Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC91DDCA8BA111EF8D2AA697762E951A.roa
File: AC91DDCA8BA111EF8D2AA697762E951A.roa (raw, json)
Hash identifier: /j/u36RQx37ygKijbhC/vxs5ufpc4mmr3ztClgt/jsk=
Subject key identifier: 51:A5:DF:9C:02:45:BE:7F:3D:0D:2A:9D:33:BD:19:CD:97:EE:D9:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FEB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC91DDCA8BA111EF8D2AA697762E951A.roa
Signing time: Wed 16 Oct 2024 09:33:17 +0000
ROA not before: Wed 16 Oct 2024 09:33:14 +0000
ROA not after: Wed 27 Nov 2024 09:33:14 +0000
asID: 20473
IP address blocks: 154.197.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65205 (0xfeb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 09:33:14 2024 GMT
Not After : Nov 27 09:33:14 2024 GMT
Subject: CN=670f885d-b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:11:f4:52:ba:7c:46:b8:07:0c:a0:e1:f3:
42:1c:7d:13:94:bf:19:03:95:8b:8b:dc:c9:ab:86:
3a:36:69:2d:d1:c9:ed:88:29:e1:40:6e:c1:6e:a0:
e3:cb:75:2b:87:8a:e5:df:59:6a:4a:b6:a7:4e:79:
58:81:0e:6c:c8:53:cc:1d:3a:43:f2:64:0e:a9:a5:
51:c4:d8:0b:c9:45:a6:f1:7d:bd:ef:bd:72:53:1d:
45:fa:52:11:e4:bb:70:5e:f5:7f:cf:eb:dd:ca:07:
ab:83:c8:32:b7:a1:52:9b:88:39:f4:9d:70:df:e6:
20:b1:cb:5f:47:10:10:bf:71:02:af:94:5f:51:9d:
af:e9:48:ed:9e:11:04:c0:d4:e6:9f:7f:4f:d3:ac:
1c:6f:28:05:36:10:f7:80:11:9c:b9:e8:4e:16:2f:
f6:84:16:6b:34:ac:c3:d0:90:29:c9:ed:d9:07:57:
0a:8d:ba:a6:13:12:a2:45:af:1e:69:65:20:df:d6:
02:28:c4:01:45:49:2b:84:cb:68:e9:00:0d:58:e3:
55:f6:a3:35:6d:68:43:c2:3d:84:0e:a7:d2:1e:0a:
f2:02:50:69:e0:1a:b8:f9:b6:1b:e3:dc:21:88:21:
8d:04:35:fb:38:fa:f4:2e:1a:b0:7f:a6:c1:59:85:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:DF:9C:02:45:BE:7F:3D:0D:2A:9D:33:BD:19:CD:97:EE:D9:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC91DDCA8BA111EF8D2AA697762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/24
Signature Algorithm: sha256WithRSAEncryption
50:af:43:83:43:a2:a8:81:54:a3:bc:18:ce:aa:88:0a:ea:c6:
54:21:cc:70:15:df:5c:60:5d:1a:1c:7e:53:a1:91:e1:56:8c:
c3:17:51:0f:8f:bd:30:73:a3:6b:2e:ef:b7:c4:73:a4:cb:46:
f2:78:81:f4:18:c4:f7:70:e4:5d:4d:05:d6:99:87:03:a9:e4:
8d:cf:35:84:21:35:e8:c7:48:1f:00:bf:98:97:dc:db:3d:c0:
4a:4a:8f:a1:f5:91:93:be:51:da:37:be:29:4c:2f:8b:73:61:
09:98:db:a2:54:65:ba:34:2d:c7:f5:e7:0c:1a:da:d1:fa:5e:
18:5b:32:a1:33:c8:48:37:ef:3d:21:d0:f1:5a:e3:f6:c4:d9:
c4:0d:d5:b3:37:62:74:9e:68:cb:9e:7c:7a:6e:68:4c:4c:0d:
e3:7a:53:23:e2:fb:34:a1:d3:5f:81:ad:cb:60:62:05:06:16:
7c:8e:05:de:0d:2f:e4:2a:89:bf:86:b7:ce:c1:24:33:97:9d:
57:82:a8:39:e5:63:63:9c:64:a8:2a:16:f7:85:48:b2:c6:fb:
da:9b:7a:72:19:69:16:42:7d:bb:ac:3f:cf:bb:73:5f:6f:de:
30:4c:d2:c0:96:e6:11:ac:5a:02:4b:7f:7d:9b:6f:3e:7f:5f:
5b:74:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-fra.rpki-client.org