Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABDF1C4A8E411EFA2300092762E951A.roa
File: 8ABDF1C4A8E411EFA2300092762E951A.roa (raw, json)
Hash identifier: JS4rFbIYP7p2IxDkn78PnDKVyBpSAVDLraKucm7rRXI=
Subject key identifier: 2B:30:B0:83:1C:D8:A6:7C:E5:54:9A:D9:A7:33:6E:09:C1:07:35:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABDF1C4A8E411EFA2300092762E951A.roa
Signing time: Fri 22 Nov 2024 15:15:01 +0000
ROA not before: Fri 22 Nov 2024 15:14:57 +0000
ROA not after: Tue 03 Dec 2024 15:14:57 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69821 (0x110bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:14:57 2024 GMT
Not After : Dec 3 15:14:57 2024 GMT
Subject: CN=67409ff4-b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f0:da:09:52:dc:e0:88:92:4a:de:03:b3:ce:
57:72:3a:cf:cd:b2:03:cc:b7:18:e2:7f:52:53:61:
13:98:2d:81:48:4d:15:ed:10:fc:70:95:3d:a7:2b:
1b:76:cc:07:8b:2d:3b:2b:18:ae:73:ac:ac:49:33:
62:b1:22:f1:c5:15:92:6c:95:9d:93:ac:44:01:eb:
06:03:49:31:b9:97:23:4d:ce:8f:e5:34:1b:fd:e3:
78:d5:2c:83:bd:fa:24:b3:84:10:83:44:e6:ed:6a:
4d:00:94:82:76:90:74:1d:38:e9:37:c0:0f:3f:ef:
31:13:28:0b:9d:cc:8d:5a:54:3c:1b:49:bc:da:27:
c4:81:6c:ef:20:be:e1:39:00:a5:bd:36:5a:46:2d:
b3:4d:6b:65:8e:57:4d:2b:94:6d:c3:b8:fe:97:bb:
ce:b8:f0:ed:aa:cc:74:b3:73:c1:06:ac:81:36:34:
d0:84:37:01:b4:f3:67:53:78:5b:88:00:0c:12:cf:
1b:a2:e2:b5:29:fa:ee:5e:29:4b:d8:56:f7:34:ae:
4c:44:d3:50:d0:f3:00:13:cd:3e:fe:64:40:6e:d7:
85:bf:7c:ed:83:22:0b:fc:9b:83:de:55:8f:70:8d:
48:46:b6:22:fa:21:5f:8e:40:a4:24:83:50:f3:fa:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:B0:83:1C:D8:A6:7C:E5:54:9A:D9:A7:33:6E:09:C1:07:35:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABDF1C4A8E411EFA2300092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
22:b5:a5:c5:ab:7b:ad:62:26:68:50:44:5b:d2:49:42:28:51:
e3:2c:6f:e3:aa:2d:f1:e9:0d:07:e1:41:4c:2d:de:92:4b:f6:
27:c4:86:7a:dc:de:f1:e9:ca:4b:46:c3:c7:a3:1a:2a:b0:0c:
88:36:c5:95:d2:0a:c4:46:75:08:ea:51:d4:96:4b:c9:0e:87:
79:ea:c5:c3:b0:33:51:f6:21:86:e5:32:ea:f6:e7:02:1b:4a:
56:1e:a4:ee:16:31:10:d3:55:01:34:c5:5c:c3:89:a1:1f:cc:
80:c8:96:bb:19:c7:a3:dd:0c:71:75:7e:ce:cb:78:33:be:f7:
73:4e:b2:f2:52:96:ac:c4:60:14:99:6c:9f:f2:ad:da:f5:82:
4f:59:2f:6a:17:fb:ee:82:75:b7:5d:a3:20:cb:b9:b8:dc:31:
c4:c1:fb:df:a0:bf:dd:36:59:5d:0c:69:6a:d0:53:9f:bd:95:
66:7d:dd:33:34:9d:98:db:c9:3d:6b:18:cc:1f:6c:c2:b6:44:
89:3a:de:b2:e8:34:09:f9:e7:4f:d0:3b:a2:cb:d6:a9:ef:a2:
75:36:ce:14:fc:58:17:00:cc:3b:97:80:d7:c0:51:53:a9:c8:
40:7e:79:11:0e:e0:98:86:56:cb:81:b4:6c:8b:d9:9c:75:68:
f8:1c:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:22 2024 by rpki-client on console-ams.rpki-client.org