Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A94B64A4CF11EFBFF5796D762E951A.roa
File: 50A94B64A4CF11EFBFF5796D762E951A.roa (raw, json)
Hash identifier: 6UUfxWtPxxWR6dR8oA1p6vUZ6NOg5lTWh98MBzfKGSQ=
Subject key identifier: BC:87:F8:49:FE:48:DD:29:35:72:0A:CE:46:A5:CC:0B:2D:29:CE:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A94B64A4CF11EFBFF5796D762E951A.roa
Signing time: Sun 17 Nov 2024 10:32:59 +0000
ROA not before: Sun 17 Nov 2024 10:32:55 +0000
ROA not after: Mon 25 Nov 2024 10:32:55 +0000
asID: 9009
IP address blocks: 154.95.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69288 (0x10ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:32:55 2024 GMT
Not After : Nov 25 10:32:55 2024 GMT
Subject: CN=6739c65b-5d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:d9:41:c9:b5:64:19:af:f6:ae:a3:3c:5e:
47:f7:d8:c9:14:e4:92:8c:c5:8f:7e:03:f9:07:55:
ed:42:85:42:27:3f:5a:9e:93:a6:e9:ae:ef:88:e6:
53:c8:04:79:d3:c7:67:7d:3b:46:0d:09:9a:d2:0b:
37:14:b4:bc:5f:ff:d9:00:87:1b:e1:d5:86:1d:04:
60:92:8c:d7:e0:8e:de:27:e6:cd:96:0e:f6:53:5b:
61:6f:a7:6f:e9:55:46:65:76:f8:48:fc:8c:30:f4:
8d:2c:c8:b8:eb:a5:54:08:95:a6:28:4d:e9:15:6c:
17:7f:79:05:42:44:43:8d:34:2d:fd:82:e4:ee:4e:
e5:a0:78:a0:65:2d:fd:9a:b0:28:f3:9b:79:05:64:
bd:c5:1e:cd:4e:9d:f1:3d:47:2c:b8:c7:00:93:a1:
be:bc:c7:c4:d8:49:14:06:c5:72:84:80:58:c8:b6:
7e:d5:24:75:cb:c3:db:3e:12:13:23:d2:d3:45:4a:
57:a4:41:ab:85:a5:25:cf:12:b2:73:4c:6b:ed:db:
6a:24:c6:13:3b:c4:d3:29:81:89:54:33:5b:ba:9b:
00:4f:e3:f8:d6:e1:23:8e:ee:34:a2:9d:97:de:3b:
e1:10:88:66:6f:f2:28:6f:a8:11:ac:9c:54:02:73:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:F8:49:FE:48:DD:29:35:72:0A:CE:46:A5:CC:0B:2D:29:CE:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50A94B64A4CF11EFBFF5796D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:f6:5a:c4:ec:39:20:b8:6d:27:5c:2a:eb:31:fc:69:30:a4:
8a:82:34:c7:5b:43:fb:73:44:13:ef:34:31:a4:e9:89:dd:4c:
bf:27:05:34:95:b7:ee:86:1f:8c:06:a6:9d:04:88:8e:ba:a8:
0b:18:89:fb:ae:df:cd:ff:01:e9:1a:19:c3:b9:f2:d5:18:2f:
1e:fc:c7:75:65:a6:97:c7:31:04:37:c1:e1:9b:2f:94:6b:3f:
5c:28:c1:87:ad:29:98:d1:17:84:d2:30:7c:ae:ad:4f:e5:2e:
89:3c:88:7d:c9:e7:ec:e9:39:50:4c:1b:1b:12:63:b5:3c:ea:
98:fd:29:2b:19:90:02:66:48:e0:dd:07:0a:34:2d:b0:67:0f:
a1:a3:d6:07:76:5a:34:ee:4b:32:ff:66:ea:d7:ef:61:8d:8a:
8d:61:e8:02:d5:4c:68:ed:41:0a:60:b5:16:fe:f7:6b:2a:79:
22:37:27:a3:03:75:9d:16:46:10:18:94:55:a6:9b:ad:51:be:
16:1c:1c:33:24:2f:c2:53:af:61:4c:32:b0:26:43:46:da:28:
dd:23:23:4b:1c:a1:4d:61:59:4a:73:7a:8e:95:fc:26:4e:fc:
4f:64:16:d0:d5:70:6d:5f:d2:02:d2:f6:03:c1:c9:c5:41:ef:
53:43:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:46 2024 by rpki-client on console-fra.rpki-client.org