Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88CB0132A75311EFA88653B4762E951A.roa
File: 88CB0132A75311EFA88653B4762E951A.roa (raw, json)
Hash identifier: dchLEeIiC5sqeu69fyxrVGuMRIH26GtVTSnojnz0jA8=
Subject key identifier: 21:31:A4:A3:2F:56:26:1D:B5:0C:BB:FB:79:D5:E0:88:0B:37:92:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88CB0132A75311EFA88653B4762E951A.roa
Signing time: Wed 20 Nov 2024 15:24:29 +0000
ROA not before: Wed 20 Nov 2024 15:24:25 +0000
ROA not after: Sun 01 Dec 2024 15:24:25 +0000
asID: 151800
IP address blocks: 154.197.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69577 (0x10fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:24:25 2024 GMT
Not After : Dec 1 15:24:25 2024 GMT
Subject: CN=673dff2d-1e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:c0:9b:66:9d:8e:0a:d6:3d:75:29:97:35:
ec:16:27:81:f1:35:e5:ce:8f:c7:dc:da:1b:ba:c1:
99:85:ee:ce:d4:b3:8d:31:bb:4e:dc:f6:93:0e:4c:
72:e3:ac:bc:2d:2a:18:71:fd:6e:55:bf:96:f1:21:
36:93:5b:59:54:04:13:81:0a:a2:39:5a:af:27:74:
39:be:c0:dc:e4:95:e9:bb:09:6d:93:8e:c3:1e:10:
8a:8f:04:30:3f:50:68:cb:31:2d:69:8c:50:b0:32:
02:10:95:78:5b:08:5c:e9:1f:3f:3a:ab:a0:84:d8:
7b:f3:f0:c7:5f:80:ab:e3:f3:28:57:5b:eb:1d:17:
7e:3c:4a:3b:80:ea:08:99:1d:fa:af:6a:96:7f:85:
7b:0d:1d:12:f3:f8:f6:fa:20:7c:60:5d:fc:bb:94:
47:cb:32:6b:8d:e3:5b:55:da:be:79:8e:8a:c4:b3:
1e:90:93:ee:cc:0c:e8:f6:2c:ae:dc:34:f3:97:79:
dd:a6:51:06:73:8e:cb:b4:e0:94:f2:8e:e6:33:95:
bd:a8:93:60:e8:f0:54:66:24:72:90:3a:3e:84:3c:
e4:15:87:43:2e:07:6f:3c:fb:6c:ee:6c:9c:27:64:
db:78:8b:4b:20:0b:9e:e4:b8:52:ed:d2:34:b6:a3:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:A4:A3:2F:56:26:1D:B5:0C:BB:FB:79:D5:E0:88:0B:37:92:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88CB0132A75311EFA88653B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:05:5e:af:13:8e:7a:a3:be:7b:9c:65:d3:44:cb:28:b0:c2:
eb:a0:02:1a:f8:20:b7:34:ba:72:a9:18:c7:12:70:5a:e4:d1:
11:15:f4:78:4b:4b:87:9c:d2:05:80:33:64:7d:4c:56:a9:83:
ab:ab:e5:03:a7:51:4c:9d:5c:5a:e4:f7:e0:59:57:e4:ca:d7:
29:1a:90:6a:b7:9d:ec:64:3d:f9:7b:97:02:44:2c:17:52:38:
39:89:8e:37:05:e3:75:a3:4a:42:72:c1:c3:c7:95:9f:44:bc:
53:98:0e:a0:df:f4:7c:71:88:66:8b:53:3d:cf:42:ad:c1:54:
cf:4f:3e:1b:fc:21:bc:41:fd:83:63:46:e8:14:e5:4b:43:fc:
d6:c4:0a:ea:1a:b8:27:f7:00:12:52:02:b4:d3:76:79:70:29:
8f:7e:ae:a4:c5:1d:b0:9e:7b:82:00:a4:58:99:67:e7:32:da:
6a:89:ea:81:a9:e0:e2:a7:92:7d:32:bd:f4:14:55:17:ee:30:
33:5b:2e:2a:89:de:f9:de:3b:00:e6:57:9c:8e:90:52:d4:ca:
45:92:72:c3:02:a1:5a:b4:9a:aa:46:cf:f5:00:c1:67:1d:96:
46:b1:55:77:15:49:e6:33:62:22:96:62:fd:1e:6d:4c:34:07:
e3:55:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org