Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE98132A33911EF9AA61E7B762E951A.roa
File: 9EE98132A33911EF9AA61E7B762E951A.roa (raw, json)
Hash identifier: bFS6GOSrR4+YT/3VP9ivw4p8F6IThrDB6UhBidhosqw=
Subject key identifier: 10:D4:E2:EA:34:29:D7:71:0C:9A:B0:F9:40:F1:EC:34:CA:12:06:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE98132A33911EF9AA61E7B762E951A.roa
Signing time: Fri 15 Nov 2024 10:08:55 +0000
ROA not before: Fri 15 Nov 2024 10:08:51 +0000
ROA not after: Mon 25 Nov 2024 10:08:51 +0000
asID: 212238
IP address blocks: 154.207.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69004 (0x10d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:08:51 2024 GMT
Not After : Nov 25 10:08:51 2024 GMT
Subject: CN=67371db6-bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:5b:f8:b7:7f:cf:97:e3:d0:d6:a6:77:08:
f5:a9:1a:07:af:b5:c3:7a:6d:4c:ab:e6:af:23:0a:
9c:96:c3:64:4e:16:75:bf:6c:79:d2:2c:a4:8f:b5:
79:f3:53:7d:da:84:c1:f1:6d:9a:4e:db:f3:fd:4e:
f2:31:c8:80:75:fa:0f:d8:5a:aa:ce:b6:34:c2:fd:
6d:ee:46:32:d9:2c:c3:03:17:ee:07:a4:47:6f:7d:
60:5c:3f:ee:84:ea:06:f7:31:d0:d8:3b:bf:b6:7d:
02:e6:a9:2d:6e:9c:33:53:b8:f9:78:17:80:32:1d:
7c:58:a6:5e:8b:a3:2c:db:c2:0e:4f:86:47:41:c6:
7f:2d:a8:2b:86:58:c2:80:86:b0:10:10:fa:52:4d:
58:99:79:a3:89:95:2a:52:de:5b:2b:bf:6e:f7:d3:
ab:86:32:9d:4a:67:89:b0:7d:4c:da:f7:e2:cf:46:
6e:0d:94:d6:61:f7:10:51:6b:44:94:5b:7f:0a:23:
93:7b:e6:c0:f4:ab:db:37:5e:09:1f:21:75:eb:a5:
a7:0b:31:a7:f6:18:1b:01:f1:c8:f9:1c:48:77:10:
88:99:3e:d4:73:39:d6:2d:43:52:d6:de:1b:84:13:
b7:5c:02:50:69:f4:18:b6:01:ff:d6:9c:3f:83:7a:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:E2:EA:34:29:D7:71:0C:9A:B0:F9:40:F1:EC:34:CA:12:06:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE98132A33911EF9AA61E7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:a4:82:83:11:11:a9:7c:fe:45:e6:61:b0:eb:b1:9b:5e:a0:
f7:12:f3:ca:bb:8c:ff:6b:fc:05:29:aa:13:91:f6:ae:a5:36:
56:c1:4d:03:d3:0d:bf:d0:16:e9:84:d2:32:5b:7c:33:a4:30:
48:a3:aa:31:e6:e5:da:a9:ab:e7:a7:70:69:9e:09:6b:d1:5a:
53:bb:7a:dd:7d:3d:b4:9a:89:dd:b2:2a:11:86:d9:bd:dc:16:
f2:fa:20:e1:e0:59:f6:ad:b3:45:7a:48:ce:96:e2:35:5a:a0:
f7:52:e1:2b:f0:80:d2:20:ae:17:4a:97:b8:cb:c2:5c:a1:91:
1e:88:20:3f:99:14:0f:07:96:94:4c:a3:c9:bd:a1:76:bb:f8:
ff:49:ff:e3:95:ec:41:ea:49:0d:02:36:2c:cc:ec:58:7f:a8:
d0:94:f5:f5:e4:00:bb:e0:78:ad:3b:15:56:ba:e7:1b:de:de:
bb:ab:4b:9c:09:28:0d:66:45:ff:2a:b4:7a:31:75:fa:9e:fa:
54:cd:21:7f:8a:d6:25:34:c1:20:ec:3b:d5:2e:aa:2a:96:19:
55:a1:b9:a7:c2:9c:f9:93:38:8f:fd:64:6b:1f:4f:44:e9:d4:
ee:65:3c:75:2f:f2:1b:c3:1a:31:e0:d6:0d:7f:ab:b9:8b:4e:
19:cb:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:18 2024 by rpki-client on console-fra.rpki-client.org