Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF32CACEA8EF11EFAC119958762E951A.roa
File: AF32CACEA8EF11EFAC119958762E951A.roa (raw, json)
Hash identifier: gIY2vtRrEN55laOoCdmcdSOjesBvElyFIFMzZEU6puY=
Subject key identifier: 19:80:4F:A0:C2:DC:9E:E0:D0:D5:6A:0F:56:1A:51:80:12:ED:97:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011143
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF32CACEA8EF11EFAC119958762E951A.roa
Signing time: Fri 22 Nov 2024 16:34:46 +0000
ROA not before: Fri 22 Nov 2024 16:34:42 +0000
ROA not after: Tue 03 Dec 2024 16:34:42 +0000
asID: 62240
IP address blocks: 154.195.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69955 (0x11143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:34:42 2024 GMT
Not After : Dec 3 16:34:42 2024 GMT
Subject: CN=6740b2a6-0de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:8f:13:3d:e6:72:ac:0e:1f:fe:b6:ee:7f:
d2:3c:a8:d4:54:46:ae:8c:e6:4e:10:5a:55:6f:78:
74:82:b0:b0:06:b6:1c:79:e2:a0:f5:e4:41:df:4b:
70:8f:29:b4:5e:ff:8d:93:02:77:76:87:bc:bb:30:
a7:4d:42:a2:a8:29:59:99:3a:50:a6:eb:b3:cb:be:
17:39:e4:84:6b:52:34:c7:25:54:4e:b6:f7:50:88:
c5:1b:14:a1:07:80:a2:5b:c7:8a:fb:da:18:9a:dc:
dc:09:93:e3:9b:b7:e6:c9:eb:3d:c0:e4:88:30:17:
a0:e1:be:63:bc:14:24:5a:71:a5:62:74:54:c5:db:
19:d3:1d:4d:eb:0d:94:cf:95:c3:8a:35:c3:8e:20:
f5:e0:58:a4:8c:57:ba:b4:09:52:89:fb:42:5c:b1:
94:11:2d:0d:8e:74:f4:ea:46:d1:0e:4f:92:aa:c0:
cc:ed:a6:74:54:76:fc:0f:7d:e8:4f:68:23:bb:bc:
cc:ee:d5:d6:c9:6c:02:52:e3:7e:01:f6:a8:15:2e:
39:5e:6d:3e:d9:d1:a9:8f:c7:d0:7e:85:e0:54:02:
c0:d0:7c:9e:e2:af:f6:33:f5:b2:d3:cf:7f:8f:83:
f2:12:73:2f:36:2c:b5:d8:65:24:d8:63:86:35:d8:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:4F:A0:C2:DC:9E:E0:D0:D5:6A:0F:56:1A:51:80:12:ED:97:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF32CACEA8EF11EFAC119958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.156.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a8:99:2e:3f:09:c1:53:ac:1f:c3:c8:57:40:1a:7d:af:20:
3c:2a:73:e7:07:ac:77:1a:9e:e1:44:2e:4e:5b:b9:94:71:1c:
1f:f5:32:92:6c:4e:3a:b4:90:00:3e:e0:71:85:b9:16:09:40:
b1:bf:5c:c0:90:ef:c8:dd:c3:3c:6b:db:a6:be:8a:a1:82:44:
7c:62:8b:3a:b3:d7:c4:be:82:5c:34:37:b5:f8:d4:d9:40:97:
6e:f5:4c:c3:9c:72:c9:e2:cd:25:19:2f:5a:41:b0:61:15:f7:
d3:b3:c9:32:83:0c:ef:cc:fe:73:31:f1:d3:4d:b7:19:72:4d:
95:1f:aa:7f:59:ea:38:5a:f8:36:86:13:5c:3a:c0:e1:3d:64:
79:d5:63:6e:76:07:33:ba:0c:00:3f:98:ef:c4:c9:ca:58:58:
53:f6:b2:d6:ea:85:93:20:ea:55:63:f2:f6:ff:60:70:63:2c:
41:8b:3a:1e:cf:02:07:e0:93:b3:42:e8:b2:bd:8d:0c:a1:60:
a5:41:a9:f2:79:10:b1:19:47:a3:fc:f0:f0:a8:b7:c0:bb:e1:
f2:c3:6e:04:21:9d:c5:36:f6:bd:41:d9:65:ec:21:49:dd:d4:
66:5a:20:81:e6:e8:c3:ca:b0:94:44:32:79:60:6d:f0:78:94:
59:33:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:29 2024 by rpki-client on console-ams.rpki-client.org