Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55DE8B69F7B11EF8AEFC5B2762E951A.roa
File: B55DE8B69F7B11EF8AEFC5B2762E951A.roa (raw, json)
Hash identifier: aKs77YVFdnVCji5FLSE/EuFh3ooP4VNxPSfpolS4h+I=
Subject key identifier: D2:CF:49:83:C4:07:3D:62:61:DB:04:EF:7E:1D:F3:71:68:97:75:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55DE8B69F7B11EF8AEFC5B2762E951A.roa
Signing time: Sun 10 Nov 2024 15:51:54 +0000
ROA not before: Sun 10 Nov 2024 15:51:51 +0000
ROA not after: Thu 12 Dec 2024 15:51:51 +0000
asID: 394432
IP address blocks: 154.196.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68362 (0x10b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 15:51:51 2024 GMT
Not After : Dec 12 15:51:51 2024 GMT
Subject: CN=6730d69a-b8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:98:5a:aa:55:b0:35:58:1e:f8:a6:8c:0a:
c0:7a:57:77:52:7d:61:53:fe:8a:62:51:1d:53:67:
28:e8:eb:54:e5:8b:39:0c:e5:59:2b:a8:56:5b:f6:
24:c8:12:e6:0e:9d:5d:be:fe:08:64:4a:00:e9:62:
67:f8:7e:24:db:66:88:aa:d3:ac:b2:ff:6c:ce:e8:
77:65:a6:b0:6e:79:69:43:44:eb:0b:01:39:29:4d:
84:1d:94:53:a0:bd:97:85:76:b2:1f:78:c8:50:69:
f9:f0:82:e8:8b:79:c7:15:f1:6f:b1:e5:94:94:31:
e0:88:20:38:24:1f:ba:b6:83:b5:26:b2:06:32:97:
19:1e:9d:0d:4d:0d:84:4b:ec:8b:cd:80:68:d2:e8:
54:9a:b4:8d:d0:65:84:a3:d5:69:80:15:99:15:a2:
1b:8d:30:a6:de:89:58:cb:71:2a:75:c2:08:1e:4b:
0a:e1:39:7e:b7:84:38:ca:e6:55:38:b3:66:2a:e6:
9a:20:50:c6:29:07:53:2f:47:f3:91:b4:3a:fb:f2:
d9:b2:5d:b2:58:f7:69:82:fd:24:fe:ea:11:c8:84:
ec:2a:ac:3e:fc:2a:5d:f3:9e:c8:44:75:07:11:fd:
8e:52:1a:74:e3:81:b1:bd:35:ec:1b:da:39:2d:3d:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CF:49:83:C4:07:3D:62:61:DB:04:EF:7E:1D:F3:71:68:97:75:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55DE8B69F7B11EF8AEFC5B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.192.0/20
Signature Algorithm: sha256WithRSAEncryption
35:70:a2:27:70:8c:df:11:0d:d5:ee:5c:4e:70:c3:e2:a9:00:
88:5f:07:12:cf:2d:6e:60:0b:7b:fc:0f:ab:ec:02:47:f7:4c:
cd:d0:74:9f:b5:d8:ce:b1:d5:59:0b:6f:75:97:87:30:73:0f:
3c:cd:95:5e:bc:a0:1e:84:c8:5c:3d:d2:05:0c:9c:2c:6b:c0:
56:d6:e5:57:3b:7b:b5:b0:27:d9:b8:f2:d8:7c:77:20:6e:68:
dd:ec:c7:ef:0a:ae:7f:a5:3b:bc:16:1e:f8:11:eb:3b:2f:e9:
06:7f:e8:b0:55:a4:4f:ab:71:49:c4:5b:b4:15:bd:d2:12:b8:
98:a1:21:75:c1:b0:e3:6b:4c:db:c3:1e:48:27:8e:1e:68:f1:
dd:23:85:d1:3f:52:51:b7:e3:a1:f5:9e:98:54:44:b6:eb:14:
b5:1b:43:13:7a:f7:8e:13:b3:76:81:75:b9:91:14:59:01:83:
ba:43:91:27:cc:f1:b9:71:1b:0a:13:17:ab:dc:b9:30:d6:ca:
6e:c4:e4:b4:9b:71:c7:3e:00:dd:80:94:fe:52:ab:ca:09:a9:
1c:9a:63:02:22:aa:13:4d:c2:13:6e:bf:9e:1e:ad:20:e2:85:
86:0d:9f:10:47:7f:40:9f:01:6b:63:c9:0d:0d:e7:f8:50:90:
77:5d:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:22:06 2024 by rpki-client on console-ams.rpki-client.org