Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EE0FF4A0CA11EFB4BEFA70762E951A.roa
File: 51EE0FF4A0CA11EFB4BEFA70762E951A.roa (raw, json)
Hash identifier: YUYDWtXilgQmhWge7s4ExlzcKVZxyxvYinz7s5xgrO8=
Subject key identifier: 7C:01:84:6D:D9:B7:D8:F8:06:B8:9A:32:22:7E:E3:F4:9E:D0:D9:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EE0FF4A0CA11EFB4BEFA70762E951A.roa
Signing time: Tue 12 Nov 2024 07:47:09 +0000
ROA not before: Tue 12 Nov 2024 07:47:05 +0000
ROA not after: Mon 30 Dec 2024 07:47:05 +0000
asID: 138915
IP address blocks: 154.93.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68600 (0x10bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 07:47:05 2024 GMT
Not After : Dec 30 07:47:05 2024 GMT
Subject: CN=673307fd-b1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:19:c6:27:4d:d0:f8:86:f9:ba:5e:bb:ac:
3b:fe:db:e9:2e:35:1a:d9:6e:87:da:6b:5b:ee:4c:
ed:06:1f:d2:ce:8e:71:0c:fe:43:ea:40:41:50:04:
15:23:4d:35:d4:95:cb:30:70:ce:24:74:5f:c0:48:
1b:8c:26:07:2b:f9:42:ca:4a:9d:82:41:3b:2f:34:
da:b6:1a:2a:a2:09:f6:3e:25:53:d3:b6:51:98:af:
76:34:cc:37:53:c7:8a:75:1e:cb:02:ac:5e:fc:4a:
a8:22:d8:19:61:b7:05:68:69:5b:5a:b3:53:ca:0d:
dd:96:c9:39:e6:1a:a0:f9:b2:36:13:e1:d1:d9:a8:
04:e1:4e:10:d7:42:3c:39:20:32:fc:30:c8:5c:67:
54:bd:07:e0:2e:5d:56:a4:21:24:21:20:99:78:9d:
7a:c5:19:f3:7d:37:07:cf:95:d6:24:f1:a8:59:ae:
f7:0f:50:2f:40:a7:ea:7a:23:a4:e4:5d:a8:cb:38:
24:7d:3e:d4:72:b1:ad:e6:96:d4:2d:73:1e:2b:50:
4f:d9:98:f5:83:0e:ea:23:a3:03:e0:85:53:35:a4:
2a:9c:58:64:d1:66:60:b7:09:cd:b6:e4:2f:c2:82:
87:f5:c5:d7:de:74:3b:23:df:dc:db:16:2b:70:84:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:84:6D:D9:B7:D8:F8:06:B8:9A:32:22:7E:E3:F4:9E:D0:D9:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51EE0FF4A0CA11EFB4BEFA70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bd:fe:65:3d:e3:3a:5c:26:81:a1:bd:44:4f:21:fa:1c:7e:
22:70:c7:38:55:65:81:e1:0e:b0:b8:00:94:c7:4a:12:28:7a:
72:c3:b4:50:96:6b:38:1f:ad:11:4b:15:dc:b3:ff:74:1c:e8:
17:3b:bd:94:b0:ce:8e:e5:0c:bf:e4:d6:e4:19:82:97:5e:b5:
66:75:ab:3a:c4:23:a1:62:53:2a:ff:33:1c:c3:6c:1f:6d:bd:
e1:fc:6e:74:27:73:5b:95:bf:c5:69:8b:d9:6c:1f:44:ff:62:
bc:cf:07:c5:23:14:b8:12:63:64:d3:73:ef:61:15:2c:72:14:
d0:9b:e0:7f:ab:d8:fe:2b:2d:8d:53:26:a4:90:95:5d:6e:54:
67:39:d0:24:43:af:82:77:b1:c9:40:18:f1:ac:98:dd:4b:b5:
91:d3:7d:44:28:8c:c4:03:b8:52:9e:c7:b3:b3:4e:e7:6a:0a:
aa:70:ea:18:61:0c:43:ba:f5:9d:74:89:92:c2:ad:96:9d:59:
5b:bd:af:ce:99:5e:5e:11:78:02:dd:40:6a:57:45:b9:17:76:
3a:2c:96:ed:d7:8a:dd:79:29:1e:29:39:1d:ab:7f:ed:17:a4:
20:51:ee:70:62:b8:c0:11:61:45:b6:c3:7a:82:2b:57:e5:1f:
8e:db:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:10 2024 by rpki-client on console-ams.rpki-client.org