Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CFACE8292B611EF809946BA762E951A.roa
File: 9CFACE8292B611EF809946BA762E951A.roa (raw, json)
Hash identifier: poy90S7sS32C12eMcO4WPSO6HX0f+O+IPQf/q6CPOa4=
Subject key identifier: 3A:22:39:7F:51:2F:DE:6A:9C:B9:C6:B2:89:37:90:C0:5F:B9:18:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CFACE8292B611EF809946BA762E951A.roa
Signing time: Fri 25 Oct 2024 09:50:49 +0000
ROA not before: Fri 25 Oct 2024 09:50:45 +0000
ROA not after: Sun 01 Dec 2024 09:50:45 +0000
asID: 202656
IP address blocks: 154.219.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66052 (0x10204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:50:45 2024 GMT
Not After : Dec 1 09:50:45 2024 GMT
Subject: CN=671b69f9-036c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:9f:0d:6b:84:16:b6:e0:3e:0f:3e:78:6e:
24:fd:ea:2f:b2:71:37:81:a6:eb:99:86:f3:a5:65:
d4:42:6e:6c:27:ef:b0:06:0d:3f:43:58:6e:33:8e:
c6:5a:7d:69:9e:76:dd:b3:5a:74:46:30:3d:df:60:
66:d5:8b:b0:6e:6f:56:7d:ce:eb:7b:56:c8:0e:63:
b2:58:06:2a:c4:d8:de:0d:d0:6a:61:24:6c:ed:57:
ab:03:2b:20:f0:f5:48:5e:4c:5d:4b:52:a2:19:27:
9d:c8:17:c6:58:ae:06:64:41:e3:b8:a5:7f:0a:8d:
25:e9:f5:91:6c:28:fa:07:57:32:ab:98:46:5b:5b:
c9:7f:8a:3c:a5:75:33:e3:7b:cf:9b:1b:25:9c:2c:
ee:46:15:3d:cc:c7:bc:a7:f9:cb:49:c1:bb:21:85:
35:f1:e7:8a:c9:b3:a9:28:b5:37:25:09:7f:28:0c:
d7:a9:85:ff:b7:e9:1e:4a:f2:37:d1:66:fe:ed:7a:
15:41:78:97:54:ce:95:f9:e1:75:75:91:6f:14:b0:
6f:35:45:e9:1a:5d:c8:fe:83:fc:66:1e:d6:90:13:
9f:ba:47:63:e7:63:ca:8d:75:1b:f6:41:77:1e:a4:
cf:34:6b:69:a3:32:67:35:96:a3:a2:ac:11:0f:ff:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:39:7F:51:2F:DE:6A:9C:B9:C6:B2:89:37:90:C0:5F:B9:18:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CFACE8292B611EF809946BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.16.0/20
Signature Algorithm: sha256WithRSAEncryption
45:13:45:4f:6a:a3:8e:14:84:ae:51:77:67:a4:25:60:a1:79:
03:89:07:f6:de:95:68:98:65:e6:07:04:3c:e7:72:0d:72:ed:
79:b0:7b:a1:93:1b:d7:88:43:7a:d9:51:42:3c:60:51:eb:04:
80:34:c2:f2:56:4b:80:bb:c4:51:8f:21:78:cd:16:f4:2d:9d:
9c:26:4f:08:f1:2c:cc:fe:2d:be:65:93:3e:be:05:ed:cb:39:
56:a9:a6:28:b9:41:a0:12:a6:79:bc:01:44:be:38:39:9b:a9:
a0:75:05:4c:ee:ee:e8:f0:ab:0e:f7:e6:8e:28:2c:e6:cd:d3:
93:40:22:ad:59:9b:9b:b2:f4:86:22:24:2a:10:da:d3:14:66:
a9:e1:89:74:92:42:a4:4d:a3:75:85:49:c1:94:8f:80:1c:91:
8a:6a:0f:d3:a4:9d:e3:8b:b4:76:d3:2f:63:4f:ef:7c:40:e0:
18:ec:61:32:a8:c5:7c:27:a5:1e:c6:2c:55:98:8d:db:f0:94:
15:7e:e5:7f:18:b8:40:77:1e:25:3d:b3:40:b6:f8:81:4b:41:
42:42:27:72:da:90:f4:16:b8:eb:5c:e9:59:47:23:57:19:e6:
3c:b3:e9:c2:ea:e2:c9:3b:80:ef:a2:37:2a:eb:21:70:9c:6e:
7a:38:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:41 2024 by rpki-client on console-fra.rpki-client.org