Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/829C04AA92E011EF9A7B9ABD762E951A.roa
File: 829C04AA92E011EF9A7B9ABD762E951A.roa (raw, json)
Hash identifier: biBJ4h5LSs/trIPKnFyydvvS/7HghCBoiT+CEdr2pIE=
Subject key identifier: 34:58:42:6D:61:E1:81:AE:E2:77:58:6B:62:7F:A9:C2:0E:BB:F1:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01024C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/829C04AA92E011EF9A7B9ABD762E951A.roa
Signing time: Fri 25 Oct 2024 14:50:43 +0000
ROA not before: Fri 25 Oct 2024 14:49:52 +0000
ROA not after: Sun 01 Dec 2024 14:49:52 +0000
asID: 202656
IP address blocks: 154.221.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66124 (0x1024c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:49:52 2024 GMT
Not After : Dec 1 14:49:52 2024 GMT
Subject: CN=671bb043-05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:cc:44:30:13:03:bf:a2:9d:0b:b6:d2:46:
d3:5a:58:2a:54:da:9d:61:ff:41:4a:08:a2:6b:6d:
f2:e3:64:24:bb:5b:9b:26:e0:e7:99:f8:bc:e7:ca:
13:3b:b3:03:af:e9:c9:c4:4f:f5:ed:1d:5f:1a:cd:
84:74:98:38:28:5d:8d:4f:8d:61:e4:55:10:57:b6:
94:ba:78:ed:b7:d7:ca:59:e9:d4:f9:54:7a:3d:3a:
1b:7c:60:b7:47:86:4e:ef:f7:8d:ec:9d:c5:c4:db:
8f:76:a4:7b:38:10:a4:9d:d8:97:6f:6f:b4:27:2e:
51:fe:10:2f:ec:a0:6c:9d:91:01:cf:8d:15:da:06:
5c:45:9f:ed:d3:ee:1b:9b:e5:cb:90:ba:a7:1e:d0:
b3:99:36:34:fb:32:4c:9e:f5:79:6c:66:8d:f7:27:
ed:25:56:c9:4c:72:84:74:b0:80:f7:49:85:bb:2d:
d5:be:7d:01:c0:44:1f:9d:73:5a:c5:f2:6a:e6:30:
9d:02:de:c2:52:fc:da:7e:70:57:20:db:7e:ae:7a:
46:4f:83:47:82:28:b5:db:c9:c4:84:86:7f:82:93:
11:81:20:1e:6f:1e:49:88:41:04:d0:c8:f9:80:86:
47:1c:bf:cd:28:c6:6f:9b:77:c4:f4:c9:a7:83:df:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:42:6D:61:E1:81:AE:E2:77:58:6B:62:7F:A9:C2:0E:BB:F1:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/829C04AA92E011EF9A7B9ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.50.0/23
Signature Algorithm: sha256WithRSAEncryption
58:96:52:86:24:31:73:42:1a:4a:ab:1a:f6:d6:f8:42:2e:87:
d9:a6:d9:68:2a:0c:42:53:fd:e1:e0:c1:20:b2:bf:fa:c9:bc:
b2:26:b1:88:da:e9:4e:e5:2e:4c:a4:ab:01:90:a0:98:47:b9:
42:2b:08:ba:02:e9:c1:eb:f0:10:50:73:ac:ca:90:a0:3b:b5:
22:e3:d3:da:e1:0f:e2:f5:64:da:0e:1d:ba:40:8c:27:7b:74:
1e:55:53:b6:58:d2:f5:e1:6b:ca:21:ed:73:c6:0a:69:4b:f6:
54:03:c7:46:6e:a0:d1:db:4f:eb:e6:82:87:e0:11:2a:e2:8d:
2c:c4:84:08:43:43:ca:0b:92:ab:37:0f:29:91:9a:d4:67:0c:
87:44:bc:39:54:41:c9:f8:03:39:05:36:7d:49:21:76:d4:8a:
fd:31:72:07:fd:c8:b6:76:1e:3c:78:37:f6:82:c6:46:54:b9:
e9:bc:d3:cd:0c:f9:b8:59:9c:26:f5:14:d6:50:57:95:a8:c7:
04:bf:36:ef:02:1d:93:f9:b9:32:26:80:fb:03:20:b3:1c:0e:
68:16:46:cf:59:73:90:74:45:42:ae:d7:07:69:a0:8c:9d:ca:
da:f1:97:0d:35:35:00:21:ce:1f:db:b4:8c:06:0e:13:7c:6f:
e9:75:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:37 2024 by rpki-client on console-fra.rpki-client.org