Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EE191496B211EFB007DB54762E951A.roa
File: 72EE191496B211EFB007DB54762E951A.roa (raw, json)
Hash identifier: 8bQh5bk+Vt283a4nbSunrYwWNSV4+92j/ezJJ5i0WK8=
Subject key identifier: 8B:56:A2:4E:BD:90:40:4B:F1:AB:03:39:49:BA:A6:30:D4:05:21:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010401
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EE191496B211EFB007DB54762E951A.roa
Signing time: Wed 30 Oct 2024 11:31:05 +0000
ROA not before: Wed 30 Oct 2024 11:31:01 +0000
ROA not after: Mon 09 Dec 2024 11:31:01 +0000
asID: 138915
IP address blocks: 154.95.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66561 (0x10401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:31:01 2024 GMT
Not After : Dec 9 11:31:01 2024 GMT
Subject: CN=672218f9-ed80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:55:3c:d7:6e:c6:47:ab:89:46:cf:9a:73:
69:a2:35:df:13:63:fb:cb:e1:2e:af:69:3c:89:4f:
51:0b:3c:7e:58:96:3e:9b:10:59:39:49:3a:75:64:
b7:dd:cf:14:af:b4:cc:4d:6c:d2:3a:7d:6f:8b:40:
22:a0:e3:b4:3b:26:08:58:35:54:12:55:e2:aa:4e:
cd:a9:9b:be:96:5e:bd:51:59:b3:b6:69:92:f1:96:
aa:f9:3c:17:3a:37:5e:c2:7a:e0:ae:a2:a7:af:9f:
48:21:d4:75:e9:2d:1d:39:a0:92:d8:85:16:65:f1:
35:29:61:9c:8a:8e:4c:cf:9f:df:17:d8:17:de:ae:
0b:13:1d:c9:56:69:4b:1e:22:10:dd:f9:6c:6b:04:
6d:d2:62:f8:0c:fb:8b:46:56:1b:93:bd:68:dd:b7:
d4:4f:90:20:76:43:43:a4:a7:68:3c:cd:56:89:28:
83:31:2d:bf:1e:57:2e:9b:c0:60:97:17:11:22:c2:
8d:3e:9c:a5:64:2a:8f:78:ff:d9:0f:0a:50:19:c0:
bc:30:94:8b:33:45:ae:b7:33:60:83:17:0a:9b:54:
83:01:31:f0:af:8c:17:0a:5b:b9:31:90:15:4b:92:
e4:7f:bc:40:e3:92:3e:26:0c:6a:82:7a:b1:8e:72:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:A2:4E:BD:90:40:4B:F1:AB:03:39:49:BA:A6:30:D4:05:21:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72EE191496B211EFB007DB54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.96.0/19
Signature Algorithm: sha256WithRSAEncryption
11:d6:b2:4a:2d:63:33:f4:57:e8:79:8d:9f:48:e2:e2:e9:05:
47:b6:e8:98:8d:3a:1a:72:23:2d:15:7f:81:51:24:3e:01:93:
30:de:c2:34:40:ce:2b:5c:32:39:99:02:24:b4:37:28:43:26:
70:02:61:43:51:fb:71:39:b4:1b:a6:43:c9:7d:57:fb:91:aa:
6c:25:f6:ff:38:d0:f5:3a:d6:22:46:75:1d:fd:e6:ec:d1:36:
26:20:54:f0:3b:bd:39:7f:2b:24:3c:8c:30:75:9c:55:bf:2b:
86:0f:81:a9:4f:b8:7a:fb:08:88:ec:08:fe:cd:8e:a0:8d:1e:
43:67:d6:13:80:12:e4:c7:95:2f:4d:8a:9f:46:d5:b7:4a:4a:
09:6d:b1:2a:71:0b:42:7c:cf:7f:c1:45:42:8e:54:4f:d1:7a:
a6:da:17:83:43:fc:d2:77:0e:e9:b4:e2:63:43:40:ef:9d:ea:
82:f8:69:80:63:17:43:36:25:36:45:3e:49:a5:8e:23:d3:8f:
bc:2d:d6:53:aa:06:d4:01:45:29:08:44:12:72:db:04:50:95:
a1:ff:ef:be:41:00:46:bb:f6:4e:f9:7f:85:fb:aa:5d:f0:6b:
9e:23:98:c9:8b:8e:39:67:0b:56:07:d7:c0:20:8b:80:aa:b4:
94:71:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:35 2024 by rpki-client on console-fra.rpki-client.org