Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894C3F04911E11EF9E800AAF762E951A.roa
File: 894C3F04911E11EF9E800AAF762E951A.roa (raw, json)
Hash identifier: LZ99JbYDhR5hi+C6QUc+LbdyV4QCu1v3X4AtqQuW2Ok=
Subject key identifier: E5:25:4B:BA:91:44:6B:3D:A0:2B:56:42:73:DE:0A:90:C9:A2:B3:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894C3F04911E11EF9E800AAF762E951A.roa
Signing time: Wed 23 Oct 2024 09:09:41 +0000
ROA not before: Wed 23 Oct 2024 09:09:37 +0000
ROA not after: Tue 26 Nov 2024 09:09:37 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65770 (0x100ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:09:37 2024 GMT
Not After : Nov 26 09:09:37 2024 GMT
Subject: CN=6718bd55-5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:15:e5:3f:95:7f:1c:44:e5:1a:d8:cd:7a:
d3:ff:bb:aa:a5:9c:b6:bd:3b:93:6b:57:20:45:b3:
65:91:a5:64:23:83:fc:a9:0d:63:ab:8d:f7:69:91:
55:be:9f:26:86:36:c3:b3:b7:1c:10:b4:a3:06:14:
9c:db:69:fe:f6:ae:31:08:22:1d:d7:56:a8:62:ad:
a1:0f:6e:e7:a4:9a:ba:a1:cc:d8:10:84:2e:b0:38:
f9:e2:4d:26:ac:d0:86:0b:49:db:44:1d:b0:06:66:
46:5a:3f:41:9c:a2:ce:a1:3a:90:dd:43:b5:ce:9f:
d8:31:5c:65:69:ac:3e:3c:52:68:63:94:37:fd:63:
a6:b4:d2:27:26:32:fd:23:8c:55:85:81:63:3e:19:
65:9a:2b:15:53:18:41:36:57:01:f0:64:66:5a:09:
98:d9:a3:d0:b3:d0:c4:cc:72:ac:21:50:37:46:b1:
19:ca:1d:ef:f2:72:d9:0d:27:7e:23:f0:a8:6c:90:
3f:97:71:c5:af:07:84:f4:0f:3e:6a:37:98:fe:9c:
ad:8b:c9:e4:5c:bb:3d:6d:7a:29:9b:fb:4c:4e:b5:
8a:60:2a:52:f1:e2:7d:fa:c1:e2:d8:63:46:4e:f5:
fe:2a:19:b0:ce:63:33:86:e2:35:e0:3f:4f:6f:e1:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:4B:BA:91:44:6B:3D:A0:2B:56:42:73:DE:0A:90:C9:A2:B3:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894C3F04911E11EF9E800AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
48:88:21:0e:27:3f:21:a0:d9:46:fd:1c:8b:e0:7b:f1:bc:c2:
8b:58:cc:d8:9f:54:0d:93:d2:ed:e2:05:e2:30:af:58:ce:0e:
aa:60:d0:cc:71:b8:71:90:ee:5c:81:83:b4:64:b9:e8:11:b2:
73:da:cb:53:fe:24:78:d2:85:ae:05:f5:e5:08:c5:1e:18:ab:
c8:8b:c9:c3:69:a2:8b:3b:a0:67:09:41:c5:7a:18:ea:c0:df:
19:f2:eb:a3:c6:85:23:ee:6e:3b:bd:5a:2f:60:fc:3b:3c:b8:
c5:59:ef:e3:52:08:c5:9a:3e:d7:f7:ae:6a:3d:af:a8:5e:b3:
fc:7d:e4:16:f8:76:93:5c:02:eb:a0:46:5a:8f:2e:97:f8:58:
1e:c6:f3:a7:7c:eb:a1:ba:4e:23:c6:8c:34:95:bf:4f:f8:4f:
fc:fe:4b:91:ea:1f:f1:6d:ec:17:c3:1d:d2:0c:6f:6c:6d:7b:
ba:63:16:da:83:42:37:2f:c6:08:1e:06:0b:7c:8b:4f:3f:d0:
fd:d8:02:fc:39:bd:0e:8a:fa:20:12:d4:05:6d:9d:a0:79:88:
95:7f:36:83:ef:8a:cb:4a:c4:e9:70:b5:98:5c:3d:0b:23:e1:
99:f7:ad:d6:e5:07:2e:c1:b0:6e:2c:a6:d8:62:36:66:b3:92:
00:a0:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org