Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54DCF91AA72211EF9B16AD82762E951A.roa
File: 54DCF91AA72211EF9B16AD82762E951A.roa (raw, json)
Hash identifier: MFHJauIMiXd+KQ2HCpF0/bitEVUHWts9uDWIysXt3MM=
Subject key identifier: 91:F0:65:23:40:09:D9:17:66:65:F6:51:CE:2D:35:D8:CE:AC:C9:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54DCF91AA72211EF9B16AD82762E951A.roa
Signing time: Wed 20 Nov 2024 09:32:17 +0000
ROA not before: Wed 20 Nov 2024 09:32:13 +0000
ROA not after: Mon 02 Dec 2024 09:32:13 +0000
asID: 39600
IP address blocks: 154.207.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69475 (0x10f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:32:13 2024 GMT
Not After : Dec 2 09:32:13 2024 GMT
Subject: CN=673daca0-e5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:4d:52:a8:f1:6e:c2:70:63:f4:f8:5b:7b:
8f:fa:c4:da:1a:a6:f8:04:4c:59:fc:60:68:eb:eb:
ff:94:31:64:3c:ca:97:4b:8e:b3:c8:0b:60:68:3b:
66:79:52:d0:99:55:23:ef:c2:e9:c9:c7:40:51:d0:
e9:7e:ad:93:b9:c3:fa:3e:ad:b3:00:ce:f0:bd:1f:
a3:51:8e:36:3d:1d:fd:95:1c:d2:79:4b:15:61:36:
85:71:f1:f5:b3:c0:e4:d3:87:b5:cc:ae:2c:20:d3:
e5:ec:ac:b6:e5:1f:0a:c0:6b:d3:b3:05:33:12:2e:
72:be:ab:a1:aa:84:01:c6:83:c3:b0:07:31:1a:d4:
54:f8:e7:4b:c1:b3:56:49:6c:5d:5d:f6:c7:02:4e:
86:7d:ac:ae:67:fd:d6:99:ec:21:99:ab:b8:ba:af:
88:aa:e4:bf:94:0f:79:f3:fa:7f:06:47:4b:96:49:
ec:bb:81:a2:78:46:f7:f1:d7:85:0c:c1:7a:16:0a:
61:b2:ad:9d:e7:01:af:ef:46:09:e1:80:69:cc:b3:
8b:92:b8:87:54:8f:f3:fd:41:80:47:10:dc:bc:c3:
55:61:49:11:c9:02:ae:79:d1:48:4d:30:d5:bd:57:
c7:a3:fa:b3:4a:4d:f0:a4:ad:c6:85:87:60:f2:68:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:65:23:40:09:D9:17:66:65:F6:51:CE:2D:35:D8:CE:AC:C9:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54DCF91AA72211EF9B16AD82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.128.0/21
Signature Algorithm: sha256WithRSAEncryption
68:ef:ee:f8:e7:86:5b:f6:54:d6:a4:a0:41:50:54:5f:1f:35:
a0:99:34:c5:dd:a1:2e:4d:75:84:43:cb:85:74:19:95:62:a0:
08:57:06:70:a4:13:16:80:f7:3b:cd:ef:a4:2a:19:59:49:a0:
75:10:64:15:68:1d:72:0a:03:3d:5e:39:8c:b1:34:01:eb:ee:
9e:72:78:08:f1:53:8b:de:9e:0e:57:69:fa:7e:2b:d6:5b:a5:
b5:94:2b:c7:05:fe:4e:dd:66:35:9d:e9:c3:3e:e2:21:b7:86:
7e:5e:2e:66:b1:2c:b3:6b:69:f0:a2:58:34:a4:81:78:3d:e9:
e3:a1:93:54:15:bb:38:9c:a0:d3:d1:bf:88:86:ae:d9:be:2e:
46:38:26:f2:60:cc:84:72:ac:ca:38:82:22:a2:bf:65:30:86:
3f:1d:06:f0:81:4d:e3:ae:f7:f5:15:8f:f0:72:84:48:a4:ed:
12:89:41:18:30:dd:12:3a:70:fa:69:d7:3c:d7:60:9c:62:97:
c1:ea:e7:b8:7a:94:71:45:0f:03:d1:84:55:a8:81:ce:3c:b7:
06:f5:91:07:7c:07:72:cc:17:db:c5:d7:25:e0:1e:d9:7f:bf:
37:25:98:ae:05:d2:d2:05:82:34:5d:14:5d:e4:c4:41:95:eb:
7b:e2:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org