Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C015CC8A44311EFB4409775762E951A.roa
File: 9C015CC8A44311EFB4409775762E951A.roa (raw, json)
Hash identifier: r0Qc0OA9xwTy6ddcpM8ykBoZuuCiXnA8uIRvKr3fmkQ=
Subject key identifier: 9E:0E:33:FC:8B:FF:34:CF:B7:E7:B4:75:72:B9:53:7B:24:84:4C:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C015CC8A44311EFB4409775762E951A.roa
Signing time: Sat 16 Nov 2024 17:52:56 +0000
ROA not before: Sat 16 Nov 2024 17:52:52 +0000
ROA not after: Sun 24 Nov 2024 17:52:52 +0000
asID: 55933
IP address blocks: 154.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 17:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69073 (0x10dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:52:52 2024 GMT
Not After : Nov 24 17:52:52 2024 GMT
Subject: CN=6738dbf8-c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:6e:b4:85:dc:7a:8a:3e:cc:af:bb:f7:96:
ac:d7:53:38:e1:a7:d1:51:02:f2:8e:4c:f4:66:d0:
3a:fe:c4:94:a5:2b:d4:d5:7b:a7:80:10:b4:8f:ab:
0a:bc:4d:ad:e1:e5:26:4a:47:c3:8e:4e:1e:42:47:
3b:3d:b8:82:52:b7:5c:bf:10:c4:c4:8b:30:14:7c:
38:40:f8:b1:d2:6f:7d:f1:8a:75:22:d4:21:64:c6:
c6:8a:81:1b:28:11:39:d3:01:b2:36:81:90:24:4a:
e0:d3:4c:9c:da:94:44:55:a1:8d:59:43:35:2e:d5:
28:37:ec:5b:e6:9e:00:fd:3a:3f:4c:ba:72:ce:d3:
80:f5:0b:c9:11:11:e0:91:c4:f7:78:8e:e8:6c:49:
c1:58:37:38:89:7c:da:08:d1:33:8f:6e:5b:7d:17:
db:eb:01:c1:f3:58:9d:27:fa:f7:fe:c3:04:3e:bb:
34:24:92:7e:2f:a4:2e:f6:70:f1:99:37:1a:9b:83:
ec:e6:bf:f2:67:e2:5a:89:94:d3:e9:08:50:76:a8:
3d:25:ae:0c:a6:04:9d:d9:d3:5a:79:95:f0:12:df:
46:46:24:c6:19:1a:74:7c:34:84:51:71:a5:e7:2c:
d1:b0:8d:aa:3b:c3:de:ee:c8:d7:b9:41:9d:9c:27:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:33:FC:8B:FF:34:CF:B7:E7:B4:75:72:B9:53:7B:24:84:4C:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C015CC8A44311EFB4409775762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
91:25:f4:e1:27:7f:27:9d:0b:27:55:ef:44:4a:88:f2:4f:0b:
49:b3:ae:01:61:55:4b:e2:c2:f8:a3:fe:ae:f8:4d:58:5f:9e:
8d:c2:09:b8:65:c1:bb:92:4c:c5:9f:63:05:d7:c7:74:79:36:
02:58:77:01:68:43:a2:20:8d:a0:1a:51:02:82:7a:fe:3c:fb:
ec:12:21:ca:86:9c:68:d9:dd:8b:83:e1:f2:a3:c6:9f:37:4a:
48:61:dd:a2:58:ed:d0:14:e2:1b:63:94:c2:4f:b3:36:ad:49:
2d:0b:34:5d:fb:e3:9e:26:e5:11:42:1a:64:93:dd:c6:c4:e9:
a8:9a:90:a3:bf:6d:7e:03:14:de:8e:28:4f:3c:56:27:be:10:
fd:76:1c:92:ac:32:a4:61:89:b5:a4:47:b2:9e:68:f5:2c:ef:
db:93:5b:47:66:54:24:83:5b:75:dd:cb:92:35:51:52:7e:cc:
f0:d1:03:2b:d3:01:e3:a3:a4:81:ed:a5:35:12:a5:e6:eb:15:
8c:a3:d8:c1:0e:65:61:71:57:15:ee:1a:0c:98:1e:d9:5a:3d:
18:ef:c8:b3:05:48:76:98:1d:2a:25:85:09:2d:a7:0b:ed:8b:
c7:a4:66:26:ce:4e:e5:61:06:d5:13:a3:41:5e:61:b2:64:4f:
33:7f:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:40 2024 by rpki-client on console-fra.rpki-client.org