Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5515001292B411EFBAE04CAA762E951A.roa
File: 5515001292B411EFBAE04CAA762E951A.roa (raw, json)
Hash identifier: jHROKaw+Tc7VauCN4KYPgL8Oqd4lv7AyKKA1O6xMIYo=
Subject key identifier: 82:D8:C1:41:F2:97:34:E6:B6:50:E0:A0:87:13:AE:07:77:C2:0D:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5515001292B411EFBAE04CAA762E951A.roa
Signing time: Fri 25 Oct 2024 09:34:29 +0000
ROA not before: Fri 25 Oct 2024 09:34:25 +0000
ROA not after: Thu 28 Nov 2024 09:34:25 +0000
asID: 149440
IP address blocks: 154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66026 (0x101ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:34:25 2024 GMT
Not After : Nov 28 09:34:25 2024 GMT
Subject: CN=671b6625-482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:47:85:b5:3f:60:91:5d:cb:d8:83:9d:3b:
6e:9d:82:24:75:0d:d4:70:55:b6:ef:67:57:ef:d0:
87:59:36:59:7e:a2:1d:ab:d0:91:6c:60:63:4a:c6:
2b:15:a7:c1:39:1e:2b:5c:79:27:7d:31:06:44:8a:
95:98:30:dc:c6:3c:81:1d:d0:7e:bb:50:93:65:44:
fa:76:7f:2d:22:d2:ef:fb:e5:43:dc:d3:ed:2c:52:
47:a7:3e:b7:73:4e:e7:f4:50:db:3c:5d:53:81:b2:
27:29:31:9a:63:68:02:39:0d:04:ef:13:d6:bf:a4:
61:47:bd:40:3f:4c:8f:dd:d3:64:51:b2:ef:6b:e6:
29:a1:b8:a2:39:3e:89:dd:cd:80:b4:fd:dd:a7:b3:
71:e9:e5:11:e3:41:fd:25:99:7a:68:3e:d3:24:1c:
62:b4:40:5e:c0:34:72:2f:a7:c5:e9:cc:48:fa:fc:
51:42:92:2e:59:c1:6b:75:9c:53:71:63:51:a6:31:
ca:47:06:d8:c1:c6:be:34:7b:32:cf:cb:d6:7e:d8:
ce:3a:71:69:20:0c:05:89:f0:35:86:6c:f4:23:5c:
24:43:57:e4:63:77:80:e9:07:83:98:57:64:24:a1:
9b:52:b3:ea:88:40:85:77:8f:31:59:da:3d:8f:44:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:C1:41:F2:97:34:E6:B6:50:E0:A0:87:13:AE:07:77:C2:0D:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5515001292B411EFBAE04CAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5b:32:34:87:66:d8:f9:58:84:2f:32:82:f7:33:ff:25:24:
50:be:f8:b7:03:c4:f9:3d:98:16:31:c0:aa:aa:19:48:db:10:
2b:70:a8:62:79:19:49:da:fd:69:15:75:da:44:a3:ed:e0:50:
88:aa:a5:3d:b0:34:28:76:58:17:97:10:8d:c1:9c:72:64:3b:
33:6f:ee:7e:f3:e0:df:81:e2:ee:73:c2:90:7e:d9:23:18:59:
7d:6a:8a:2d:02:be:0e:67:90:63:37:cb:dd:6c:08:17:4c:76:
0a:25:eb:02:26:d0:d4:b5:ff:ab:f6:a0:18:5d:d9:0b:d0:78:
e3:d2:01:c0:fb:5d:62:e7:e3:9d:b6:d9:47:f6:e1:98:12:bd:
00:dc:32:83:05:d0:26:62:0a:84:bb:c6:8a:b8:b8:87:ad:5e:
3e:95:06:e3:8f:24:34:a9:00:5f:5d:0d:66:04:7c:c2:26:6a:
f1:2a:5d:80:6d:f5:5d:67:53:39:7e:c0:c4:e7:c0:f1:95:e6:
b9:02:8a:a2:ef:af:16:57:7c:c4:4d:37:79:54:ea:5c:d5:7b:
22:ff:9e:f4:27:7b:c9:e2:2f:d0:8a:98:55:6f:8d:6c:01:a1:
0a:6a:f3:72:ee:d1:c5:df:0e:73:77:a4:6b:46:83:da:2d:9c:
e6:cc:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:30 2024 by rpki-client on console-fra.rpki-client.org