Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC74BDEA0DB11EFA545EC5D762E951A.roa
File: BEC74BDEA0DB11EFA545EC5D762E951A.roa (raw, json)
Hash identifier: heHcaBNosFEg9FO5fK/Ysl9Ji54zodEnBdFVJwXFppg=
Subject key identifier: 30:69:B6:34:FA:8A:5E:FB:3E:74:50:9F:D7:BD:37:85:07:74:68:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC74BDEA0DB11EFA545EC5D762E951A.roa
Signing time: Tue 12 Nov 2024 09:51:53 +0000
ROA not before: Tue 12 Nov 2024 09:51:49 +0000
ROA not after: Sat 07 Dec 2024 09:51:49 +0000
asID: 138915
IP address blocks: 154.223.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68662 (0x10c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:51:49 2024 GMT
Not After : Dec 7 09:51:49 2024 GMT
Subject: CN=67332539-1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:8b:28:a2:3b:9e:f1:c7:d0:9d:8d:70:b7:
94:d2:d0:01:ac:f4:03:9a:2c:20:12:d2:94:cb:95:
12:b8:88:aa:81:fd:84:4a:22:76:ff:e5:15:0d:6e:
2e:d8:07:f5:93:07:4b:f2:da:2f:d7:1e:19:17:b5:
1f:db:e6:8c:17:7e:2b:10:c3:69:fc:af:f5:e0:43:
ec:f7:f9:56:b7:35:51:a5:25:21:1f:9f:ca:bf:8d:
2b:80:3f:0f:b0:04:aa:de:d0:9b:9f:91:35:30:46:
d9:88:6c:bc:62:f0:be:82:f8:85:d5:d9:cb:d8:da:
1b:ab:4d:cc:66:71:8a:5c:53:ea:17:2c:4f:b7:a0:
70:fc:15:35:a4:b7:c1:82:af:97:cc:a3:bc:27:a2:
84:ac:67:cf:f1:d9:1a:de:95:0c:8c:c0:67:6a:ca:
a7:ee:ef:16:52:b7:91:4d:3c:73:cb:67:57:5e:c8:
0d:ac:9d:7b:6b:52:86:4c:f3:fc:d7:d8:cb:53:91:
12:98:31:19:3c:6c:65:41:7f:82:7c:4d:5f:35:fc:
9e:ab:b0:38:39:04:f5:dc:92:73:17:ff:2e:7f:0d:
6f:e4:44:a1:f5:a6:8a:14:a4:85:41:e1:c9:7d:77:
f7:30:0a:0b:37:ed:b3:c0:da:a1:34:df:f5:fa:e1:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:B6:34:FA:8A:5E:FB:3E:74:50:9F:D7:BD:37:85:07:74:68:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC74BDEA0DB11EFA545EC5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.26.0/23
Signature Algorithm: sha256WithRSAEncryption
26:0a:4d:76:64:f7:15:7a:db:fe:73:7b:f8:94:da:20:9b:0c:
2e:5a:53:30:77:40:0b:ed:8d:d2:f9:09:3d:76:d6:7c:d9:6e:
b3:1c:2f:5a:61:13:ca:69:d0:a1:6b:bd:35:d0:09:1f:d2:58:
ec:a8:f4:b4:e3:6a:42:f2:58:8f:56:d3:3a:e2:5b:2d:be:c4:
b7:6d:b9:ca:75:f4:12:40:98:d8:cf:e3:90:99:f2:73:82:2e:
73:28:91:e6:3a:9d:51:f4:c1:31:4e:66:b4:56:74:1c:24:0e:
e0:9f:d8:ef:eb:90:d4:b6:5f:a9:48:3a:06:e9:32:4b:9d:e0:
87:33:30:5a:fd:bb:14:37:22:30:99:bd:76:32:e3:1b:8d:16:
e9:22:c0:73:bf:6c:aa:f5:7f:95:59:a6:2d:5e:9c:33:6f:a5:
44:3b:3c:66:fb:7c:b8:0e:4f:33:02:76:3f:0c:2c:08:e3:42:
9a:5f:90:ea:8d:8a:57:aa:1e:8c:09:01:12:b8:7e:74:e4:1f:
9d:a2:ff:4d:c8:82:ea:d4:05:41:03:9c:97:cd:37:6a:1e:44:
56:88:f5:5f:0e:4d:6c:45:cc:d2:fb:ce:e9:5c:24:f2:1a:32:
41:bc:29:b2:e4:52:86:18:69:3a:eb:18:0a:09:9f:28:83:1f:
51:a7:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org