Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F8D82A8E111EF9DE9B47F762E951A.roa
File: B78F8D82A8E111EF9DE9B47F762E951A.roa (raw, json)
Hash identifier: Z1P8HUk7xy/UmqsHODfdxCzOHb8zTaQ9EuI9Vysro7I=
Subject key identifier: 1B:E1:B1:B4:6A:55:D7:DA:BB:77:C5:1C:19:8D:82:58:58:84:D4:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01109B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F8D82A8E111EF9DE9B47F762E951A.roa
Signing time: Fri 22 Nov 2024 14:54:47 +0000
ROA not before: Fri 22 Nov 2024 14:54:44 +0000
ROA not after: Tue 03 Dec 2024 14:54:44 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69787 (0x1109b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:54:44 2024 GMT
Not After : Dec 3 14:54:44 2024 GMT
Subject: CN=67409b37-6721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:56:27:26:66:c7:e2:5e:6b:17:12:66:3e:
bb:3a:c3:71:bd:1e:df:6c:2b:98:a8:9d:13:34:96:
f5:00:ee:de:26:b7:f7:3c:3c:e0:ac:a9:60:b6:eb:
98:cb:40:c4:04:1f:ea:42:20:4c:a6:9e:db:5c:10:
59:e0:a4:25:83:12:5e:50:56:7c:f1:5d:e4:74:11:
81:43:69:eb:32:e7:bc:33:f9:8e:01:5a:ff:09:a5:
98:ad:2b:da:84:45:b1:c4:9a:28:23:04:ce:db:d3:
2a:6d:f5:9d:ba:84:79:8e:99:e7:06:e5:42:70:a6:
45:91:67:9e:fc:9a:52:af:ab:eb:a1:73:e6:b8:54:
14:7a:97:33:1f:49:64:6b:84:e1:b6:7b:74:44:0a:
a7:59:74:7c:c0:6b:84:75:90:55:f0:e7:f1:cf:78:
ae:f2:9f:94:67:ce:39:4f:57:81:18:1e:8e:21:32:
73:fc:d3:bb:cb:ab:9f:39:db:85:03:4c:d7:c1:5d:
1a:fd:00:fd:f2:58:a7:21:f7:28:21:29:71:3e:95:
46:e3:78:a7:8e:b7:15:88:54:ac:59:7f:20:98:79:
a3:ba:97:37:1a:ee:ad:34:c2:7e:c6:80:ff:4a:d9:
a4:13:6a:7d:e1:0c:fc:e3:ae:bb:be:a9:6b:59:c6:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:B1:B4:6A:55:D7:DA:BB:77:C5:1C:19:8D:82:58:58:84:D4:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F8D82A8E111EF9DE9B47F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:73:20:f0:62:a9:1b:d5:f4:4e:92:9a:a4:4b:ec:5b:84:ed:
bc:5f:76:c5:a0:4a:52:5b:35:f3:5a:e3:d3:10:d2:a3:d9:53:
eb:0d:54:08:3f:ad:68:6f:22:23:b3:c3:04:28:f8:34:91:fa:
3d:54:0e:11:ae:6d:de:9f:8f:85:2e:4d:df:d1:49:86:66:ac:
c2:9b:20:8c:34:97:97:a1:62:f4:95:19:39:4f:e9:a8:13:9d:
4e:bc:f1:8d:54:68:8f:d3:91:42:9f:b6:f7:fd:33:41:eb:65:
ce:67:66:c6:64:e3:23:90:c1:87:d6:ca:c5:f8:9e:cd:aa:88:
65:eb:4f:f9:98:d0:9f:97:64:02:77:55:8a:f8:c1:a1:f2:1d:
33:2b:ec:32:c5:84:4d:5e:68:8e:a8:64:70:8f:f3:d1:e7:3b:
cd:74:3a:18:e7:3a:14:26:d7:f8:34:41:27:44:2b:ce:92:41:
60:b2:f6:1c:a1:6d:52:d9:d7:d6:bd:ad:a9:ff:f5:d0:5d:4a:
f6:09:37:28:99:ea:33:46:18:eb:0d:65:23:b9:88:70:86:92:
9e:86:24:35:43:f3:f8:c3:1c:52:16:fa:ed:0b:57:4b:6c:12:
d2:ee:6e:58:fc:29:dc:30:e4:b1:0f:16:32:f7:5b:9e:99:73:
51:b3:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:31 2024 by rpki-client on console-ams.rpki-client.org