Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C752C6976711EF920E1A4D762E951A.roa
File: 48C752C6976711EF920E1A4D762E951A.roa (raw, json)
Hash identifier: HpCG3Q63JsDWovgCuOAFRajchDAMcqb3XdGP5Ws8D7I=
Subject key identifier: 78:33:36:58:70:E9:AD:24:C7:AF:7D:D4:48:3A:69:F8:31:7F:80:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010484
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C752C6976711EF920E1A4D762E951A.roa
Signing time: Thu 31 Oct 2024 09:05:33 +0000
ROA not before: Thu 31 Oct 2024 09:05:29 +0000
ROA not after: Sun 01 Dec 2024 09:05:29 +0000
asID: 54600
IP address blocks: 154.219.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66692 (0x10484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 09:05:29 2024 GMT
Not After : Dec 1 09:05:29 2024 GMT
Subject: CN=6723485d-2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:19:49:cd:d2:0b:2d:85:6e:a5:12:c6:3e:
3c:d4:dc:31:d0:c9:a6:0d:af:f9:d9:83:dc:6b:38:
17:97:84:96:fb:e6:f7:8e:13:01:ef:8d:b4:3d:7f:
d9:d6:fa:a9:5d:11:56:19:18:23:5b:68:96:a0:56:
76:3b:38:6c:53:4f:6d:18:ff:e0:5e:bb:3e:3b:16:
26:85:6b:f4:18:cb:1e:9b:16:c8:f0:fa:aa:6c:98:
10:5c:f6:41:5d:e5:06:4e:22:d7:99:a8:e4:16:3c:
f4:9d:f8:5a:40:d9:29:3c:e3:df:d4:57:1a:73:e5:
e3:6f:73:db:49:a7:96:16:2f:8e:36:60:25:7f:d1:
61:17:f1:20:27:29:e3:23:21:be:4f:49:46:fd:35:
27:df:0f:51:98:8d:0f:84:c2:ce:2b:76:c9:c5:5f:
47:3b:fb:e9:11:b0:9a:b9:8c:f1:23:f4:d7:40:dd:
a2:e8:7f:84:6d:fc:91:e2:7a:7c:f4:11:62:c3:5b:
c7:bf:07:1e:23:71:cd:62:d4:d3:9c:41:fa:b5:b5:
4d:e3:97:64:9b:9e:b6:4d:c4:72:a5:a7:82:2c:8c:
ba:73:1f:89:d9:88:18:46:59:5a:10:33:c2:ab:92:
d1:10:32:8a:64:70:4e:06:e1:8e:c2:6c:d4:2f:93:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:36:58:70:E9:AD:24:C7:AF:7D:D4:48:3A:69:F8:31:7F:80:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C752C6976711EF920E1A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:9f:c2:cf:14:7a:3f:bb:b3:a2:4f:c8:b5:ab:6a:70:01:da:
fb:bb:b6:ff:e1:05:d8:d3:df:c1:23:8e:0d:78:16:1c:7c:7f:
0c:ae:e4:dd:e7:44:0e:20:99:a9:b5:fe:2e:9f:a4:34:e5:f0:
a4:56:82:a2:5c:8c:24:d4:8c:a6:e8:f8:e0:3f:b6:04:53:ca:
13:30:64:9b:61:7a:d5:79:34:3f:3e:4a:ff:5f:f3:9b:5d:89:
14:2e:58:fa:de:5f:e3:5f:d8:28:b4:8d:91:ca:17:81:53:02:
f3:c2:7c:62:ef:20:dc:c9:52:b6:1f:44:c8:88:63:b7:36:91:
22:66:21:eb:93:79:e9:e4:e1:6a:92:5f:db:bf:a8:3d:dc:3d:
ef:88:a2:71:35:05:6f:6a:d2:55:74:5e:b5:94:3b:c4:c1:8d:
94:d4:a0:73:7f:a1:d2:e8:be:6f:f3:ff:20:42:aa:4e:ae:b7:
59:82:44:f1:c7:19:de:bf:11:d8:18:c7:bf:5d:3d:df:f4:ad:
ad:2f:65:b3:a2:0e:6e:da:24:48:ab:6b:3b:02:c3:63:c9:7f:
c2:af:72:14:51:7f:bc:6c:64:10:dd:bc:cc:f0:ca:fd:8e:de:
7d:32:fc:bf:f3:a5:d7:d2:1f:23:7b:0b:f9:0e:22:0b:8f:cc:
3b:73:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:05 2024 by rpki-client on console-fra.rpki-client.org