Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D239DA6A71D11EFB0057665762E951A.roa
File: 8D239DA6A71D11EFB0057665762E951A.roa (raw, json)
Hash identifier: Sr2ZlPO2sKgn9nHbeQxjaX8WNO0l1XQFKkFshAcWRZ8=
Subject key identifier: 85:C0:F1:8E:9C:E3:0E:0B:F9:FD:81:DC:C5:01:6B:A8:B4:F3:EA:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D239DA6A71D11EFB0057665762E951A.roa
Signing time: Wed 20 Nov 2024 08:58:04 +0000
ROA not before: Wed 20 Nov 2024 08:58:00 +0000
ROA not after: Thu 05 Dec 2024 08:58:00 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69447 (0x10f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 08:58:00 2024 GMT
Not After : Dec 5 08:58:00 2024 GMT
Subject: CN=673da49b-bf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:c2:a6:45:b0:c9:99:cc:57:df:0c:4a:8d:
b2:5b:88:27:c7:a1:c9:d3:4f:b6:ec:a6:9b:a3:c2:
3e:bf:2e:44:3b:1c:b7:01:5b:26:2b:16:a6:83:48:
7c:6a:d1:7c:fd:29:76:a6:88:58:47:9b:ec:71:4e:
6a:28:85:b6:01:23:4b:56:84:04:28:19:c7:89:3e:
f4:09:53:fe:fb:f6:4d:bf:9e:12:4a:56:24:c4:bb:
08:38:ea:2e:5f:21:26:f4:51:98:e3:cd:84:57:63:
0a:28:9f:d8:0a:4c:3c:08:1e:6e:af:71:3b:25:8e:
40:fd:78:2d:1e:80:ea:55:5b:f9:db:3c:81:84:b8:
33:bb:c1:3b:85:1e:5d:2a:7f:70:86:52:74:66:34:
d6:86:7e:de:6c:3b:59:56:77:e7:25:a6:10:c7:e9:
38:68:eb:89:a4:7f:b5:1b:d2:b4:e1:12:34:ca:fc:
97:c3:01:96:9b:f9:01:d8:bf:b0:77:c8:bb:67:72:
e5:5f:1a:c2:87:76:05:11:97:51:ff:20:7c:fa:8c:
92:17:a6:4a:18:9c:9c:3b:bd:f6:39:5b:37:fd:dd:
16:8c:83:98:7a:95:d9:9f:05:83:a7:48:40:38:00:
91:f3:b6:c5:55:cd:ec:63:53:35:30:45:99:69:f0:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:F1:8E:9C:E3:0E:0B:F9:FD:81:DC:C5:01:6B:A8:B4:F3:EA:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D239DA6A71D11EFB0057665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
08:51:0b:d7:16:bf:ae:7f:18:d5:da:b3:6e:dc:b7:c9:cd:4b:
07:ab:f4:4b:ab:92:bd:4f:7c:24:03:f1:45:bf:74:ca:72:9c:
0b:b3:5a:b0:fa:c3:a2:b4:3b:d2:79:a0:db:e4:f7:0f:3b:f3:
a3:ea:7d:c8:be:44:d6:84:1b:e3:81:0b:04:7e:51:f9:c1:97:
56:54:06:4d:c7:14:93:f0:29:f9:1b:71:f6:d9:d4:67:fd:52:
5f:8b:ff:a3:60:60:2e:6e:45:86:05:bf:73:59:fb:4b:30:47:
b9:95:78:d6:fc:50:46:24:10:3a:ec:06:77:2c:6c:60:2b:58:
c6:2e:95:69:3f:94:5a:70:18:d2:c0:ea:69:68:cb:29:7a:70:
f3:f9:e2:93:b2:5c:b3:c4:d7:f1:cd:cf:1d:60:6b:ca:05:34:
81:36:ef:52:ce:5d:98:cf:fd:e5:70:a2:ba:02:ff:d7:12:12:
89:9c:49:14:79:d6:af:d2:25:0a:67:fe:21:12:77:e2:3e:3f:
9e:56:9c:7a:49:4c:19:cf:c6:35:ab:a4:72:35:a6:32:08:45:
0d:2b:2a:7f:62:4b:e7:16:c3:bf:31:06:e5:40:99:9d:0a:fb:
f8:54:90:b5:a5:b6:28:54:fd:90:9a:de:b9:e4:07:51:81:2d:
1c:f1:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:56 2024 by rpki-client on console-fra.rpki-client.org