Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936F5D7AA0E811EF83F683AC762E951A.roa
File: 936F5D7AA0E811EF83F683AC762E951A.roa (raw, json)
Hash identifier: EMoseaksn2ugZEurUyIdr2+cGoqsFP5MqczHHmrd7Xk=
Subject key identifier: 23:46:B4:0A:DE:00:A2:85:13:B1:40:DB:E4:56:A1:CD:05:C8:27:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936F5D7AA0E811EF83F683AC762E951A.roa
Signing time: Tue 12 Nov 2024 11:23:44 +0000
ROA not before: Tue 12 Nov 2024 11:23:40 +0000
ROA not after: Fri 22 Nov 2024 11:23:40 +0000
asID: 51396
IP address blocks: 154.213.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 11:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68718 (0x10c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 11:23:40 2024 GMT
Not After : Nov 22 11:23:40 2024 GMT
Subject: CN=67333ac0-9f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:12:dd:43:b6:84:ae:6c:50:b8:fe:c5:e6:d1:
61:6e:c5:a8:70:95:81:21:07:82:e2:f5:4e:51:0a:
f2:10:8e:02:f8:a5:f4:29:4c:c7:b9:93:03:38:86:
f5:e3:50:11:4d:08:64:6f:9b:05:e8:65:3a:99:f1:
ac:13:af:5f:6a:e3:39:ee:c2:1a:89:43:86:32:0e:
78:fc:e9:eb:45:be:57:02:0a:a2:be:91:b5:54:da:
04:d8:e7:65:04:e6:8d:23:09:0d:83:90:eb:1a:15:
b4:9c:7d:99:ee:74:c4:5f:45:35:da:4d:15:18:30:
f1:94:7a:cb:15:46:88:86:15:63:e5:c1:f1:12:9f:
0d:81:e3:40:a5:d0:ae:8f:4a:26:fd:e7:b6:63:c4:
e4:62:d5:47:55:73:ab:ef:da:6c:18:2d:e8:0d:4d:
d3:12:6d:60:ec:a1:b7:26:d8:91:46:40:dc:ec:76:
4c:21:04:4e:a7:e0:db:b8:1d:f1:8a:ae:47:3e:21:
56:a3:5a:05:a5:f4:45:06:fd:ba:2c:83:ce:bb:3d:
dc:b8:f1:f4:3b:3b:6c:98:52:ac:4c:5f:6a:17:fb:
d6:1d:90:43:84:fe:89:c1:09:aa:2a:db:88:93:6b:
75:62:2f:54:dc:33:9f:c5:5f:a7:f8:4e:48:c0:f0:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:B4:0A:DE:00:A2:85:13:B1:40:DB:E4:56:A1:CD:05:C8:27:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936F5D7AA0E811EF83F683AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.184.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:76:f2:9f:67:ed:17:c9:5e:a8:2b:e6:f5:61:db:e5:06:85:
26:bf:d4:3a:a3:98:e7:ce:32:7f:02:c1:02:43:20:15:1b:52:
95:91:59:25:e4:3c:69:d7:44:8a:12:75:42:e7:06:c9:64:64:
c7:71:f0:53:01:5f:3d:54:cd:2e:96:9c:f6:6c:b3:d5:85:70:
db:74:a4:9c:b9:32:ff:ce:9e:1e:2b:fc:b3:09:20:ec:d0:2a:
73:4e:84:ca:48:52:42:59:f7:f3:33:05:fc:ff:a5:cb:13:f0:
62:3e:81:8a:2a:34:73:07:49:11:6b:68:a6:85:77:40:ac:f2:
2b:0d:75:d0:25:76:bd:3f:5a:1c:51:71:4b:14:c7:ed:7b:33:
4a:65:3b:12:a6:f6:d1:e7:b1:41:42:1e:7f:16:3d:90:ad:fd:
35:a4:c6:ab:50:e2:01:df:e0:69:35:a8:49:d4:5b:b4:84:64:
d7:9f:27:8a:a8:e6:16:51:6f:c4:7a:5d:df:d6:bb:0b:9c:fd:
0d:04:7f:bb:ae:be:97:93:51:e4:73:63:f0:70:f9:9e:e0:53:
76:2b:8b:78:ef:70:46:a0:04:f3:42:b4:f5:77:54:3b:7d:0b:
4b:e5:79:f2:03:e8:8c:aa:a8:35:0b:fb:a6:50:15:14:8e:d2:
6b:ec:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:57 2024 by rpki-client on console-fra.rpki-client.org