Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB5DBFEA19311EFA3DF178E762E951A.roa
File: 8FB5DBFEA19311EFA3DF178E762E951A.roa (raw, json)
Hash identifier: 7s53CPg7wgG/7yzbnBkBzjPGKwvr0tex0jmWhfOi8KU=
Subject key identifier: CB:09:BF:6F:65:05:18:9D:96:39:9F:89:7B:7C:B9:10:95:9A:DB:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB5DBFEA19311EFA3DF178E762E951A.roa
Signing time: Wed 13 Nov 2024 07:47:41 +0000
ROA not before: Wed 13 Nov 2024 07:47:38 +0000
ROA not after: Thu 06 Nov 2025 07:47:38 +0000
asID: 139057
IP address blocks: 154.92.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68765 (0x10c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:47:38 2024 GMT
Not After : Nov 6 07:47:38 2025 GMT
Subject: CN=6734599d-b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:55:04:7f:3b:7f:6c:8d:78:45:33:93:39:
d2:9b:d2:9d:5e:36:73:07:49:99:ab:95:e4:8d:7e:
63:68:7f:f2:59:bc:b4:d9:14:00:ad:03:79:2f:33:
84:77:54:ea:ea:8b:c5:3e:ac:03:21:bf:02:3f:b7:
62:4a:e2:d8:39:bd:ab:24:59:62:13:24:ef:9a:d9:
4a:61:b3:bc:42:6c:f9:d9:9f:3c:1f:9e:3e:c1:61:
0b:12:f9:86:af:1c:a3:4f:9c:5b:06:8b:2b:5c:04:
2e:e8:26:b4:3e:3f:c0:2b:0a:1d:f8:d0:93:b7:c1:
67:0a:a2:52:16:3a:83:4c:b1:e4:3e:ba:a6:8c:af:
aa:27:90:9b:ef:84:1e:01:38:35:2b:78:3b:9e:af:
bb:84:ea:51:e1:71:10:48:90:81:7a:36:bc:c3:97:
30:a7:3d:e2:5d:b9:99:88:e7:4d:e8:85:51:b9:af:
fa:f1:a5:67:b3:33:e5:cc:00:32:c7:da:1a:85:f2:
ae:ff:ba:25:e6:67:dc:f4:fe:bf:82:51:ad:97:e2:
1b:99:56:47:b5:56:4c:6f:36:57:94:98:42:7f:5c:
57:c3:e4:95:5b:fa:aa:a8:3e:38:ef:ee:3f:b6:e3:
04:58:cc:d4:05:4d:b2:20:9e:9e:4e:4f:34:c2:d9:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:BF:6F:65:05:18:9D:96:39:9F:89:7B:7C:B9:10:95:9A:DB:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB5DBFEA19311EFA3DF178E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.24.0/23
Signature Algorithm: sha256WithRSAEncryption
49:f4:1c:63:29:0f:ce:d9:ca:4e:57:9a:d3:54:d6:8b:08:ab:
c5:66:b9:4b:92:0a:b0:15:0b:cb:9f:d3:a4:dc:c6:c4:ae:39:
a2:1f:b9:86:a4:88:7b:c1:7a:b2:0d:c5:20:7d:3a:cd:01:19:
cc:53:be:75:1c:54:0f:4c:66:14:53:d6:2b:87:49:40:c2:a5:
c6:54:cf:c0:13:5d:dc:47:49:a2:a4:6f:2d:89:af:56:40:b5:
36:c3:cd:ed:a4:0b:22:8b:6c:f0:cb:3c:e9:d8:5b:cb:7f:4e:
c2:55:40:d8:4d:2e:1c:15:16:91:a2:a9:fb:42:5f:4c:ca:8e:
e9:00:a3:5d:ee:76:2c:89:ad:80:29:09:03:8f:47:38:b3:68:
9c:ca:38:c1:c0:32:cd:35:ab:a9:90:37:1c:f3:f5:79:c9:78:
26:6b:f0:bf:42:fd:16:a4:f4:0a:24:c3:cd:4e:ce:cc:32:6e:
cc:39:5b:af:08:df:93:97:13:0f:f0:b5:50:f8:0f:79:9c:93:
2c:9e:de:48:b1:71:7c:f6:5e:75:bf:56:2b:d2:68:e8:f6:b8:
86:e6:5a:5c:fd:2c:ff:95:22:b0:f7:bd:ec:7d:77:82:17:a8:
b5:a3:c9:46:cc:79:b9:20:fa:96:7b:46:a5:72:78:9b:d2:0c:
23:1d:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:15 2024 by rpki-client on console-fra.rpki-client.org