Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B0FA84A33111EF999AD047762E951A.roa
File: 37B0FA84A33111EF999AD047762E951A.roa (raw, json)
Hash identifier: ajX4eapNPo2tsbtql4YgkQl4hbG1jqHXtpWXYa60DNE=
Subject key identifier: 93:C2:30:7E:39:3B:20:DA:E2:7C:C6:9D:19:25:9F:2D:85:98:4B:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B0FA84A33111EF999AD047762E951A.roa
Signing time: Fri 15 Nov 2024 09:08:45 +0000
ROA not before: Fri 15 Nov 2024 09:08:42 +0000
ROA not after: Sun 12 Jul 2026 09:08:42 +0000
asID: 55967
IP address blocks: 154.85.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68978 (0x10d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:08:42 2024 GMT
Not After : Jul 12 09:08:42 2026 GMT
Subject: CN=67370f9d-5165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:57:d8:1b:fd:d5:13:92:85:b3:3b:2c:81:
e6:af:fd:41:0c:ca:20:8a:a8:c1:02:0c:21:76:54:
3a:2e:0a:8e:8e:93:60:d8:4e:e9:09:aa:c8:49:83:
0c:69:ca:34:19:08:91:05:75:76:dd:46:4e:d2:7b:
6f:37:19:13:08:63:9b:d6:63:82:34:c6:bc:47:6c:
ee:32:0d:dc:3c:0f:c5:eb:e4:97:a9:54:96:a7:78:
71:9c:0c:3f:ed:26:4f:f8:24:7b:f5:d3:f6:65:4a:
10:55:87:59:b3:ec:c0:fd:4b:c3:c1:27:1a:49:6e:
62:4d:8a:36:20:64:aa:22:e2:03:c9:5f:cc:69:78:
36:bd:ef:b7:4c:f0:1f:01:70:2b:d8:c1:d8:fa:4e:
16:a9:da:99:08:3f:4c:db:ec:34:f4:a9:8c:ba:fb:
87:2d:d1:71:e4:73:4d:20:60:cf:c5:ea:cb:aa:7c:
38:e2:c4:3b:42:83:54:79:0e:9d:ea:05:4e:a1:84:
17:46:cf:5b:6e:17:87:cd:19:e9:d0:e9:4c:5a:73:
8c:e2:35:57:e6:b0:88:36:fa:0f:36:25:60:72:82:
30:34:0e:9b:ca:61:16:46:6e:59:27:53:45:5b:72:
21:2b:d0:75:5e:64:ec:be:ca:e6:8b:39:04:19:d4:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:30:7E:39:3B:20:DA:E2:7C:C6:9D:19:25:9F:2D:85:98:4B:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37B0FA84A33111EF999AD047762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.40.0/22
Signature Algorithm: sha256WithRSAEncryption
52:75:2e:59:36:a1:14:37:f0:2f:96:09:3e:49:9b:6a:d6:0e:
e8:91:d8:ea:13:9a:01:c5:73:85:72:0a:d0:8f:11:b2:63:af:
5a:a7:69:9c:db:fe:84:2f:16:41:7c:24:d3:fc:01:60:4c:f5:
fd:68:13:aa:36:6d:34:b4:54:15:13:5c:71:1b:c9:ff:93:5a:
75:c5:56:2a:d0:b9:e4:46:6f:66:18:2c:5f:e2:ca:18:f5:51:
b9:88:50:37:48:9a:65:b3:3a:77:40:5e:bd:87:0b:7f:df:24:
e0:25:9f:05:eb:17:b3:e0:15:b0:a6:f8:f4:d5:0e:a4:a6:b8:
7b:15:9e:d9:f7:79:57:e2:2c:e1:5f:0e:b1:82:9a:ca:56:6c:
52:16:6e:51:fe:42:1a:c1:08:62:22:ac:bd:16:a9:35:6e:4e:
68:be:a3:f3:a4:84:1d:93:59:77:61:e9:2b:aa:5e:ca:ea:7e:
35:5f:62:ff:cb:1e:4e:45:36:f0:1d:41:e9:92:ce:a1:6b:18:
f7:da:ae:7d:14:11:29:f0:ce:9a:5c:65:87:01:1c:66:f6:47:
a2:ce:9c:56:ef:22:08:46:e0:f9:d0:64:df:ab:3b:7f:20:ed:
5f:14:73:b9:e7:0e:67:78:99:5b:d3:b7:06:93:7b:2c:4d:11:
cc:17:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:04 2024 by rpki-client on console-ams.rpki-client.org