Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893C8E5295D711EFA02F2671762E951A.roa
File: 893C8E5295D711EFA02F2671762E951A.roa (raw, json)
Hash identifier: oSpuZ/5uoSUwEtP9c9fHaIIB8EkU648Wg1wPSr0jRtY=
Subject key identifier: C7:59:9F:21:FF:EF:F0:8D:FC:A6:DD:FC:7D:2E:76:B9:A2:71:36:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010374
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893C8E5295D711EFA02F2671762E951A.roa
Signing time: Tue 29 Oct 2024 09:24:02 +0000
ROA not before: Tue 29 Oct 2024 09:23:58 +0000
ROA not after: Sun 01 Dec 2024 09:23:58 +0000
asID: 20473
IP address blocks: 154.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66420 (0x10374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:23:58 2024 GMT
Not After : Dec 1 09:23:58 2024 GMT
Subject: CN=6720a9b2-b0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:e8:e6:d1:d9:df:b2:d4:08:f4:d1:54:86:
4d:89:f8:70:a5:24:77:09:7f:42:87:54:e0:ed:e8:
0d:4f:0e:e9:4c:ca:ff:b7:4c:c9:e9:76:52:d3:68:
8d:e3:dd:55:db:d9:5b:a7:0c:0d:c0:f4:ac:c2:5a:
a4:0b:2f:ef:f6:2d:d7:11:6f:90:6f:50:c7:54:81:
2a:f0:2c:77:a2:e1:96:91:fc:09:45:86:70:dc:53:
ed:a0:84:5a:e9:0f:81:a0:ce:17:db:9b:95:10:c8:
32:e4:ca:b4:b2:63:41:c6:9b:bd:bd:e1:66:b1:7d:
31:67:77:72:50:90:91:7f:4d:d8:1a:70:24:14:cf:
37:3d:f4:ec:ef:18:06:1e:dc:74:c3:05:ce:7a:7c:
27:ea:eb:41:4f:24:42:fe:1b:9c:30:56:25:18:67:
b9:35:bc:56:bb:42:c5:1e:41:e8:2f:23:71:56:d3:
74:ba:1b:0f:aa:17:61:76:6e:cc:52:a7:16:46:01:
96:9d:72:cc:5b:04:cc:ad:41:a3:d7:47:1a:48:10:
16:69:61:98:76:dd:fe:be:1f:50:0f:ee:90:85:2b:
a8:aa:cb:f8:98:88:68:7f:9b:eb:b5:6b:31:2c:a4:
37:57:07:ee:b2:80:df:fb:94:e0:83:22:51:39:27:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:9F:21:FF:EF:F0:8D:FC:A6:DD:FC:7D:2E:76:B9:A2:71:36:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893C8E5295D711EFA02F2671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f7:75:6a:8a:cd:99:4d:c7:ab:5a:3a:97:36:15:11:20:68:
f5:e7:70:42:7d:5a:c1:bf:33:b9:1a:92:8d:66:d4:f4:85:f7:
7b:2f:01:be:f1:9a:93:d2:5a:0d:96:70:c7:ad:da:cf:87:7a:
43:09:f8:60:13:4d:82:ee:78:a2:6e:b7:2e:61:a6:4f:be:d2:
ac:d6:17:26:ff:7c:dc:09:ff:62:53:b6:52:b8:69:3c:80:90:
70:9f:e6:bf:24:8b:19:b1:ba:62:e4:6f:c9:9c:0d:e6:9b:3a:
41:02:34:03:61:01:42:15:27:3e:89:78:dc:8b:ab:2a:52:ba:
90:69:9a:7a:39:fa:30:f0:11:94:e0:f5:f3:78:50:9e:e3:48:
5b:a0:dc:48:44:f5:cf:5c:fe:0f:30:7a:69:0d:5c:4d:3c:40:
30:7b:57:d8:29:16:2e:1e:65:47:cf:3d:ef:00:bb:08:71:09:
57:b1:18:6a:56:0d:60:37:ca:68:26:1d:05:f0:65:ef:42:a8:
5d:33:55:97:9f:0d:64:32:48:94:a4:1f:66:03:28:44:27:f2:
88:c6:f2:f1:72:91:31:6f:58:80:e6:14:56:62:05:0a:51:16:
dd:5d:b6:02:e4:f3:75:af:33:c2:a8:33:17:a7:f3:a8:10:b5:
95:60:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:49 2024 by rpki-client on console-ams.rpki-client.org