Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AA23929F7F11EF9CE66C4F762E951A.roa
File: B7AA23929F7F11EF9CE66C4F762E951A.roa (raw, json)
Hash identifier: tSVLkUM8D7ihls9+rjJ4B3vYBoTf/MfIWAbISKMd1yw=
Subject key identifier: B1:3E:78:1E:5E:41:62:1D:02:E2:3E:28:0D:D8:01:31:F1:58:C7:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AA23929F7F11EF9CE66C4F762E951A.roa
Signing time: Sun 10 Nov 2024 16:20:36 +0000
ROA not before: Sun 10 Nov 2024 16:20:32 +0000
ROA not after: Fri 17 Oct 2025 16:20:32 +0000
asID: 132813
IP address blocks: 154.91.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68378 (0x10b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 16:20:32 2024 GMT
Not After : Oct 17 16:20:32 2025 GMT
Subject: CN=6730dd54-0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:43:e3:eb:c7:f3:44:83:ee:4d:13:82:95:e6:
4c:54:bd:b2:72:3e:da:84:ea:11:ac:cb:e3:6e:5a:
60:43:50:22:f2:8a:b0:34:b9:cd:70:ae:b4:aa:c8:
9e:59:ff:ed:8c:f7:38:3d:6f:8f:5e:10:27:b0:58:
cd:3c:dc:c9:7d:3a:9c:9b:90:8b:a0:b4:91:47:c4:
61:6e:ec:df:56:9a:dd:87:3b:9a:45:69:89:96:77:
09:49:86:fd:c2:7b:15:cd:3d:57:c9:12:7a:f6:4a:
a8:36:4e:f0:95:ac:22:52:76:7d:d5:1a:b4:04:3b:
d6:e4:47:1e:02:e7:99:59:73:30:ac:5b:30:d7:54:
29:d8:1f:ff:f9:23:9f:34:c7:14:be:02:0e:4b:60:
12:ec:c4:12:e2:d6:83:49:3b:7a:a9:89:17:73:60:
60:f1:81:e3:e9:ab:d7:ea:a6:bc:90:05:95:d6:b1:
92:dd:3a:74:21:f8:87:c2:b5:7a:ca:1f:69:51:38:
5b:3b:48:12:71:16:f2:f1:5f:6f:92:18:e4:65:6b:
16:fb:d9:47:52:a8:86:f5:e8:a3:09:d7:dd:fe:48:
04:64:05:2f:dc:00:f3:e1:4b:01:4e:9a:19:e7:2c:
18:61:25:8d:7b:4a:64:9b:c9:9c:c4:7d:45:be:8f:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:78:1E:5E:41:62:1D:02:E2:3E:28:0D:D8:01:31:F1:58:C7:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AA23929F7F11EF9CE66C4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:73:ed:c9:08:c3:47:09:f6:8d:22:ca:20:59:0b:43:85:33:
aa:4a:9c:50:96:7b:2f:da:d2:f2:c9:2e:da:e7:f7:0e:5d:14:
eb:f6:67:bf:55:50:44:48:99:bd:87:87:aa:4e:18:8a:46:c5:
80:69:a6:a0:a7:31:1f:0f:fe:eb:39:26:e8:71:8e:19:ba:c1:
70:83:1b:ea:28:7e:75:f5:34:79:c1:f6:c6:5b:9d:27:45:cf:
d5:28:0b:bf:f9:6b:b5:13:49:ac:d9:f2:dd:6c:8d:9c:91:65:
af:0e:96:22:ed:dc:92:15:2a:df:6d:57:b0:c5:a3:7e:69:54:
39:1b:cd:62:e9:35:08:2b:e1:04:96:35:d5:df:67:41:1e:b6:
64:14:c1:65:66:17:0b:a8:34:81:79:67:c0:67:f9:62:0c:9c:
74:77:20:36:9b:be:d5:82:bb:f2:a5:b7:d3:19:99:82:2e:bb:
1f:fd:1b:c1:d3:eb:4b:53:ac:29:c7:c3:f5:0b:75:45:82:c9:
57:dd:22:21:03:0a:f2:75:8c:65:7f:13:93:d6:e0:73:7d:b5:
7f:47:e8:f5:60:a0:f9:3c:36:7f:0b:67:81:fe:f0:87:da:96:
ea:4e:e7:6e:c6:2d:7f:33:2d:83:07:d0:5f:ff:ff:ed:68:c5:
2f:2f:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org