Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96105C4A7B2311EF994BA6AD762E951A.roa
File: 96105C4A7B2311EF994BA6AD762E951A.roa (raw, json)
Hash identifier: NRO4NYrrtM5Er/+8wZ9VTW1Ex1MsBU1fQSSkB4OakLk=
Subject key identifier: BC:9C:98:FF:0A:C9:7F:1C:BB:B3:24:89:4C:D8:95:6C:BE:8C:3A:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96105C4A7B2311EF994BA6AD762E951A.roa
Signing time: Wed 25 Sep 2024 09:50:24 +0000
ROA not before: Wed 25 Sep 2024 09:50:21 +0000
ROA not after: Tue 07 Oct 2025 09:50:21 +0000
asID: 209242
IP address blocks: 154.94.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62320 (0xf370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:50:21 2024 GMT
Not After : Oct 7 09:50:21 2025 GMT
Subject: CN=66f3dce0-3fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:3d:04:64:8e:74:31:09:ed:1d:1d:d8:77:
4d:f9:6c:fa:d7:18:db:39:df:71:87:e1:1d:e0:ed:
e9:c2:86:27:56:28:db:29:8a:54:a5:87:7d:2e:45:
68:50:17:98:54:e6:0d:a5:b6:b0:a9:c4:46:bd:0c:
01:0f:fa:36:73:f1:a2:1a:19:d9:7b:3b:a7:73:dd:
e0:49:bb:48:f1:fb:e6:5a:3a:27:22:58:dd:65:bb:
d7:c1:57:97:5f:eb:d3:b4:75:28:6c:c9:6d:ae:4d:
12:39:32:81:fb:f0:ac:f8:3d:3e:aa:88:30:bc:ee:
36:bc:d4:7d:f3:93:f9:37:5c:32:7e:11:aa:19:7b:
21:49:5b:65:36:59:7b:76:2c:12:b0:02:d5:87:4e:
83:f5:e0:e2:45:6d:67:55:fe:63:d2:a7:0b:25:ac:
9f:8b:45:a9:58:24:b7:c7:ae:95:42:77:79:5c:ef:
a6:b9:d3:48:bc:7f:95:72:4b:aa:f7:30:f7:2f:6a:
8d:a3:43:4a:97:b4:87:4d:4a:22:c6:7f:0e:d5:59:
22:77:bc:00:06:90:ad:4b:50:0d:a2:03:2c:b0:35:
71:41:ce:52:42:37:27:50:fc:22:52:62:b7:d2:14:
8e:7a:f4:6f:c3:0d:8d:0d:42:ed:75:a0:68:b8:be:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:98:FF:0A:C9:7F:1C:BB:B3:24:89:4C:D8:95:6C:BE:8C:3A:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96105C4A7B2311EF994BA6AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.8.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:78:b5:40:5e:98:1d:7a:07:e6:07:03:34:dc:2c:07:32:1d:
ce:0d:87:49:2d:60:6e:9a:a0:08:f0:99:dc:77:db:d9:18:ed:
ff:92:74:51:2f:25:b4:90:e6:d1:2c:37:00:0e:18:67:42:65:
72:6e:e4:47:42:d0:e1:2a:4a:b6:08:42:38:37:dc:66:80:02:
4d:5d:ae:5a:91:06:76:cf:fc:23:a4:7a:77:a6:aa:99:f8:7d:
70:31:51:00:e7:de:b7:b0:ef:e1:46:01:a1:66:3f:31:0d:03:
68:4b:c2:28:8a:52:16:21:0a:55:7d:b2:2b:89:f7:62:60:21:
c4:86:18:94:e3:07:e1:c7:d5:db:13:f9:79:9c:05:e1:4a:c5:
9a:09:82:4a:87:51:bf:a5:60:b9:37:c3:b8:20:4a:ff:4d:9e:
aa:3f:75:79:da:65:1c:a0:4b:81:63:23:6d:66:ae:af:71:95:
13:8b:d5:bd:18:4a:ec:4b:a9:44:c2:92:6a:de:7b:b6:8d:2d:
37:a3:a4:cb:6d:e6:6a:39:d5:2c:a1:fd:aa:ac:5d:e4:e8:13:
6a:00:00:46:41:d4:6f:8b:d5:d7:22:62:e3:06:4a:ad:ee:b9:
b2:32:43:ec:65:73:bd:a1:3b:6a:53:7b:c3:3d:8c:45:b3:6a:
76:ae:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:18 2024 by rpki-client on console-ams.rpki-client.org