Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558234A69C1A11EFB8451072762E951A.roa
File: 558234A69C1A11EFB8451072762E951A.roa (raw, json)
Hash identifier: wPex9xB1Ek/ctkt3JFfHK6vWCf9IHyH5pbG5Og0Pf3E=
Subject key identifier: 68:B2:4D:05:08:52:5D:AD:16:05:BD:8E:8C:AC:48:A7:70:99:95:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558234A69C1A11EFB8451072762E951A.roa
Signing time: Wed 06 Nov 2024 08:37:19 +0000
ROA not before: Wed 06 Nov 2024 08:37:15 +0000
ROA not after: Mon 30 Dec 2024 08:37:15 +0000
asID: 136907
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67668 (0x10854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:37:15 2024 GMT
Not After : Dec 30 08:37:15 2024 GMT
Subject: CN=672b2abf-801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:c3:7c:2f:cb:80:79:b1:38:0f:b1:25:d1:
f4:2d:16:54:82:b3:ef:ee:5c:a8:c5:e2:b9:ac:25:
0e:98:6a:80:d4:81:3c:d7:29:58:5c:ea:f7:a8:74:
98:53:32:4e:79:07:89:bd:84:88:02:9a:01:a1:e9:
6b:5b:86:02:5e:ba:a6:1b:a1:c2:d4:88:6a:97:3f:
f1:ee:06:94:63:74:ea:82:92:1e:3a:5f:16:41:dc:
74:b0:99:3b:e3:a3:27:a0:ab:80:70:5a:7a:9a:1a:
fc:f9:3a:62:94:4f:cf:bf:1c:c0:1c:20:b7:c2:4d:
96:0e:a9:9f:b7:a9:53:0c:6a:0b:d4:0a:84:0e:9d:
a9:a9:bb:bc:f5:fb:69:11:92:b6:ee:1f:9d:7d:72:
b0:a4:98:d4:dc:55:74:eb:a8:c7:82:8f:e0:de:89:
01:93:0d:a4:d7:e7:37:56:b6:40:aa:fb:d1:14:23:
3d:99:fc:de:cb:0a:a9:e6:97:8b:8a:57:87:46:5f:
78:17:6d:8c:3b:4e:9f:21:15:55:5f:6e:19:fb:71:
c9:c5:50:81:85:32:91:c3:ff:b6:a3:31:4c:0e:04:
f0:2d:84:de:5d:0b:79:34:d0:56:9e:7e:9b:7c:12:
10:3f:93:36:99:f8:9d:59:bb:66:79:1d:ea:85:b4:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:4D:05:08:52:5D:AD:16:05:BD:8E:8C:AC:48:A7:70:99:95:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558234A69C1A11EFB8451072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
62:80:83:5f:7f:7c:28:07:64:6c:86:b2:35:04:49:f0:68:ba:
91:d6:6e:5a:81:1b:b3:21:83:5d:f5:b3:94:af:c7:06:67:87:
77:2f:d6:f5:d5:26:84:94:7f:83:f7:9a:bc:50:ef:d9:7c:df:
ec:3e:65:4b:f4:39:58:f9:4c:b0:cc:8b:3d:bd:24:4e:e1:6a:
64:90:13:cc:a3:8c:3c:ed:86:4a:ea:7e:60:0d:30:91:bc:da:
e4:be:58:a9:76:6a:66:f8:b5:2d:b2:c0:0e:84:4f:9d:79:53:
a8:0d:ac:82:9a:91:91:be:ec:ac:68:a0:d2:32:73:1a:ce:a4:
67:72:3a:e3:5f:ab:51:21:52:7b:07:d7:f5:58:71:84:92:30:
9c:78:ee:5f:cb:08:5b:94:b3:8b:c9:1f:07:12:e2:6b:6a:73:
ed:dc:66:6e:0e:3b:56:e3:aa:a0:63:90:9b:71:4b:76:b0:17:
2b:cb:ac:2c:d8:32:1a:17:35:9a:5c:eb:df:dd:07:8f:ef:c2:
45:54:56:a9:6e:6f:69:fc:f5:cc:ec:01:40:cf:0b:90:57:af:
7f:96:d2:d9:32:05:15:22:54:af:29:4a:e0:ee:3e:bd:4c:78:
fe:87:c1:63:98:8d:6a:5c:66:53:f1:1b:ed:9c:9b:11:06:38:
16:15:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org