Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB6CA9CC11EF851EB846762E951A.roa
File: 794EEB6CA9CC11EF851EB846762E951A.roa (raw, json)
Hash identifier: AQj15U7tE7zb8++Jgyo+kvV4lE/+EBYfo+sIeLx2Ufw=
Subject key identifier: 1C:A0:3F:5D:D0:69:DF:6E:77:71:D4:73:0F:34:70:F7:3E:01:40:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB6CA9CC11EF851EB846762E951A.roa
Signing time: Sat 23 Nov 2024 18:55:14 +0000
ROA not before: Sat 23 Nov 2024 18:55:11 +0000
ROA not after: Mon 02 Dec 2024 18:55:11 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70134 (0x111f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:55:11 2024 GMT
Not After : Dec 2 18:55:11 2024 GMT
Subject: CN=67422512-e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:8f:d7:ff:bb:c2:e5:02:fd:f6:74:84:4a:
11:47:a4:f4:4e:1f:8e:64:0b:4b:cd:0c:dc:37:ec:
a3:43:0e:5b:ba:98:70:10:da:37:9f:64:3e:5c:f6:
cc:b2:7d:4f:58:35:fb:1e:c3:bd:5a:24:9e:e3:27:
df:53:58:09:5a:02:38:cd:6d:33:a5:43:40:f5:94:
39:2e:70:08:07:09:10:84:93:49:87:72:73:64:6e:
2d:22:a3:73:82:f2:7c:92:34:52:ef:5b:26:7b:5e:
61:7e:b4:c6:89:bf:a5:42:33:39:4a:30:e5:4b:bb:
db:69:b5:80:84:8f:2c:cf:0f:fa:0d:60:23:61:e6:
9a:38:c7:76:0e:ae:b1:3a:75:87:33:42:ef:26:85:
9f:28:e6:5b:3f:ef:78:d6:28:44:a8:f1:e6:73:de:
6a:58:7f:09:02:e8:f4:89:9a:80:e0:a0:d4:55:de:
67:47:57:34:b8:1e:7b:79:d8:45:38:75:48:12:69:
4a:ea:d0:1a:9c:80:bb:91:0d:3d:97:0d:54:37:ba:
f6:ce:f8:d9:c1:5d:48:43:46:29:c8:17:85:5b:94:
8d:88:56:1f:0b:fa:ce:2a:31:6e:ad:52:d3:d0:12:
43:6c:e2:f9:e0:ef:6e:67:b3:62:f6:4b:09:2a:61:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:3F:5D:D0:69:DF:6E:77:71:D4:73:0F:34:70:F7:3E:01:40:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794EEB6CA9CC11EF851EB846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/23
Signature Algorithm: sha256WithRSAEncryption
24:4b:a1:86:97:e3:7b:c6:0e:20:98:67:69:fd:fa:f8:f2:9d:
9c:df:fc:9a:a9:38:e0:ed:6c:88:f6:cc:39:16:86:ff:7c:c4:
7c:15:39:3c:6f:ce:ed:18:c0:9a:c5:e3:89:7d:ef:a9:7f:ae:
f5:8a:b6:f4:c5:d0:aa:43:69:f4:a1:43:55:11:88:41:4c:83:
af:54:2d:55:dd:56:46:15:a0:65:ae:5f:d4:b1:32:37:56:24:
46:e2:25:10:ec:84:54:fe:72:ca:0b:88:af:03:12:c4:71:60:
ee:99:bf:18:65:c8:cc:be:1d:76:49:e7:33:7d:91:73:84:ff:
b5:16:79:65:42:1b:b2:f9:ed:89:c8:5d:ca:7b:42:66:3f:81:
12:12:65:a6:a9:9e:b9:06:70:85:78:7a:a0:35:f4:50:4e:a9:
74:e2:8f:91:07:40:e0:a3:33:d5:77:27:1f:6d:94:ed:2f:be:
75:00:3b:37:0a:d2:f2:0d:49:b3:c7:f1:da:77:17:cf:4e:77:
3f:cb:41:04:4a:7a:55:1c:36:43:2d:9c:ff:5a:ae:00:92:aa:
a6:68:60:65:ec:10:bd:44:a0:39:f4:57:97:e1:11:c7:c2:ab:
38:85:84:2a:77:e5:68:f3:0f:3e:fa:a1:45:4d:c3:55:8d:69:
e1:30:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org