Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C96AA66AA111EF9CE64070762E951A.roa
File: 73C96AA66AA111EF9CE64070762E951A.roa (raw, json)
Hash identifier: occ69rTkF85u9sOeUxCipyVZ8savZFo3h198tAFu0CQ=
Subject key identifier: CE:AA:45:C2:FD:4A:0D:2C:28:CB:5C:87:B7:07:CF:2C:36:42:34:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C96AA66AA111EF9CE64070762E951A.roa
Signing time: Wed 04 Sep 2024 09:38:34 +0000
ROA not before: Wed 04 Sep 2024 09:38:30 +0000
ROA not after: Thu 24 Apr 2025 09:38:30 +0000
asID: 63888
IP address blocks: 154.207.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59949 (0xea2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:38:30 2024 GMT
Not After : Apr 24 09:38:30 2025 GMT
Subject: CN=66d82a9a-37b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:be:99:1f:8b:42:1e:db:03:bc:d6:fa:46:
37:19:18:87:3f:5c:0e:9f:e8:b8:2d:fc:50:c1:c9:
4b:6a:c6:41:74:87:ab:81:e7:c5:a4:48:37:4c:43:
06:e9:44:1e:45:db:8f:b8:2e:cc:a5:82:4b:18:b3:
ee:28:1c:03:d5:97:da:76:0c:a0:31:3a:f4:25:e0:
7f:37:43:32:84:56:8c:fd:f4:ae:b6:c5:f3:ef:48:
96:f6:2c:6f:95:61:fd:e6:6a:8d:af:18:ac:02:08:
dd:68:9e:f5:64:05:91:6d:8a:7a:36:74:c3:f0:c6:
f3:d8:6f:94:bb:d6:fc:77:21:65:21:ab:22:0b:84:
06:74:3e:34:13:07:9f:2f:b9:76:55:6a:1d:1c:64:
5c:41:eb:23:cc:88:24:ba:fd:f7:d6:a4:ac:73:e2:
3d:5d:dc:21:0d:d3:3a:54:63:87:c5:6b:25:d1:b1:
05:5f:73:b3:00:60:a0:17:85:e6:18:22:96:0d:b9:
81:62:14:97:00:8e:bd:10:85:4c:93:b0:ac:c0:1e:
ea:2a:a3:c3:38:64:cd:ca:a4:47:c5:0d:ad:29:82:
73:ce:f3:3b:ae:bd:97:76:4a:74:5a:2e:05:87:e9:
a4:23:12:b9:0a:79:a1:72:38:c7:58:5b:75:0c:2f:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:45:C2:FD:4A:0D:2C:28:CB:5C:87:B7:07:CF:2C:36:42:34:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C96AA66AA111EF9CE64070762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:2e:f0:fe:cc:94:bf:b0:03:59:f4:0c:ed:7d:c1:6e:96:58:
e5:62:40:59:7b:44:e2:6a:a4:45:68:e8:28:68:c5:bf:ad:ca:
26:2b:4a:ee:e8:13:6f:d5:52:9a:ea:d8:59:e0:b2:b7:97:d1:
28:69:ac:93:fc:57:c5:98:be:ed:20:95:6c:72:41:05:30:98:
81:f4:d7:f6:71:ef:db:7c:3f:6a:37:c8:29:3d:e5:46:f5:77:
06:77:41:9c:97:d1:e5:bc:a4:e8:9e:a5:96:68:05:a9:dd:aa:
15:b2:6c:f9:31:8b:19:2f:a7:2f:0d:eb:89:f1:e3:0d:bc:a0:
24:2c:bd:16:7d:ad:f9:07:80:8a:27:05:d1:19:ed:69:4a:39:
f0:f9:be:1d:f7:88:96:b3:9b:7f:9c:5e:af:63:b3:c9:11:58:
6c:f0:a4:44:4d:68:5f:e2:ec:ba:f0:f0:b5:ba:f2:89:eb:70:
06:8a:e0:9a:44:d5:b8:76:77:ff:9c:a1:f6:a0:22:a3:5d:d3:
98:b5:61:e0:ec:03:da:9b:04:d1:c0:32:17:04:ad:f3:af:03:
df:50:5e:95:c6:13:c4:aa:cb:14:25:87:8c:88:96:ae:d8:f8:
6a:a5:4a:82:23:3c:25:29:29:3e:65:74:08:3c:74:a1:0e:40:
90:51:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org