Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F061F432B911EFBE1EF5A3762E951A.roa
File: 95F061F432B911EFBE1EF5A3762E951A.roa (raw, json)
Hash identifier: V/RaKgyngHAyaWIoWM8GWM2Qa34hw7Cu3KlDHD4oE6g=
Subject key identifier: E3:CD:4C:76:AC:7D:92:2B:09:2C:85:EF:9D:FD:A0:8B:D1:B9:DF:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C641
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F061F432B911EFBE1EF5A3762E951A.roa
Signing time: Tue 25 Jun 2024 06:10:14 +0000
ROA not before: Tue 25 Jun 2024 06:10:11 +0000
ROA not after: Fri 03 Jan 2025 06:10:11 +0000
asID: 40065
IP address blocks: 154.88.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50753 (0xc641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:10:11 2024 GMT
Not After : Jan 3 06:10:11 2025 GMT
Subject: CN=667a5f46-002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:30:85:1c:c8:3b:56:a4:ae:bd:87:db:a2:
c4:d7:d6:ad:b9:2f:1b:78:b8:47:b1:da:c0:06:30:
e5:02:e4:d7:a9:fc:a6:14:c8:06:58:00:a9:a5:24:
eb:88:73:54:e6:07:1c:85:dd:3d:f6:8b:97:c9:ec:
23:a3:f0:45:cc:e8:36:cb:de:c4:76:a4:38:ec:76:
41:0d:f1:f9:2c:5e:ee:c2:cd:0d:eb:b4:74:64:91:
72:b4:fc:58:e8:ae:eb:73:92:da:61:8e:6d:c0:4a:
7c:5c:c0:07:dd:91:f9:0b:a8:95:e2:75:f7:29:aa:
26:08:f6:35:22:3a:08:a1:ff:ec:41:ea:99:08:16:
d3:98:fa:78:84:04:b4:02:78:ed:38:80:53:79:4d:
f7:f3:2a:94:74:27:3c:f9:5d:2a:e5:19:3e:7e:48:
f3:9a:5a:a4:df:ed:06:53:e8:31:e7:ec:20:d0:1c:
0d:48:df:77:79:51:d9:88:30:63:ea:ea:b1:c2:ff:
ac:3d:81:b0:11:d2:bb:9f:25:e1:99:9a:45:3c:4a:
30:7b:ab:24:01:dd:ae:ad:b2:53:ce:2c:82:d2:51:
09:13:92:c3:78:6f:64:7f:e7:8f:02:35:33:04:69:
f4:2f:e8:8c:8a:d0:3e:42:b3:90:dc:fd:99:17:c8:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:4C:76:AC:7D:92:2B:09:2C:85:EF:9D:FD:A0:8B:D1:B9:DF:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F061F432B911EFBE1EF5A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.4.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a7:f9:d6:0c:b7:7e:02:55:e6:5e:27:ca:02:d9:db:31:4d:
e7:d4:9a:7f:33:fb:f0:54:1e:6a:ba:63:f8:08:84:89:21:72:
8c:dd:a6:14:67:2c:f0:80:a5:d4:88:54:db:32:ac:4c:30:dc:
78:bd:39:bf:17:af:2a:80:d5:b1:7c:19:e3:39:9a:7f:eb:3b:
52:ab:b1:20:73:a3:9c:77:1e:2a:67:18:d6:20:c4:38:32:e4:
cd:20:ac:ea:c6:dd:3d:45:90:eb:1f:de:6d:c2:42:f4:15:a6:
7b:00:96:cb:0b:39:2e:9b:15:13:8c:92:7a:6d:80:6c:8f:f1:
6f:b5:e4:bd:1c:56:4f:34:99:a8:27:03:92:19:29:ac:70:15:
e2:36:20:41:bb:99:98:f3:d5:a1:9a:42:db:e1:fc:72:59:f7:
e6:c4:8d:67:5e:15:6d:0e:82:63:63:65:1f:d9:71:36:30:75:
d7:e2:63:bf:cc:a4:b0:c4:1d:36:74:64:16:58:90:f5:c4:1a:
88:10:a7:dc:18:67:0d:10:15:25:0b:53:cb:74:ca:5b:36:03:
67:17:f1:92:0b:b2:33:e3:84:4f:f9:2a:19:b7:93:51:c1:1a:
bd:c3:3e:4c:b3:6c:7d:92:2f:5c:e4:63:3e:3b:34:48:30:c7:
28:e8:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:24 2024 by rpki-client on console-ams.rpki-client.org