Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52895C5AA19411EFBF10C693762E951A.roa
File: 52895C5AA19411EFBF10C693762E951A.roa (raw, json)
Hash identifier: EW/ZSa25KgcyFaRMbfKwur8KWiqhGNh8Aelh3WICIdc=
Subject key identifier: BA:4A:9D:30:DC:7A:B1:BB:B0:50:B0:C1:E3:50:77:72:80:F7:8E:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52895C5AA19411EFBF10C693762E951A.roa
Signing time: Wed 13 Nov 2024 07:53:08 +0000
ROA not before: Wed 13 Nov 2024 07:53:05 +0000
ROA not after: Sat 07 Dec 2024 07:53:05 +0000
asID: 138915
IP address blocks: 154.223.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68773 (0x10ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:53:05 2024 GMT
Not After : Dec 7 07:53:05 2024 GMT
Subject: CN=67345ae4-0bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:c3:b2:c1:d9:6b:f0:0e:4c:7a:7d:c9:b2:
9b:35:df:37:f1:9d:cd:10:06:3d:a6:32:72:e8:47:
2f:f6:37:ec:e8:38:32:9e:d3:78:65:59:1a:23:f5:
c7:77:86:a4:99:54:ca:de:73:d3:b3:65:33:b1:da:
22:26:97:85:5b:02:c8:55:7c:77:be:bf:6c:9d:2b:
2a:41:90:ea:58:3b:bc:33:ed:38:83:f2:50:c5:35:
e8:b8:ed:47:21:cc:b8:e7:03:d0:33:73:36:0a:55:
83:c6:4f:76:4a:58:07:8a:49:55:68:48:54:3c:b1:
26:90:78:ae:ad:81:e4:42:09:5c:77:f3:0f:6f:64:
f6:d9:5a:ca:e8:8b:4f:9b:47:87:52:79:24:e0:fb:
1f:94:ef:57:5f:dc:69:5c:60:b8:4a:69:64:4d:ab:
f3:5e:63:ec:03:ae:58:4d:b9:35:46:4e:31:e0:db:
4b:8f:e8:e1:c0:67:c1:37:08:bb:c4:75:3c:6f:4a:
e9:55:a4:29:72:e0:8e:67:06:2f:02:98:2c:bb:18:
2b:03:ba:b7:7b:30:b7:2e:c2:37:83:d5:cb:87:72:
d2:35:de:e4:99:2c:0d:a4:0a:4c:a0:74:09:45:ba:
70:63:16:6e:12:ad:1f:d4:96:2c:97:6c:0a:f6:65:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:9D:30:DC:7A:B1:BB:B0:50:B0:C1:E3:50:77:72:80:F7:8E:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52895C5AA19411EFBF10C693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:2d:ee:b8:fb:55:51:1c:2b:78:47:3e:65:58:ea:1b:ec:b5:
a2:84:4b:4d:d3:99:77:cd:3f:01:36:1a:b6:4c:ee:18:93:d6:
1c:4c:c7:7d:d9:2b:57:26:54:ce:21:1e:34:30:04:5f:37:14:
4c:6b:a3:f7:f7:41:c7:19:47:e0:22:d6:98:90:9e:bb:ef:81:
1b:c5:62:13:5c:25:89:6d:05:27:18:d5:13:ba:09:fd:ee:39:
a7:65:70:f5:41:dc:ff:4e:78:46:ae:b3:c9:1c:54:43:7a:63:
c5:69:38:29:13:12:0c:11:79:77:6f:26:6a:c9:5c:00:a6:7b:
1e:6a:36:02:04:24:43:d2:1c:0c:48:bb:64:36:3a:1f:c2:bd:
02:f8:9a:be:82:11:29:76:b1:49:97:c9:71:8c:78:8a:7c:c1:
61:ee:92:70:28:8f:f2:c1:5a:0f:c9:0e:53:65:6e:58:cc:de:
c0:55:e7:11:00:e7:45:7f:61:e4:c7:19:f1:9f:a5:6b:9f:27:
33:d1:c3:6e:02:3b:49:a7:77:2c:17:48:85:fe:00:85:59:c4:
bf:3b:ca:cb:de:73:d6:23:c9:e9:b6:5f:9c:f0:38:e4:50:78:
b2:1b:08:6c:f5:09:5c:14:06:09:8f:2a:b1:26:54:b6:8e:48:
28:39:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:23 2024 by rpki-client on console-fra.rpki-client.org