Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9A503CA0E211EFACDF5888762E951A.roa
File: BE9A503CA0E211EFACDF5888762E951A.roa (raw, json)
Hash identifier: sYHmi4E4fFUSIttBg/n3F2mf6JDzlMxM2d6Nj5lol3E=
Subject key identifier: 6B:4F:DB:9C:C4:9C:8B:CF:3B:89:AF:7B:FE:37:26:4F:E6:EC:C5:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9A503CA0E211EFACDF5888762E951A.roa
Signing time: Tue 12 Nov 2024 10:41:59 +0000
ROA not before: Tue 12 Nov 2024 10:41:56 +0000
ROA not after: Fri 22 Nov 2024 10:41:56 +0000
asID: 39600
IP address blocks: 154.84.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68686 (0x10c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:41:56 2024 GMT
Not After : Nov 22 10:41:56 2024 GMT
Subject: CN=673330f7-6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:5d:0d:9c:e1:a8:ce:48:62:c6:fc:2b:83:
21:a1:99:85:2c:3e:32:1c:a5:ca:ee:42:04:e4:cd:
11:39:44:b8:8d:d8:b4:7e:1f:87:b4:20:77:e8:cd:
91:7b:18:9f:b9:e2:f9:af:b7:3d:4e:2e:16:dc:fc:
ff:e3:d0:32:74:22:b8:c4:de:b0:80:69:10:99:cb:
02:6f:31:ef:29:e0:1e:aa:2c:1d:15:29:cf:fc:d0:
57:67:bb:c9:48:36:d5:d5:4b:0e:db:00:c4:44:db:
5d:07:34:66:8f:1f:c6:bc:ec:08:51:67:b7:e8:56:
31:4b:1b:46:dd:54:c1:5e:53:3f:2d:2b:21:b2:b5:
39:31:d1:9b:04:59:aa:c4:71:9d:8e:ef:61:af:2a:
4c:f7:31:d3:74:ec:53:a8:fa:64:08:e0:61:b6:7a:
8e:87:77:ba:9f:54:a3:34:2a:90:f7:a2:df:17:e5:
59:f9:06:21:19:c2:db:96:35:67:57:a8:98:ef:1c:
69:a4:28:c4:97:db:7d:a4:b5:15:35:d1:bc:32:f3:
3d:c4:7b:99:aa:b1:9c:f9:d7:72:18:56:99:44:5c:
98:3f:b7:48:5a:2f:d3:bd:6a:fe:a9:71:2e:0f:d9:
15:70:be:d3:13:f6:6f:d1:3e:8e:9c:73:aa:15:1b:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:DB:9C:C4:9C:8B:CF:3B:89:AF:7B:FE:37:26:4F:E6:EC:C5:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9A503CA0E211EFACDF5888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:d7:2a:a6:bb:74:ad:fd:fb:64:42:7a:ee:3a:33:8c:de:f5:
92:cb:37:91:db:b0:1d:fe:5e:8b:bf:d2:e9:a4:de:26:a2:83:
14:a0:bc:a8:93:34:56:6f:fa:d6:2e:86:86:fb:4c:5e:fb:b5:
26:28:ed:e1:e4:df:be:0c:88:bc:d5:4f:15:27:34:39:32:e6:
83:a7:d2:de:82:9b:bf:21:c4:0c:98:9e:46:70:6b:c5:2f:3d:
22:44:7e:82:85:67:23:47:90:0c:08:42:b9:ca:1f:7f:fd:79:
01:8d:2b:b1:1e:0c:6f:41:bf:ce:01:84:8e:22:88:04:ad:60:
a0:ad:ad:a7:71:ca:93:f9:d9:c4:7b:dc:c5:fb:aa:5c:9f:37:
af:e2:95:d0:9a:d9:63:e3:6d:55:a9:15:88:40:bc:72:41:d6:
89:37:c7:9b:68:a4:35:5d:4c:4c:3e:c6:2d:cb:b1:b5:08:5e:
7b:8c:0f:44:1c:64:c5:b2:a8:89:fa:18:31:fd:34:9c:c8:42:
e2:4c:e7:c5:dd:3e:b5:45:42:c4:44:4c:6f:9b:b2:0e:90:f5:
00:18:98:b2:7a:89:09:30:1f:bb:98:66:04:db:28:c9:a6:66:
9a:cc:da:d5:bf:1f:f7:e9:ee:f7:bb:8f:12:60:67:32:f8:99:
54:a5:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org