Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEEAA56A8E411EFB16BD291762E951A.roa
File: 5FEEAA56A8E411EFB16BD291762E951A.roa (raw, json)
Hash identifier: wYJr83N8piDESh7VLpkYvuI0zXw4uOn43kVMIzXIoP0=
Subject key identifier: 53:CF:0A:32:AB:BE:0A:A0:D6:AD:BA:25:39:41:8F:3D:9C:FA:08:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEEAA56A8E411EFB16BD291762E951A.roa
Signing time: Fri 22 Nov 2024 15:13:49 +0000
ROA not before: Fri 22 Nov 2024 15:13:45 +0000
ROA not after: Tue 03 Dec 2024 15:13:45 +0000
asID: 62240
IP address blocks: 154.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69819 (0x110bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:13:45 2024 GMT
Not After : Dec 3 15:13:45 2024 GMT
Subject: CN=67409fad-89bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:82:10:a2:ab:dd:b7:25:d4:42:49:d0:49:
77:d4:70:99:a4:23:02:e5:fc:71:53:5f:15:8a:bf:
ce:f5:5b:26:91:2f:8f:8f:4b:bb:9a:4d:ac:5a:9d:
65:e7:d6:51:cf:98:4e:5d:a6:7a:c0:a0:fc:64:96:
f0:24:59:be:71:26:97:79:b9:d6:93:f3:ca:d3:b5:
da:6f:08:8f:15:15:e5:dc:61:9b:56:3f:89:b2:05:
c6:0c:f6:ee:ff:8b:e0:b5:d6:b3:e6:c3:37:f0:39:
c5:cc:04:a8:fd:2e:fb:14:15:c2:e1:c9:06:d0:04:
a5:a7:3a:51:94:c4:6f:dd:eb:5f:dd:33:8f:ac:68:
b7:3a:5b:60:18:c9:20:29:24:50:37:9d:b3:8f:a6:
64:e6:35:4e:ea:0a:ac:3e:a4:fd:4c:32:00:2d:96:
9a:9b:95:c4:0b:61:01:ab:c5:6d:6e:39:ae:66:8d:
1b:83:68:72:ad:73:5a:cb:39:cf:86:de:2d:c8:33:
1b:3d:c4:c3:84:65:86:95:98:88:8d:19:f5:fc:3b:
17:2e:65:52:ae:2a:39:1a:aa:66:0f:31:44:0e:8f:
df:08:05:46:ea:e4:f4:5a:65:ab:de:2d:fe:9e:04:
fe:00:5d:2b:f7:87:01:6b:32:7a:c5:e4:df:ca:01:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:0A:32:AB:BE:0A:A0:D6:AD:BA:25:39:41:8F:3D:9C:FA:08:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEEAA56A8E411EFB16BD291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8e:6b:79:08:3a:2b:08:f7:79:50:2b:73:23:33:42:17:dc:
4d:d8:e7:2b:c2:c6:9d:b6:44:51:36:55:4e:52:5e:5c:68:c6:
73:cf:4b:c5:c2:33:52:8d:e6:da:70:99:4f:91:f0:32:2a:39:
9b:a1:2b:b0:43:07:4e:ad:62:b2:09:9c:c7:a2:d6:61:6c:4f:
4f:c4:27:fb:58:e7:41:fa:be:d7:02:51:c5:33:46:3b:bb:05:
41:21:e2:16:00:f2:1b:c8:6d:ec:9f:be:7a:65:10:15:22:15:
80:95:a4:2e:fc:f7:ba:87:5f:9e:77:89:99:d4:60:28:62:f6:
28:de:63:ca:78:9a:f0:0e:a4:74:56:08:f8:69:05:c4:47:a7:
f7:d8:e5:3b:f7:3b:f0:74:4f:17:7e:a0:5a:fb:26:6d:26:14:
f7:d7:a9:fd:00:32:46:0e:b7:9d:65:49:30:52:97:a2:54:be:
16:b9:c1:36:cc:11:fb:37:02:82:4c:0d:9e:25:49:f3:6d:0d:
e2:7b:18:cd:07:ed:e8:1e:aa:ff:ba:22:26:4b:05:a8:c4:d6:
3e:8a:78:cb:5e:77:68:7d:1a:2e:9a:92:c5:1e:2d:09:f6:01:
11:e5:b6:70:71:9b:b0:45:c9:1e:c1:9e:db:47:95:53:b6:27:
ac:cd:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org