Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37AB0FA8A8DF11EF8BE2C770762E951A.roa
File: 37AB0FA8A8DF11EF8BE2C770762E951A.roa (raw, json)
Hash identifier: 5G1sbFI2SNTnDrsPmYJAQzwSYsmVqyxfkKM2Cb7iQXM=
Subject key identifier: 32:84:94:8C:AC:8A:59:37:ED:2F:25:EA:20:74:4B:84:2F:7F:05:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01107D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37AB0FA8A8DF11EF8BE2C770762E951A.roa
Signing time: Fri 22 Nov 2024 14:36:54 +0000
ROA not before: Fri 22 Nov 2024 14:36:50 +0000
ROA not after: Tue 03 Dec 2024 14:36:50 +0000
asID: 62240
IP address blocks: 154.194.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69757 (0x1107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:36:50 2024 GMT
Not After : Dec 3 14:36:50 2024 GMT
Subject: CN=67409706-450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:03:47:ec:c5:2f:5d:bd:d5:56:92:e9:03:
3b:8c:27:b9:91:1e:ee:43:80:2c:cf:ed:5e:73:4b:
c9:11:a3:b2:70:d6:4b:48:13:67:06:a4:60:d5:ac:
3f:5f:de:49:e0:ef:c7:f5:08:15:2f:e4:15:3a:61:
45:f0:6c:e9:fe:ad:13:f4:b4:9f:b2:06:29:3e:89:
02:fd:0e:9a:40:77:ea:fc:50:38:19:70:fb:58:aa:
5e:8f:53:d4:87:52:95:1a:db:e4:c3:b7:97:fb:b7:
12:4d:56:ae:27:08:5e:56:c2:e6:7d:13:43:aa:7e:
0f:f4:59:b4:63:e3:45:0b:18:d8:64:ff:ee:d2:d7:
64:7d:9b:a9:17:34:45:5d:f4:71:da:92:aa:51:1d:
85:b0:38:5c:07:95:37:9b:0d:21:be:ba:f4:36:65:
78:0f:78:78:ef:64:3c:94:83:d8:f4:d5:f9:74:57:
cc:0b:a3:d0:56:18:a0:56:94:91:52:51:66:2a:54:
16:58:d5:43:7c:b1:bb:4d:6d:f5:88:5b:c7:ec:16:
62:e5:9c:26:a8:08:60:d7:dd:92:e2:a7:72:d8:db:
2b:a1:1d:27:2f:e4:31:5b:5a:91:44:2f:67:f7:fc:
a6:a5:88:54:eb:bc:fe:dd:60:6f:e5:0f:9f:10:ef:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:94:8C:AC:8A:59:37:ED:2F:25:EA:20:74:4B:84:2F:7F:05:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37AB0FA8A8DF11EF8BE2C770762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c9:69:68:89:4d:0d:39:43:bc:c1:6b:a7:ee:60:45:6d:c7:
a8:81:dc:a1:59:56:e8:e2:c2:fc:6c:25:ea:6d:94:d0:4a:db:
7d:89:43:6b:17:fe:b9:99:15:a4:cf:a9:a4:97:f1:3b:c5:92:
31:87:73:92:c1:a3:79:db:4c:e6:3e:3e:33:c9:4c:34:5e:9a:
f8:25:ef:ca:b4:d1:c4:02:31:d9:e5:ac:dc:c0:59:05:af:a2:
c0:65:2d:4b:f4:83:79:fb:16:1d:e0:9f:a4:cc:75:b9:d7:ab:
3a:54:fd:fc:f2:8a:02:fb:ab:8a:55:3f:39:85:7e:ab:22:9f:
6e:b5:a0:c1:32:c2:cd:e9:ab:b8:da:f7:57:40:42:6a:a1:c7:
b9:c8:70:74:93:d5:5a:8a:67:1c:95:b0:8d:7b:00:e4:9d:a8:
e6:e2:d8:46:d7:86:cd:c8:cd:02:4b:9f:10:e1:17:e7:ef:de:
2c:d6:ee:7a:1c:c6:b7:b0:b8:15:3e:3f:41:d6:8d:aa:b8:f4:
f2:44:ea:6e:2a:89:ba:7f:c7:5d:b3:d1:47:af:9d:d7:f2:f5:
5d:d2:a7:68:26:0e:af:59:ac:d2:e4:eb:2d:13:ea:81:c9:da:
13:f1:74:5d:de:c2:b7:3a:4f:1b:0a:58:f7:ce:e7:a2:f6:01:
35:f7:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org