Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5936F2A9AF11EF8E1E0491762E951A.roa
File: BF5936F2A9AF11EF8E1E0491762E951A.roa (raw, json)
Hash identifier: HIhEiWZDL5Cvx3zmKanXMxJn8iu7ArFRNbqfcx8Alu8=
Subject key identifier: 4F:9E:C9:AD:44:D7:8E:77:65:76:F5:02:CF:D1:19:35:31:A7:D0:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01119E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5936F2A9AF11EF8E1E0491762E951A.roa
Signing time: Sat 23 Nov 2024 15:29:37 +0000
ROA not before: Sat 23 Nov 2024 15:29:33 +0000
ROA not after: Thu 26 Dec 2024 15:29:33 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70046 (0x1119e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:29:33 2024 GMT
Not After : Dec 26 15:29:33 2024 GMT
Subject: CN=6741f4e1-ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:af:4d:1f:1b:f0:0c:fb:fa:95:2d:21:b0:
5b:fc:f4:fe:8e:0e:e7:d3:57:ed:72:b7:13:21:e1:
83:03:7e:a6:a0:64:09:35:3d:aa:d6:86:59:45:66:
89:ae:bf:0d:d1:f3:19:e6:3e:09:14:56:f3:09:87:
59:69:a7:76:d1:b5:24:12:51:e6:ec:3f:9a:be:19:
bb:7c:87:b9:61:03:54:d8:83:ce:19:ce:97:1b:10:
f4:fd:59:59:cb:51:69:66:27:43:18:10:95:02:c6:
05:16:e5:ee:e1:ea:ce:42:e2:ab:ba:48:eb:99:07:
63:dc:c2:49:cd:b1:42:06:4d:99:fd:66:58:02:6f:
23:f5:a9:26:f1:a8:db:1b:50:0c:e0:fa:0c:af:87:
05:79:84:fb:1d:aa:dc:66:36:f9:20:35:0c:28:ec:
c5:9d:ab:ef:53:5d:bd:11:1a:32:d0:00:82:92:47:
d9:c0:0c:af:a2:21:5f:c3:cf:88:64:c2:cb:f1:a1:
1f:b9:8e:94:9a:0f:d9:b7:5d:9b:26:f6:99:53:63:
bc:5b:ab:bf:46:f6:32:1c:5e:29:80:ac:14:f2:c4:
d9:14:59:4f:dd:21:56:ac:30:f4:9f:38:bd:69:46:
ac:fe:1a:14:d7:2b:b7:52:00:5e:3d:81:d8:6f:04:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:C9:AD:44:D7:8E:77:65:76:F5:02:CF:D1:19:35:31:A7:D0:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5936F2A9AF11EF8E1E0491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:2d:89:29:62:a6:53:b6:21:21:a9:bb:aa:2a:16:41:fd:18:
b9:2d:54:58:2d:be:e6:20:5b:de:d5:0c:d5:dc:a4:00:99:63:
d3:f7:79:ca:96:a1:49:31:2d:41:31:05:27:c9:7a:54:e9:71:
a5:81:00:af:88:6f:1b:1a:65:80:e1:3c:1b:dc:d6:4a:b3:14:
44:e8:66:a8:46:39:7f:9d:f0:6f:17:b2:69:22:4d:37:88:24:
0d:6f:18:73:87:8a:7c:2b:c4:ce:56:4b:92:4a:ca:d7:d1:d1:
48:45:35:76:aa:9c:02:84:49:2b:ea:f2:1b:54:03:a1:b0:47:
7a:d1:c0:bc:2d:71:62:55:35:4f:be:c7:66:f5:15:f1:71:99:
67:84:7b:b0:51:7e:e9:f9:80:07:c4:b7:3f:d5:6d:e0:b7:87:
5a:3b:c4:88:84:f6:ef:a3:79:66:b4:52:11:f4:c3:f0:2c:f1:
c1:a6:44:24:36:84:b4:ea:79:72:34:25:2d:9a:b5:7c:8b:86:
d1:29:17:fb:e9:9f:59:dc:db:54:95:8e:36:3e:46:51:a0:c6:
07:d6:f2:39:40:7a:48:62:46:ef:35:65:23:7b:3e:c9:5c:f6:
b1:a0:9b:ca:ff:8b:31:63:d6:be:7e:53:df:dd:3e:98:b0:75:
24:0f:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org