Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA19A0A9A911EFB2CC9469762E951A.roa
File: 80EA19A0A9A911EFB2CC9469762E951A.roa (raw, json)
Hash identifier: mZWhYExfxi+Sk61eqVWaoLP6JZqrarhgqnGzMwSaIgE=
Subject key identifier: 18:67:40:E8:A0:58:7D:AD:67:8D:B8:C7:2D:49:5D:7F:02:04:A9:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011176
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA19A0A9A911EFB2CC9469762E951A.roa
Signing time: Sat 23 Nov 2024 14:44:55 +0000
ROA not before: Sat 23 Nov 2024 14:44:51 +0000
ROA not after: Mon 23 Dec 2024 14:44:51 +0000
asID: 6079
IP address blocks: 154.83.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70006 (0x11176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 14:44:51 2024 GMT
Not After : Dec 23 14:44:51 2024 GMT
Subject: CN=6741ea67-958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:52:96:b9:36:1f:f3:71:a1:c5:59:74:ef:
9b:93:bc:15:2d:08:81:c9:c4:bf:8b:4f:f2:37:7e:
52:20:fc:09:2e:26:5c:5a:59:1b:78:9b:c5:ed:4b:
e1:6e:f9:78:95:d2:6a:94:1b:f4:01:30:99:01:69:
c6:01:26:f6:cb:f2:89:cb:74:21:66:bf:66:b8:b8:
e4:b4:53:0d:86:87:ca:50:81:ff:86:3b:3c:31:29:
d8:54:ee:7b:27:a3:47:ec:8e:b2:ee:5b:4a:2d:53:
97:9a:5a:25:40:3a:10:90:b7:83:b1:b6:ce:78:77:
ab:39:e9:98:84:d0:71:35:aa:e3:72:64:67:4e:8b:
a1:8b:2e:ca:b1:20:84:ce:f4:f1:c8:4f:61:8d:ee:
1c:94:f0:9c:7c:37:0d:86:d7:bf:1a:bd:6a:88:70:
ce:71:29:d9:29:5e:86:df:fd:04:50:16:e4:1a:49:
2c:70:6e:8d:ce:aa:ef:d3:4a:00:3b:35:f8:a7:b5:
22:82:13:81:c8:5e:c3:d2:7d:27:2a:e6:8d:9b:08:
4b:90:1a:80:96:a7:9d:76:08:8f:44:c7:1e:1f:e9:
d8:e7:5a:ab:be:50:95:d0:e3:4e:0c:8d:6d:b0:14:
d0:68:da:9c:d9:bc:ee:44:10:95:2a:e7:16:2f:a6:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:40:E8:A0:58:7D:AD:67:8D:B8:C7:2D:49:5D:7F:02:04:A9:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA19A0A9A911EFB2CC9469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.48.0/20
Signature Algorithm: sha256WithRSAEncryption
93:bf:bb:3e:ee:d6:ab:c9:48:c9:a2:af:ae:4d:17:4f:bf:22:
a3:d7:c0:41:24:3c:64:42:60:98:25:81:1e:3a:04:c5:6d:fe:
27:e1:9c:9d:27:df:44:f0:da:62:c1:37:bd:d1:c7:01:39:dc:
06:c4:ad:b4:b7:c2:20:45:93:11:40:ab:7c:0c:ec:b6:14:18:
c7:ac:53:3b:ae:e9:be:97:82:dd:1a:d7:f6:73:7a:54:ea:b3:
fc:82:d2:fb:e1:be:36:7a:48:e0:a6:36:fa:66:86:22:d6:b7:
f0:50:f7:31:00:e4:11:c5:f4:39:f3:fc:3f:93:a1:be:5a:71:
ca:3d:4d:23:36:29:8b:ca:7f:70:bb:c1:d9:96:ca:84:0e:c4:
a8:68:5e:a4:e1:aa:86:ef:79:f4:ae:83:10:3b:60:58:e4:8b:
05:9f:19:14:6f:85:c7:94:48:45:93:87:78:65:b0:34:5a:26:
9f:0c:3e:90:8c:a5:7e:21:ac:c8:73:c4:43:09:6d:02:bd:a7:
7b:70:48:c2:b6:6c:f6:c7:e8:81:56:52:c0:6d:9d:3a:83:50:
9c:24:ff:fc:56:fe:b9:e7:dd:3c:79:5a:e7:cf:99:b0:fe:50:
78:9d:a8:14:81:89:c9:ec:55:06:e7:e8:7c:83:f1:26:09:af:
15:ba:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org