Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45CDB22E92DD11EFBEBB50A7762E951A.roa
File: 45CDB22E92DD11EFBEBB50A7762E951A.roa (raw, json)
Hash identifier: 2W3QLhPxyY1wqaHn19JwgTBhLc+qWiid/wyQF1ywxqA=
Subject key identifier: 3F:C5:35:C8:6C:ED:B6:32:9F:1E:5A:F3:6B:5E:C8:7C:94:0D:27:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01022C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45CDB22E92DD11EFBEBB50A7762E951A.roa
Signing time: Fri 25 Oct 2024 14:27:33 +0000
ROA not before: Fri 25 Oct 2024 14:27:29 +0000
ROA not after: Sun 01 Dec 2024 14:27:29 +0000
asID: 44559
IP address blocks: 154.209.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66092 (0x1022c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:27:29 2024 GMT
Not After : Dec 1 14:27:29 2024 GMT
Subject: CN=671baad5-8b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:27:40:e8:b1:ba:db:33:c0:1b:e5:a2:5d:
b4:59:6c:2d:f9:d8:05:fd:32:eb:03:39:60:bc:7c:
92:39:d1:4a:54:9b:67:63:97:36:5c:ca:30:f0:ac:
39:f2:9e:a4:29:b5:3c:a4:aa:54:92:c4:70:4c:d3:
bc:7b:d1:16:d5:60:97:2e:f5:95:69:2f:17:29:4e:
3e:a1:6c:ae:e5:de:f4:f2:9c:14:ca:ac:7a:23:e4:
02:c5:46:c5:23:a5:e4:56:75:4e:1d:67:47:41:13:
4d:73:a4:7d:b0:0d:88:b9:f8:24:01:08:fc:0d:d3:
d5:8f:c3:38:70:37:87:8b:1d:54:c4:21:9d:f6:ac:
6b:24:78:68:e6:75:08:d4:1d:59:62:88:ec:5d:43:
78:43:86:97:2e:04:4a:d7:6f:07:03:25:b5:60:ea:
ac:44:33:9c:c9:21:05:b5:29:a8:cb:1a:e4:8f:2c:
9d:2f:b1:4e:5b:96:44:05:40:a8:11:96:0b:9a:8b:
0b:b4:34:34:f8:00:d7:ae:74:23:48:5d:d6:51:24:
4b:3b:7c:d2:25:c0:e9:c7:5b:d1:b9:6f:08:e2:b0:
9f:11:cd:7f:24:7e:74:43:f5:68:24:d3:5e:d4:51:
1c:c8:1d:3f:5d:34:ec:2e:d6:0f:d6:4d:80:bd:7e:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:35:C8:6C:ED:B6:32:9F:1E:5A:F3:6B:5E:C8:7C:94:0D:27:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45CDB22E92DD11EFBEBB50A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/21
Signature Algorithm: sha256WithRSAEncryption
72:1f:cb:7d:f9:2c:72:5c:30:53:b0:8e:34:28:59:56:4f:a1:
12:88:fb:d0:48:89:24:75:14:73:fe:cd:ff:01:a9:e5:cc:ef:
ad:82:e4:5f:d1:74:0b:a7:b1:cc:71:1f:b3:a5:79:66:a0:c4:
17:71:09:8a:ad:50:91:18:bd:89:c8:98:35:6b:ba:20:6b:d2:
58:82:0c:03:e7:b2:53:30:ac:84:e5:8f:21:7c:3d:99:fd:88:
d9:02:d6:bf:3d:23:22:23:c9:1f:a0:72:06:46:dc:e6:1e:66:
3b:12:8b:82:09:5c:6e:d7:c2:8a:60:76:00:fa:dc:88:a4:0c:
bf:cc:82:f5:b6:f6:18:a9:54:94:73:85:bd:4c:04:de:12:80:
52:60:ed:27:df:f7:e4:66:82:4b:0e:e7:54:cb:4c:c4:53:45:
94:38:ff:64:e4:71:46:b9:4e:4e:7f:3a:8b:7c:56:0b:8f:3b:
68:93:08:e5:f2:4f:93:15:d7:a5:16:6c:b9:a5:0e:45:90:b3:
be:02:43:e9:d1:0b:7c:8f:76:ee:53:f4:bf:2d:7d:c1:8c:2c:
cd:42:a2:03:42:68:2c:b3:ef:32:b4:58:fc:ed:a3:9a:52:3b:
a1:5d:0b:8a:24:3e:7f:44:1f:a7:cf:27:c2:f2:80:7e:bb:f8:
1e:f6:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:05 2024 by rpki-client on console-fra.rpki-client.org