Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E93145092DC11EF813BE1A2762E951A.roa
File: 3E93145092DC11EF813BE1A2762E951A.roa (raw, json)
Hash identifier: viIr03UWnqOnnbEwXtz/jqUlTh5+0krlH8rSO8tIAQw=
Subject key identifier: 50:9B:71:B1:B2:05:0C:EF:BF:B2:6D:4F:F1:48:B2:B4:72:AB:AE:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010220
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E93145092DC11EF813BE1A2762E951A.roa
Signing time: Fri 25 Oct 2024 14:20:11 +0000
ROA not before: Fri 25 Oct 2024 14:20:07 +0000
ROA not after: Sun 01 Dec 2024 14:20:07 +0000
asID: 44559
IP address blocks: 154.209.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66080 (0x10220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:20:07 2024 GMT
Not After : Dec 1 14:20:07 2024 GMT
Subject: CN=671ba91b-6573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:f6:16:61:71:bf:42:07:e5:cd:7c:94:a4:
4c:4d:bf:c6:26:c2:d2:a7:80:79:27:97:5a:8a:11:
2d:96:94:3b:64:bd:26:28:9e:f8:3d:2f:9a:58:4d:
0a:80:5f:7a:ac:e7:87:ff:06:fa:15:4e:82:3e:85:
97:a9:9d:13:32:75:72:9d:12:3c:39:96:da:a0:1e:
00:5a:68:ba:42:fd:4c:dd:e6:85:03:be:0f:44:81:
d8:fa:75:ad:95:33:9a:a3:9c:e6:e0:b7:36:7a:15:
ff:be:f9:22:e2:db:7a:30:b6:d2:a0:c8:4e:ab:66:
a7:8d:1e:3a:9e:6c:74:b3:30:97:12:da:dd:4b:f1:
cc:89:76:08:ea:46:07:ee:f9:96:d3:88:48:2a:df:
2c:4a:08:76:2a:47:44:cf:1b:64:0c:80:84:03:87:
ef:3e:00:11:47:48:b9:c0:c5:f0:2c:5f:66:7d:97:
80:ac:7b:79:d0:db:98:5a:71:33:8b:69:79:4d:a8:
dc:0c:dd:c2:1e:75:3b:ef:0a:57:39:c0:0c:f8:5b:
ec:9a:7b:ec:5b:0e:40:b7:1c:32:b6:6c:90:3e:13:
20:5c:d2:f8:b6:e1:76:1e:0f:dc:3b:3a:82:04:88:
2b:80:2f:d9:39:99:92:1b:c4:26:94:19:87:c6:a5:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:71:B1:B2:05:0C:EF:BF:B2:6D:4F:F1:48:B2:B4:72:AB:AE:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E93145092DC11EF813BE1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:47:15:b7:9e:01:31:55:06:63:84:46:bc:58:2f:96:47:e1:
a6:80:98:af:61:d5:74:79:b6:6c:75:15:e4:5e:63:d5:65:77:
46:74:4a:24:9f:2c:c8:22:d2:d4:98:e1:27:45:63:c5:bd:33:
89:e4:29:56:c7:36:d1:11:27:7b:fc:3b:30:0c:31:fa:f0:bb:
43:5e:c5:99:39:74:39:57:5f:de:b3:e6:1b:c4:ce:3e:ea:ff:
ef:53:8d:7d:fb:9a:6e:e3:ba:fe:0e:3b:b5:3e:0d:22:ad:9a:
a4:de:a4:a1:85:30:72:ee:e1:91:51:24:2a:bb:c0:31:4c:12:
20:23:82:60:45:f2:4a:c2:cf:80:51:81:97:b9:cb:70:29:37:
7f:8a:59:0d:cd:f1:a3:1c:c6:e4:a2:57:77:cb:5b:2c:96:c7:
82:45:08:2d:62:f2:89:63:da:c7:fb:1c:42:fa:e0:e1:4e:a8:
78:a5:f7:c4:c7:99:62:15:5b:10:d3:6f:31:a7:76:a0:3d:fd:
cb:24:3f:64:df:bd:5b:de:ef:18:75:fe:f5:2f:7f:7a:32:d4:
0b:25:4f:32:ef:00:3d:ee:0e:4f:92:ec:a1:87:7f:41:cd:6b:
23:bd:c4:d7:7a:b8:b6:43:76:43:f2:10:09:60:a9:ba:0c:20:
88:39:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org