Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FAB372A4CE11EF8FCA6367762E951A.roa
File: 84FAB372A4CE11EF8FCA6367762E951A.roa (raw, json)
Hash identifier: JKKMy2EPvCSRt45gUCzlahWmgW19sReVtiZ2xoOo0J0=
Subject key identifier: 55:FB:1F:0A:30:46:4F:0A:FC:49:F8:12:3B:C5:BC:92:12:A4:33:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FAB372A4CE11EF8FCA6367762E951A.roa
Signing time: Sun 17 Nov 2024 10:27:17 +0000
ROA not before: Sun 17 Nov 2024 10:27:14 +0000
ROA not after: Mon 25 Nov 2024 10:27:14 +0000
asID: 9009
IP address blocks: 154.95.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69282 (0x10ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:27:14 2024 GMT
Not After : Nov 25 10:27:14 2024 GMT
Subject: CN=6739c505-7c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:45:ba:73:6e:d3:f9:e2:7e:fa:68:b9:c0:
a5:ed:87:32:44:bf:65:d1:34:f2:fb:61:d8:e4:4e:
92:c4:0a:b0:9b:0e:46:e8:5d:c7:b7:53:a5:bf:44:
18:05:81:87:f8:e8:ef:0e:47:27:01:ae:50:64:a5:
08:13:97:74:df:6c:08:bf:69:dc:f2:7c:49:80:7f:
4a:4c:4f:c9:0a:f7:e8:15:b1:30:2c:ff:03:1b:06:
de:3e:f1:1b:e7:ff:45:c1:22:d9:85:00:33:fe:ab:
a7:17:7c:2b:b6:28:81:4f:4f:91:fe:41:35:36:21:
1b:e7:9c:48:cb:e8:0a:7e:fa:9c:4d:95:96:38:55:
c2:e9:e9:aa:b1:5b:d9:b1:94:19:3c:83:b7:61:88:
aa:59:a9:d9:41:bb:b8:6e:55:e5:fb:a7:2a:d8:11:
d4:f1:3f:f4:04:04:72:f2:9a:a6:2a:dc:c4:d2:83:
92:6b:5f:fa:27:fe:e1:f3:3f:97:1a:f4:a5:fa:77:
9e:80:65:f4:7f:8f:74:58:65:a8:e4:c4:65:f7:0c:
c1:33:4f:45:b0:57:52:d1:9b:07:a6:b8:2b:74:b5:
57:93:dc:f6:09:37:bb:c4:e5:1c:54:db:d8:b2:50:
6e:eb:ee:6e:2c:3a:03:26:8f:88:cf:2f:35:f0:a7:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:1F:0A:30:46:4F:0A:FC:49:F8:12:3B:C5:BC:92:12:A4:33:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84FAB372A4CE11EF8FCA6367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.0.0/23
Signature Algorithm: sha256WithRSAEncryption
19:34:4c:45:3c:3d:78:24:6a:8c:61:5d:54:e5:22:62:0c:a0:
db:05:49:27:55:a4:d8:7e:6d:ff:27:89:0d:d7:09:34:69:39:
05:93:08:2a:19:31:fd:e2:e2:3a:7d:4f:86:e6:f3:a5:73:dd:
8a:45:c6:53:74:58:05:af:5b:2d:c9:31:79:63:cd:84:f4:bc:
a8:a2:32:40:c3:33:c0:0c:d0:fb:f6:2b:83:79:70:b4:d4:45:
50:b5:39:1e:c6:19:d7:6e:9a:2e:bd:3a:9e:23:e9:71:6a:76:
2f:34:bf:93:9e:cd:d1:95:55:60:ed:e8:e5:7d:f8:4d:f0:20:
f7:6e:7c:d1:30:fd:47:c7:db:45:08:20:18:60:1d:ac:dd:3c:
36:c9:9e:73:76:2e:8b:a7:2d:ad:ea:9b:e1:22:0c:d7:f4:8f:
d7:2d:b8:65:5e:56:b9:15:7a:99:87:4b:06:ec:79:e3:a7:ef:
a2:53:ee:68:b8:a2:78:8b:18:42:9e:9f:83:1e:f3:9e:2d:de:
9f:60:d9:46:21:53:dc:81:6b:3b:ac:1a:66:d3:95:19:39:6a:
ee:b2:21:24:2d:a1:e3:b0:00:7e:4b:fa:7e:91:b5:d8:da:be:
28:9a:17:d7:6e:3e:24:89:89:04:b1:32:90:84:92:02:c5:58:
ac:75:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:54 2024 by rpki-client on console-fra.rpki-client.org