Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C6BB90A44411EFB5B93A7C762E951A.roa
File: B8C6BB90A44411EFB5B93A7C762E951A.roa (raw, json)
Hash identifier: gu/bERmzJLPc+NHq+oUN8y91BnDheUO0VBsNJ+i7FRc=
Subject key identifier: 4E:79:59:10:94:6E:F9:37:4B:F6:32:B5:79:43:12:65:37:B1:DC:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C6BB90A44411EFB5B93A7C762E951A.roa
Signing time: Sat 16 Nov 2024 18:00:54 +0000
ROA not before: Sat 16 Nov 2024 18:00:50 +0000
ROA not after: Sun 24 Nov 2024 18:00:50 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69085 (0x10ddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:00:50 2024 GMT
Not After : Nov 24 18:00:50 2024 GMT
Subject: CN=6738ddd6-ae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:39:b1:3b:a9:e1:6d:cf:58:b3:0a:ff:b6:
66:74:3c:1a:46:92:fa:2e:e8:14:0e:12:e5:ab:d0:
dd:00:9c:62:cc:ac:f1:66:b7:f7:32:f4:4b:a8:80:
f2:88:f0:56:55:cf:39:e7:75:a1:78:32:2f:72:9b:
c9:88:c9:88:f0:5c:fb:2e:e2:52:b9:ea:e6:96:a3:
44:ef:dc:c1:71:ed:cc:53:8a:d1:34:6b:6a:a4:68:
05:17:91:2b:3a:83:24:a2:14:59:d2:ac:06:2b:c7:
14:44:66:f1:8c:9d:70:a9:bf:e7:a0:7f:00:ad:75:
4f:7f:2c:06:e4:69:48:95:b6:00:76:ca:30:ac:8f:
af:b6:51:20:1c:5e:98:dd:25:d5:a1:2a:57:50:2b:
9f:01:eb:d4:6c:02:dc:e3:ad:14:6b:7c:ea:4a:d1:
21:01:6c:eb:c8:72:bb:73:ae:62:e8:4d:8c:a6:c9:
9f:05:da:7f:06:0f:2c:e9:69:7a:38:0e:04:06:f8:
f0:0d:e3:18:33:44:1c:24:68:18:ed:df:18:6f:d9:
96:36:f9:96:4b:e6:3e:e3:9e:85:a5:b4:ad:85:4b:
ea:ac:23:d5:69:66:45:8a:ac:c6:b3:11:a0:41:f2:
d9:b1:bc:37:26:eb:df:e6:e4:e8:ab:9c:86:03:8d:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:79:59:10:94:6E:F9:37:4B:F6:32:B5:79:43:12:65:37:B1:DC:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C6BB90A44411EFB5B93A7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:38:ae:da:0c:a3:25:ae:d6:a9:98:f6:01:94:f6:86:d5:cf:
f8:ba:48:0b:dd:95:b3:2f:de:09:85:96:2b:68:55:28:f0:cb:
a0:eb:1a:f8:c6:6f:b1:dd:3f:65:54:69:49:3b:a7:cb:8b:0f:
77:1f:1b:4f:5e:d5:c9:0e:2f:a4:9e:45:51:22:8c:19:43:7c:
c7:27:68:71:83:68:7f:03:7d:f7:81:f8:f5:95:11:02:2b:26:
eb:fd:58:81:12:3e:01:25:9d:50:9b:2d:70:6f:7d:44:fd:8c:
8c:1a:ae:27:ff:e9:33:97:59:f8:8d:86:9c:ef:c6:0b:18:e8:
fc:09:9a:44:e2:8d:c3:09:f9:f8:6d:f4:c5:46:98:97:d2:59:
99:0d:93:bd:51:04:a9:ad:fe:aa:f2:d9:7e:50:97:de:5c:ee:
a8:d0:e1:a1:27:8d:07:55:4b:88:e7:a8:27:02:29:da:23:98:
66:95:f5:67:3f:0a:24:69:98:5b:a1:8d:3e:2b:dd:11:e8:33:
68:e2:f9:bd:37:d5:36:92:f8:9f:e2:a5:d9:bf:22:ac:dd:84:
a1:34:e0:cd:5c:62:aa:54:b7:34:b8:51:5b:fc:96:b4:5d:a6:
c0:2b:11:30:8d:7d:91:25:10:52:30:ab:19:a2:44:ff:82:f6:
e3:ab:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:43 2024 by rpki-client on console-fra.rpki-client.org