Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E0B92AA8EF11EFA5F96A58762E951A.roa
File: 84E0B92AA8EF11EFA5F96A58762E951A.roa (raw, json)
Hash identifier: obkpETCt/Kp/eq9jO9QNRtyjIftwsWmulJBD/O0HzHU=
Subject key identifier: 64:E6:3A:A4:CC:2E:51:45:D3:DA:A4:E7:70:F9:74:1D:AA:B5:89:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011141
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E0B92AA8EF11EFA5F96A58762E951A.roa
Signing time: Fri 22 Nov 2024 16:33:35 +0000
ROA not before: Fri 22 Nov 2024 16:33:32 +0000
ROA not after: Tue 03 Dec 2024 16:33:32 +0000
asID: 62240
IP address blocks: 154.195.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69953 (0x11141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:33:32 2024 GMT
Not After : Dec 3 16:33:32 2024 GMT
Subject: CN=6740b25f-1488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:9e:61:49:1c:62:cc:09:e9:f5:c8:24:fb:
86:71:c7:ff:49:44:cd:d9:85:f2:70:6a:e4:54:cd:
f1:8a:48:f1:96:02:0a:b4:19:56:52:d9:49:8d:5a:
60:7c:4d:b2:13:ae:d9:a9:e5:85:e1:f9:25:0f:fb:
d1:de:c4:0b:44:4f:c5:5a:36:a2:39:b2:8f:11:79:
44:82:ad:bd:ab:f4:eb:6e:30:0b:9c:73:78:32:a3:
45:7a:d1:31:53:d7:e6:d8:93:6e:bd:f3:0a:6d:48:
5e:df:ed:82:2a:96:89:1c:19:c4:7c:6d:96:3b:a9:
f4:fe:0e:ab:6a:65:2d:b6:48:7d:2e:2b:4b:b3:76:
af:a2:50:e4:47:9c:b7:2c:8a:c6:36:4a:b6:31:8e:
e1:d4:12:bc:e6:bb:f8:ac:36:a3:a5:6a:b7:b6:8d:
6c:e5:45:56:2c:fc:17:c2:5f:38:a5:6d:dd:97:32:
07:48:9a:14:f7:db:ee:6d:28:c4:8c:cd:53:75:22:
e5:60:fe:2b:f2:82:af:44:bb:0e:9c:89:04:4a:0f:
a3:90:7e:a7:76:8c:4f:ac:91:58:e5:80:32:4d:ea:
98:fd:68:0b:05:4d:53:26:28:55:c4:85:c9:ef:e9:
26:b5:63:76:8f:2b:0a:01:45:8a:75:fc:b9:03:03:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:3A:A4:CC:2E:51:45:D3:DA:A4:E7:70:F9:74:1D:AA:B5:89:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84E0B92AA8EF11EFA5F96A58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.155.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6b:82:e3:3d:93:0f:b0:ae:43:1b:6b:07:94:c9:8d:ff:f4:
92:e5:31:d4:c6:ac:ae:0b:67:de:e2:49:52:24:94:4f:d2:bd:
64:c7:d6:9a:74:92:57:c6:f1:dd:06:64:04:35:e0:88:8b:7d:
d6:50:80:d7:b4:10:91:f1:af:71:e6:3f:61:3f:da:8a:9f:f1:
08:93:96:22:98:1a:3a:ae:ce:64:53:c0:f3:3d:02:55:e4:cb:
3b:e4:07:48:50:75:55:5c:a6:c9:10:88:70:6a:59:e9:51:74:
8c:42:c1:c6:3f:39:17:24:6e:17:a5:58:78:03:31:3e:e7:52:
1d:c4:8a:05:27:47:b9:c4:75:ea:3c:c4:68:0e:fc:3f:e0:ba:
5f:49:7d:b9:5a:ff:ab:73:99:4e:fc:02:72:5a:28:47:1d:7c:
4a:a2:a8:28:90:fa:d2:13:8c:ac:a3:1e:3f:12:98:a4:0e:1a:
ba:49:32:20:5d:d6:7d:23:6d:22:93:c9:f8:02:f3:e8:a4:48:
7a:24:13:84:6b:1b:88:7a:c6:78:e9:b9:90:fc:fc:87:fa:f0:
c2:4f:42:c2:6d:22:7a:e8:94:20:86:7e:4e:cc:dc:05:de:fb:
83:8d:9f:15:ea:cf:c5:a1:a0:ef:b4:27:f2:72:78:8b:0a:c8:
63:cb:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:21 2024 by rpki-client on console-ams.rpki-client.org