Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D191352A8DB11EFA8EB4F5B762E951A.roa
File: 9D191352A8DB11EFA8EB4F5B762E951A.roa (raw, json)
Hash identifier: G2PJF2tWvOA0ZM/vZ24Z1teVszgqyC9NQnmzL+FLrvk=
Subject key identifier: C2:C2:BC:DB:22:3E:8B:27:7C:8C:C0:5B:23:8B:5A:83:37:23:E4:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011051
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D191352A8DB11EFA8EB4F5B762E951A.roa
Signing time: Fri 22 Nov 2024 14:11:06 +0000
ROA not before: Fri 22 Nov 2024 14:11:02 +0000
ROA not after: Mon 09 Dec 2024 14:11:02 +0000
asID: 5065
IP address blocks: 154.206.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69713 (0x11051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:11:02 2024 GMT
Not After : Dec 9 14:11:02 2024 GMT
Subject: CN=674090fa-8e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:93:c7:06:e7:4d:63:22:45:f4:84:14:9d:
c8:52:b3:f9:af:25:cf:e5:37:91:66:89:f5:e7:3f:
c0:a8:77:1d:14:24:8f:ff:33:b6:63:e6:d8:72:c9:
bf:5e:2d:cb:43:8e:cf:4b:d7:90:0a:e2:c7:38:aa:
4c:92:ba:8f:d0:eb:4a:ab:ff:7a:1e:6d:75:30:4d:
34:a2:8a:2f:35:0e:35:b8:71:67:93:5e:64:5e:20:
85:8e:47:4c:e5:c0:a3:cf:41:05:d9:ab:eb:41:7d:
c5:a2:71:24:62:a9:0e:88:3a:34:53:70:ee:e3:e7:
42:d4:17:c6:07:30:08:f3:d3:25:74:8f:95:38:7d:
b3:0e:42:0c:4d:6f:8d:fa:b2:39:e1:ff:bb:7a:12:
c0:c0:2f:50:41:e2:ca:17:96:0d:da:54:81:aa:89:
6b:19:c4:de:1c:dd:8a:ae:51:7d:d3:b9:08:2b:fa:
57:3a:8a:20:ea:84:91:6b:bd:2d:9e:bf:ed:78:c3:
6f:35:47:42:40:8a:e1:3f:48:05:0e:1d:9b:da:da:
3c:ef:64:34:e6:af:59:45:95:c4:e1:df:ca:22:97:
02:7f:f1:aa:cc:af:c6:15:d9:44:1f:dd:f1:a6:ff:
9c:ba:db:71:6a:68:da:53:3b:04:9f:7c:3a:58:6d:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:BC:DB:22:3E:8B:27:7C:8C:C0:5B:23:8B:5A:83:37:23:E4:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D191352A8DB11EFA8EB4F5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0f:db:7e:af:5d:91:36:0f:38:8d:f5:57:18:83:67:b9:37:
64:d3:a1:25:21:93:da:11:bb:ae:e9:bd:9d:2c:92:82:a9:e7:
cc:aa:5f:b9:dc:80:1e:c3:50:3e:dd:d5:0d:e8:8c:77:f5:f4:
2e:c6:f7:ed:0b:df:7d:9b:1a:e3:08:33:86:cc:6c:1c:22:73:
7b:c7:64:bf:53:18:c8:cf:db:9d:da:bc:a5:e7:e6:7f:66:55:
96:b3:a7:1b:0f:29:c6:7d:26:ed:0d:cc:e4:c9:d2:9d:28:0e:
42:f1:74:20:f0:20:7b:68:6e:2a:09:04:fc:f7:83:67:d7:b8:
65:e9:38:ed:73:b2:d7:50:6b:a1:14:c2:5b:43:9e:92:fd:68:
15:18:2f:1a:38:23:e8:45:0e:e3:fc:9e:46:0c:5b:1a:99:4f:
34:94:d0:bb:9d:fa:a8:86:8e:fe:8f:a2:ca:9a:28:e5:62:f4:
a1:ba:87:a2:e6:98:43:d7:fa:d9:34:d9:21:53:ac:51:e6:e0:
a3:9c:e9:e4:c7:a4:3b:3a:71:69:87:7f:da:80:45:90:d0:89:
0e:fe:e8:4a:9c:6d:1a:ac:ed:36:73:ec:a8:0a:0e:c6:3c:4c:
f1:00:86:0b:64:e8:a6:4d:7f:91:24:54:dc:81:c2:d7:a8:09:
52:82:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:26 2024 by rpki-client on console-ams.rpki-client.org