Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73236516A8DB11EF92221E59762E951A.roa
File: 73236516A8DB11EF92221E59762E951A.roa (raw, json)
Hash identifier: Tp0jEBnoJ298vzWpH6lVSQibgpZ/A4z9dAv37yynAow=
Subject key identifier: 5A:03:B4:37:D2:8A:D6:2D:E2:F2:B6:08:EC:0F:35:58:83:19:5A:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01104F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73236516A8DB11EF92221E59762E951A.roa
Signing time: Fri 22 Nov 2024 14:09:55 +0000
ROA not before: Fri 22 Nov 2024 14:09:52 +0000
ROA not after: Mon 09 Dec 2024 14:09:52 +0000
asID: 5065
IP address blocks: 154.206.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69711 (0x1104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:09:52 2024 GMT
Not After : Dec 9 14:09:52 2024 GMT
Subject: CN=674090b3-0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:0f:06:31:4f:10:53:23:0c:57:0a:8a:4f:
9b:3f:b1:4c:a4:2a:a7:2a:d1:03:f9:f4:74:d5:f5:
71:17:8c:c1:12:8e:f9:75:79:6f:1e:e7:a9:2a:51:
0d:28:31:93:6f:56:45:c4:05:e8:26:9b:7f:59:a8:
04:af:66:0b:e4:2f:8a:82:fd:7a:3f:47:c3:39:0b:
49:14:16:59:a2:d9:35:47:a4:61:90:cc:03:1e:63:
ea:14:e3:fa:4a:61:0b:d3:bd:a6:10:3c:57:32:22:
f8:bb:07:8c:f8:44:4d:2c:4e:9a:3a:d4:26:7c:9d:
9c:b2:1f:69:a3:3c:fc:3a:a6:dc:50:e9:9e:79:ed:
c8:f3:7d:8a:db:bd:78:68:17:3f:e9:a7:4f:b6:6b:
db:2f:8c:9c:da:43:a1:ae:96:b4:08:3c:a4:8b:31:
95:68:f5:3e:5f:48:f3:4b:34:39:8d:6a:e3:47:70:
ad:95:26:a8:9d:5b:7b:fe:5a:30:79:07:33:2e:08:
47:10:74:6b:0f:ab:a9:ce:62:52:9d:27:d2:b6:ce:
b6:20:5e:8a:d2:f0:ca:6b:eb:eb:af:38:f1:e3:39:
1f:29:92:b9:48:89:a5:3d:b1:ab:df:5c:13:6e:f5:
04:f8:53:3d:f4:2b:38:87:0f:41:60:62:46:58:23:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:B4:37:D2:8A:D6:2D:E2:F2:B6:08:EC:0F:35:58:83:19:5A:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73236516A8DB11EF92221E59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:0d:3e:96:2a:18:bf:95:62:0d:b1:e3:db:58:8f:7d:4a:45:
88:be:71:c6:cd:a3:bd:57:9f:37:7a:64:e6:88:35:0c:30:6a:
cd:b9:5c:a5:db:a6:e7:29:cd:c0:0b:d5:92:01:f4:04:48:39:
f5:c9:0b:93:c1:b3:41:84:b1:cc:ab:73:98:5f:88:4c:90:0e:
55:51:63:4a:83:ad:22:f4:a1:3d:50:18:29:19:ad:33:b8:99:
d3:fa:0d:ed:19:8a:04:3d:f2:ad:fe:d0:f1:92:e1:e1:df:25:
d7:6b:34:47:07:b3:ca:e5:a2:54:4d:1f:73:75:4b:8b:3f:d9:
19:92:74:61:af:89:5c:33:98:db:31:7f:3b:7b:55:08:e3:20:
08:43:75:4a:50:8d:d3:a5:6d:03:e9:9d:7b:50:bd:2e:1d:8d:
6a:72:ce:25:10:a4:b5:78:19:66:b2:5c:f6:82:eb:f7:39:db:
70:5f:c7:fb:df:b5:ba:f9:e6:04:b5:a2:42:0c:55:36:8a:f3:
bd:e0:16:83:f8:ef:e2:e2:4f:11:90:6a:e6:41:6d:95:b4:3c:
04:12:96:25:dd:7a:93:ba:41:e6:c2:df:f4:10:00:92:e1:1c:
9b:24:e1:f6:f8:37:f9:dd:54:2c:65:32:28:f7:8c:b1:30:f0:
fd:06:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:18 2024 by rpki-client on console-ams.rpki-client.org