Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3927DDA0A4D111EF9F4B6E78762E951A.roa
File: 3927DDA0A4D111EF9F4B6E78762E951A.roa (raw, json)
Hash identifier: I/mYHd0XXSnJNkQc7JICpjHh2zLeYD/Vhi+1RP7ujHc=
Subject key identifier: A9:8C:82:84:D3:A6:55:39:BB:53:64:72:94:A7:66:6B:78:12:85:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3927DDA0A4D111EF9F4B6E78762E951A.roa
Signing time: Sun 17 Nov 2024 10:46:39 +0000
ROA not before: Sun 17 Nov 2024 10:46:35 +0000
ROA not after: Mon 25 Nov 2024 10:46:35 +0000
asID: 9009
IP address blocks: 154.92.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69306 (0x10eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:46:35 2024 GMT
Not After : Nov 25 10:46:35 2024 GMT
Subject: CN=6739c98e-25c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:c7:f9:c9:49:e3:aa:e9:5a:81:53:f2:5f:
c3:47:4c:03:54:e7:d1:8a:80:f3:99:8e:99:da:1e:
e8:1b:36:9f:ed:07:9e:87:e6:54:58:ea:3c:d7:39:
76:d0:84:5d:77:d5:4d:e4:fb:c8:27:3a:06:d2:a3:
57:f4:13:62:80:39:43:e8:67:71:1a:62:d2:05:5d:
bf:85:85:5b:c3:61:ec:a1:f2:af:93:37:66:51:a7:
f2:4b:fd:72:99:f1:54:b6:9f:7c:78:34:24:27:35:
b9:ad:88:ec:ab:90:e7:62:b3:6a:c7:ff:b8:6e:6c:
0e:a3:1d:47:fa:db:b9:a0:21:2b:e3:ad:0b:0b:ca:
71:24:35:5c:84:4d:95:f6:c3:c3:32:e3:3c:96:1d:
ed:e2:24:03:67:13:81:24:e4:9f:4d:1b:63:2b:e3:
f5:b2:87:e2:93:16:c0:ac:d3:de:5b:3f:78:54:c4:
e3:62:3e:ca:4b:11:2b:db:ce:a4:8a:a0:b4:5a:57:
3e:da:20:63:aa:e0:70:43:ae:68:5f:f9:cb:40:45:
cb:3c:16:ec:bf:b6:49:22:0e:4f:0e:b9:7a:d5:8b:
aa:1c:f6:4e:30:cb:de:f3:e8:32:19:cf:58:f3:d7:
a8:2f:96:95:04:23:95:c4:80:63:17:c6:f6:2a:d4:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:82:84:D3:A6:55:39:BB:53:64:72:94:A7:66:6B:78:12:85:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3927DDA0A4D111EF9F4B6E78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.123.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2c:5d:b0:a1:4e:13:c7:40:6a:27:da:5e:05:0a:78:27:14:
58:0b:74:be:d8:30:bb:7b:91:ee:14:7c:80:4a:34:69:8f:75:
5a:27:ed:91:b9:68:c0:a0:3f:fc:e8:29:c7:a6:09:ae:e9:d0:
e7:1d:43:92:01:5b:77:68:83:17:4c:6a:0c:66:b2:45:fe:9a:
b8:b1:67:90:ba:d7:36:f5:95:09:aa:11:a5:2b:1a:87:7e:3c:
cc:6a:2b:35:09:ec:86:fb:a3:c6:02:39:28:d7:71:9e:48:fc:
c3:61:9c:d0:32:a5:2c:0b:bd:a6:fc:6c:59:de:09:99:26:16:
76:6e:41:e8:81:2f:b7:01:f4:7f:8e:b9:79:29:b6:34:f9:7b:
8f:76:ff:37:6b:ff:43:6e:78:16:6d:90:be:33:ee:e1:b6:31:
ae:7d:76:07:03:fe:19:48:d6:3d:c3:bd:cc:ea:47:40:ce:7e:
05:41:0f:bb:43:0d:ce:7c:f3:62:1d:66:d8:bc:f2:98:6e:61:
65:48:bc:44:e7:01:9e:1d:fb:b8:4b:86:bf:06:be:8a:4e:4e:
15:14:07:75:b3:35:29:40:d6:2b:c3:ce:db:00:80:7a:2d:15:
e1:dd:5c:c9:ae:44:cf:95:63:f1:13:b8:16:56:cb:91:f6:0b:
d1:8d:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:43 2024 by rpki-client on console-fra.rpki-client.org