Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC79C05C9B8411EFAC0CFCBC762E951A.roa
File: BC79C05C9B8411EFAC0CFCBC762E951A.roa (raw, json)
Hash identifier: OnQDOrvPfMrURNp6wR379c336PePjtpYn5Q7AABUTi8=
Subject key identifier: E2:77:9F:82:71:49:A8:71:EE:44:FE:63:6D:ED:60:18:74:29:D2:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01080F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC79C05C9B8411EFAC0CFCBC762E951A.roa
Signing time: Tue 05 Nov 2024 14:46:27 +0000
ROA not before: Tue 05 Nov 2024 14:46:23 +0000
ROA not after: Mon 20 Jan 2025 14:46:23 +0000
asID: 140570
IP address blocks: 154.91.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67599 (0x1080f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:46:23 2024 GMT
Not After : Jan 20 14:46:23 2025 GMT
Subject: CN=672a2fc3-a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:fb:9e:f7:92:5f:b6:3c:2f:02:0e:c4:c6:
d9:58:f1:e2:21:ea:60:80:a9:b2:98:00:75:3d:1f:
e0:ff:b2:99:88:36:98:43:c6:7a:ab:5c:68:1e:e6:
16:c8:58:7d:f5:d6:2c:59:37:65:d5:15:1c:13:e4:
d5:b1:2e:ec:f5:35:6d:f9:c9:c0:6e:5e:93:22:86:
83:77:67:9a:4a:e2:16:29:a2:73:cd:f8:09:2e:e8:
4f:21:e5:ee:c0:19:0d:6c:fb:b5:fb:13:2c:9d:f4:
c4:de:fd:7b:fa:46:70:90:91:09:89:97:48:87:c0:
27:6b:7f:6f:fd:ad:66:7d:2c:e8:f9:00:e5:cf:ec:
68:3a:d9:6f:e3:2a:10:a4:33:10:84:86:fa:7d:c4:
62:df:6c:97:5f:7d:68:ec:04:69:d7:9f:89:fd:b9:
58:00:72:ab:ff:59:06:00:c2:f9:4c:e8:47:60:80:
f7:96:fd:27:0c:46:cc:37:58:bd:9f:fa:4f:ed:b1:
59:49:e5:4e:9b:c4:e8:4d:0b:67:41:65:76:c5:8c:
6c:3f:0b:0e:20:fb:af:ff:b5:50:0e:be:39:7c:99:
3e:a8:98:e9:0f:e7:fa:dd:e6:4c:22:a9:28:21:21:
d9:de:be:38:08:fc:c1:fe:af:8d:9f:fa:5e:3b:d8:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:9F:82:71:49:A8:71:EE:44:FE:63:6D:ED:60:18:74:29:D2:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC79C05C9B8411EFAC0CFCBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3d:8e:f9:b5:d9:b0:2b:bd:64:f1:4e:7a:3c:f3:36:79:1b:
e4:45:89:46:3d:d8:9b:74:44:1b:17:85:2c:94:0d:a1:70:68:
37:df:f3:b7:06:43:14:a0:94:b7:1b:f8:ea:85:2c:f7:22:a2:
fc:99:3b:8a:fd:41:53:66:0a:10:c7:9a:05:8a:09:43:85:88:
bf:3a:8d:53:9b:ae:d3:d7:d0:40:66:18:a5:fb:c8:da:83:7d:
2e:dc:9f:0f:a7:5c:3a:9b:04:10:ec:c4:ba:50:d4:e7:66:b7:
ee:ce:21:24:d7:3c:3e:7e:ab:83:50:1c:a5:68:8a:43:62:8b:
90:22:9c:b7:ff:0e:80:e5:5f:77:a9:5c:a7:a1:65:8c:9f:79:
71:7b:0a:0f:6d:d2:ce:3a:f0:8c:7a:82:48:66:7e:60:6f:8a:
17:e2:e7:21:e8:9d:4a:73:5e:9a:99:b8:b6:db:3b:27:bc:67:
69:b7:47:17:7e:e4:a6:18:af:b9:c0:d2:5f:d0:3e:7e:c1:3d:
fa:ad:62:fa:8b:10:a8:87:dc:8e:fa:4d:19:80:8f:95:4f:46:
9d:88:79:fe:f7:cc:09:99:2c:7a:ad:b9:90:e7:27:36:9c:2b:
c5:ed:c7:cc:38:8e:e2:16:c8:42:8f:44:0d:51:e1:23:93:4b:
66:90:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org