Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBB61B49D1711EF86CC44AA762E951A.roa
File: 5BBB61B49D1711EF86CC44AA762E951A.roa (raw, json)
Hash identifier: PyV5G3llhQmTaz0ODwjOGRLwwD4I5FRIe+zfbpoozBQ=
Subject key identifier: 28:3F:D2:EE:78:4F:1E:2A:26:35:05:69:14:C2:95:D5:07:65:23:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010957
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBB61B49D1711EF86CC44AA762E951A.roa
Signing time: Thu 07 Nov 2024 14:48:32 +0000
ROA not before: Thu 07 Nov 2024 14:48:28 +0000
ROA not after: Wed 05 Nov 2025 14:48:28 +0000
asID: 138995
IP address blocks: 154.92.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67927 (0x10957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:48:28 2024 GMT
Not After : Nov 5 14:48:28 2025 GMT
Subject: CN=672cd340-7f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:44:c7:0c:b4:bc:c3:10:61:5f:31:08:33:
ab:f2:87:02:f8:2a:d6:0f:b6:1a:93:58:ac:90:4b:
3d:eb:0e:24:48:84:86:16:ae:71:38:f0:ba:ba:15:
ea:cf:05:b8:de:e7:c1:f9:eb:69:8b:8a:36:20:7d:
47:9b:ea:26:68:41:61:d1:91:72:82:e2:e8:1d:b2:
0b:23:61:d2:20:2e:0e:ed:36:d2:2f:51:08:12:28:
54:54:7f:cf:a8:b2:7b:d6:cf:0d:9d:be:97:db:fc:
7d:da:ce:6e:a8:bb:69:c5:18:01:fe:a4:6a:ce:76:
2e:44:01:d5:05:12:dc:f5:1c:fe:c4:4b:63:8c:66:
2c:83:d3:bb:25:ad:b2:3c:2a:38:9d:8f:a7:1f:67:
5e:41:47:55:66:1a:91:fb:af:7a:3b:46:75:e5:b0:
0a:09:e0:50:cb:d7:87:2a:4f:42:d2:73:e2:d4:33:
35:4b:41:8a:e4:af:ed:23:65:92:93:ac:b0:a1:a8:
b8:d4:f8:a3:93:ed:a1:00:56:c0:9c:c5:f5:71:f0:
f8:ec:d6:7d:b0:2c:68:b7:da:bc:5b:c3:10:e3:62:
86:98:ab:88:ff:4b:2b:0b:55:6d:5f:9c:77:8e:13:
02:46:67:c3:3c:ae:2d:5f:cb:47:c9:5e:98:b1:51:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:D2:EE:78:4F:1E:2A:26:35:05:69:14:C2:95:D5:07:65:23:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBB61B49D1711EF86CC44AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:6c:7e:82:8b:de:86:47:d1:54:01:8b:bd:c9:20:79:ef:
83:0c:5c:01:1a:80:28:87:d8:af:da:3e:79:50:55:76:d3:60:
0d:ba:26:43:6e:2e:b6:70:89:58:e6:89:2c:d9:84:bc:58:ca:
c0:2f:9b:af:ea:6b:91:c8:ca:05:95:2e:c5:71:67:f2:a5:b0:
09:73:47:33:90:3f:5f:77:bf:49:05:13:0f:cd:29:72:c8:80:
d9:da:80:d2:3f:a5:95:99:9d:f8:ae:36:12:f2:b2:5e:5d:99:
16:37:37:41:5d:5e:a1:3f:6a:7f:d8:b3:c6:4d:c9:d4:f2:08:
b5:58:cc:c6:ad:75:bc:b5:cd:eb:4d:79:1e:e3:1f:5d:7f:88:
c6:bc:a2:c3:c3:4c:9c:93:66:8a:44:17:f4:38:b6:93:45:d7:
57:4b:52:2c:52:47:22:a4:e5:f4:08:c3:7e:9c:e6:05:96:11:
4c:8c:7f:d0:62:bd:ba:5d:6b:d6:7c:78:39:6a:ac:cb:b4:b1:
df:64:ff:28:a9:69:a5:ec:cd:46:e0:97:4c:41:f8:44:88:8f:
fe:0d:59:74:c3:46:76:09:40:ba:b3:2a:6c:df:ce:d0:e6:24:
9f:d4:73:39:e0:0b:a8:1a:f1:b7:8f:b3:02:10:f1:9a:29:29:
8c:19:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org