:59:ea:f6:b6:25:33:55:62:fc:62:
48:d2:35:ed:9d:57:d6:6f:70:a2:53:ba:4b:bd:d8:
89:8e:ab:51:84:55:b6:58:5e:08:7b:46:39:71:41:
67:f1:d2:9f:7e:f0:ee:b4:f0:25:4b:62:7f:c2:c8:
61:83:ca:ad:f5:12:c6:1f:05:e8:32:89:44:be:22:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:49:0C:19:0F:F6:7C:F2:E0:4A:B6:C0:06:E0:01:87:63:CC:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE8C804A45311EF8A64D056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.192.0/22
Signature Algorithm: sha256WithRSAEncryption
11:4a:04:b9:01:76:44:22:1e:a3:76:10:74:6b:e1:de:6e:67:
7a:07:2c:d3:70:38:b5:ea:77:61:c6:91:42:99:fc:ea:20:52:
35:8b:98:ff:62:54:b1:c9:4c:4b:d3:93:e8:50:d2:92:83:ad:
0a:86:3e:4a:94:22:97:b9:1b:8d:07:b7:2b:41:99:0e:7f:4c:
78:3b:65:fc:38:84:a6:02:9d:f7:a6:11:a4:b5:ef:1e:39:ad:
66:95:2d:14:5b:a9:b7:d5:2a:96:da:ae:59:8d:ed:c0:15:35:
e2:83:37:a2:11:93:2a:ed:ec:5f:fe:0c:23:82:8a:20:cf:1f:
09:4b:b9:d6:ef:0b:a3:45:32:15:dd:84:29:bd:c1:49:34:39:
29:89:b2:71:af:5e:4d:b4:85:50:c7:2b:42:8f:7c:cf:10:70:
05:7a:f4:65:9f:a6:f6:eb:e0:8c:ea:75:51:55:63:1c:88:ce:
90:02:96:9c:5c:ba:a0:6b:f5:75:f0:9c:10:2b:6b:17:37:b0:
d8:f3:22:ef:36:19:24:e5:f8:5c:6c:90:7f:41:b6:c7:11:da:
e5:24:1d:d6:e1:32:56:c7:10:a1:45:5d:59:dd:99:40:aa:83:
2c:31:82:9c:bb:c2:a3:18:47:ad:36:41:92:90:c7:09:28:ee:
15:d9:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:34:50 2024 by rpki-client on console-fra.rpki-client.org