Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E07FEC9AA711EFBC44C449762E951A.roa
File: 75E07FEC9AA711EFBC44C449762E951A.roa (raw, json)
Hash identifier: ixtIc+IPsdRca+3r829ruHpU42QDUWRQkDSMBuRzWn8=
Subject key identifier: B8:F3:DB:E0:48:78:64:33:2F:D9:2F:30:53:AE:0E:B4:FB:3B:BC:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01069C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E07FEC9AA711EFBC44C449762E951A.roa
Signing time: Mon 04 Nov 2024 12:22:30 +0000
ROA not before: Mon 04 Nov 2024 12:22:26 +0000
ROA not after: Mon 09 Dec 2024 12:22:26 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67228 (0x1069c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:22:26 2024 GMT
Not After : Dec 9 12:22:26 2024 GMT
Subject: CN=6728bc86-c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:1c:6d:b4:34:3c:bc:5e:47:bd:9d:bc:0d:
09:9d:a6:7d:ea:a5:1f:0e:d6:5d:e0:71:ab:7f:5b:
f7:c3:ed:30:85:51:7b:cf:d1:fe:07:89:4e:12:10:
09:f0:9f:d9:65:ce:6d:a4:01:4f:d2:1b:19:40:1f:
9c:92:aa:d0:78:19:79:20:f7:72:29:9d:1d:a3:a5:
e6:39:49:22:ad:e4:df:df:3d:4c:56:f0:64:f8:10:
4e:f3:65:3a:0d:9a:e3:b5:95:e1:75:a8:04:61:a3:
cd:3b:a0:32:a2:6d:21:84:e2:42:78:91:5a:76:07:
dc:75:e7:ca:c5:b9:04:c4:f3:01:66:4d:12:ea:db:
29:e0:ed:1c:fa:78:17:95:09:29:78:86:bd:83:bc:
02:85:f2:d4:fa:71:c9:50:d3:73:b9:1e:96:86:f8:
2c:1b:93:c0:83:1e:0c:f3:42:e5:1a:23:c5:9e:62:
b9:c9:b2:1e:db:21:cd:1f:d6:34:c3:07:f1:31:29:
76:5e:95:e2:c7:cd:f3:b4:75:1f:56:f7:61:50:51:
ed:4e:44:48:11:c4:f7:76:9d:3e:b2:ea:ad:6c:ab:
b4:d9:c9:ed:5f:cf:f5:f4:05:8f:e7:99:a4:fd:e4:
3b:15:d9:5d:6e:78:2e:ce:2d:8b:54:93:75:63:38:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:DB:E0:48:78:64:33:2F:D9:2F:30:53:AE:0E:B4:FB:3B:BC:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E07FEC9AA711EFBC44C449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
70:be:e7:c4:7c:bc:b1:1c:93:f1:6b:25:bf:78:2e:90:a2:83:
8c:43:d4:9a:25:d3:50:13:b5:92:bd:ba:03:27:df:96:67:a9:
e2:5d:f4:04:e7:69:23:f4:ff:5d:7d:b2:f8:cc:7d:41:7f:74:
51:a8:fe:04:50:ef:61:3f:75:e2:88:68:48:b5:b7:bd:03:d2:
2b:33:bd:fc:8b:0a:7c:e3:21:f1:77:f1:8b:c9:ae:08:0e:ac:
5c:10:a9:1b:55:d8:7f:e4:69:9a:3f:8a:d5:56:bd:df:f7:f0:
6a:48:01:6b:bc:dd:48:82:a5:c9:9d:d0:d4:f5:8b:92:b9:b2:
c8:85:6d:15:e7:a1:19:7e:3b:db:5a:da:19:a9:66:c6:32:48:
4d:07:a5:cd:9c:06:6d:70:8b:64:01:cc:12:46:98:9d:70:8a:
7a:ab:c8:48:5f:e2:a8:5d:30:ba:c6:a8:e5:6e:72:57:79:6d:
37:53:8f:48:b8:d7:56:c5:2a:75:c1:b3:f6:3b:1b:d4:15:5d:
db:f2:c6:31:56:b1:8e:63:92:64:3d:46:6e:ee:78:35:14:c0:
33:72:4f:cb:fa:34:9c:39:f2:57:4d:a8:e3:bf:08:6c:db:a6:
d7:90:02:78:df:11:c7:4e:d4:97:00:c2:a6:b3:66:ed:6e:e5:
13:f6:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:10 2024 by rpki-client on console-ams.rpki-client.org