Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49C9269AA43C11EF93980249762E951A.roa
File: 49C9269AA43C11EF93980249762E951A.roa (raw, json)
Hash identifier: ie7UhKF+pyg7oMSilx9KkYN48gRCKMpAcf/63psQWtI=
Subject key identifier: B6:0D:AC:8F:2A:5D:38:E9:D0:CF:D8:DC:2F:29:B2:19:D5:4F:08:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49C9269AA43C11EF93980249762E951A.roa
Signing time: Sat 16 Nov 2024 17:00:31 +0000
ROA not before: Sat 16 Nov 2024 17:00:27 +0000
ROA not after: Wed 18 Dec 2024 17:00:27 +0000
asID: 328608
IP address blocks: 154.214.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69031 (0x10da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:00:27 2024 GMT
Not After : Dec 18 17:00:27 2024 GMT
Subject: CN=6738cfaf-bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:20:b8:1a:18:4e:84:5d:05:24:7b:48:0e:
21:37:f5:46:24:00:4b:8c:d8:f1:16:1e:32:56:75:
30:9a:35:b5:91:1a:0b:b8:8d:77:49:21:1c:18:b7:
09:cc:f2:8d:be:db:7a:b1:45:b1:84:2a:5f:99:ee:
ae:48:27:53:c3:e6:83:12:56:84:d5:7e:be:7e:df:
ba:b1:70:9b:15:b7:82:19:89:47:0e:ba:5b:16:f8:
b5:87:cb:f5:ad:06:a6:b7:70:30:44:14:5f:08:c8:
82:a8:9a:4f:87:9f:64:08:cc:30:d9:72:b2:b7:fa:
51:ef:38:fc:46:f8:36:09:81:f0:06:eb:91:0a:80:
46:75:5d:e7:0d:07:99:21:e1:26:fb:59:1f:df:7d:
e9:80:32:86:45:aa:d5:55:75:a1:b3:dc:1b:37:23:
93:50:80:0d:01:37:4b:4a:bc:aa:e8:ca:78:a6:c2:
c4:37:f5:c8:88:7c:c9:70:1c:34:25:66:df:c2:56:
56:48:e8:be:8b:10:a1:d9:ab:90:6b:1c:3e:ab:29:
39:c5:92:7b:e6:a7:a2:65:87:f6:36:d0:44:09:24:
e7:21:04:f1:94:9f:81:01:89:64:9c:97:0c:87:e0:
cb:ef:31:cd:8b:60:c8:8a:bc:fd:16:3a:e8:62:58:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:AC:8F:2A:5D:38:E9:D0:CF:D8:DC:2F:29:B2:19:D5:4F:08:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49C9269AA43C11EF93980249762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:e3:ca:48:49:4a:46:b8:00:1e:0c:d6:77:33:7a:a2:41:ad:
40:6e:e7:3f:57:81:c0:4b:d3:34:71:06:d2:27:37:f0:be:88:
f9:fa:66:f3:89:a5:9d:1f:c3:5c:84:1f:62:f8:db:4d:c1:d1:
f7:71:fa:47:08:e9:59:30:f1:d5:79:87:71:c7:33:05:1b:fa:
97:a8:7e:53:73:b4:33:f3:cc:72:d9:7f:d2:00:33:11:bc:79:
03:b7:a5:47:7f:56:ee:5b:36:59:4d:55:10:95:46:0f:8f:00:
b4:18:a2:0c:00:be:c1:a0:24:c5:bf:82:28:30:ea:6d:14:00:
07:fa:53:93:93:05:da:c0:b4:64:eb:fc:31:c6:1e:45:4a:60:
de:2d:e6:54:c3:6b:58:2e:40:b3:ab:1e:9e:84:bc:8c:8a:9c:
5f:fb:56:bd:92:38:bf:5f:e5:78:07:fa:6f:96:17:aa:c5:80:
91:c5:d1:e8:f5:ca:8f:f2:a9:13:9f:a3:db:c2:77:19:4f:86:
aa:b4:f4:c9:7b:b7:b8:8f:e5:e8:a9:c6:36:9d:a9:64:91:21:
3a:62:ae:2a:4b:d4:9b:ca:35:c0:e2:9d:52:80:b6:43:b2:e0:
0c:02:48:25:ef:ca:21:ca:36:14:26:d8:0d:a1:d4:18:e2:bb:
6d:a8:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:05 2024 by rpki-client on console-fra.rpki-client.org