Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5ACDEAEA8D911EFA1454A50762E951A.roa
File: C5ACDEAEA8D911EFA1454A50762E951A.roa (raw, json)
Hash identifier: NhD61MPfO8ZM4ssHxgjBNI6mDRq9oUqP9076tbWfuTA=
Subject key identifier: 0C:E7:EE:A4:8E:CD:E2:83:F2:07:32:E6:23:D8:D5:9C:85:22:A5:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011047
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5ACDEAEA8D911EFA1454A50762E951A.roa
Signing time: Fri 22 Nov 2024 13:57:55 +0000
ROA not before: Fri 22 Nov 2024 13:57:51 +0000
ROA not after: Mon 02 Dec 2024 13:57:51 +0000
asID: 44559
IP address blocks: 154.94.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69703 (0x11047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:57:51 2024 GMT
Not After : Dec 2 13:57:51 2024 GMT
Subject: CN=67408de3-f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:2f:7c:d6:be:13:37:b1:ff:43:07:43:04:
06:3a:49:db:95:39:95:e1:e3:e3:ef:95:02:f7:4a:
16:69:f9:52:4e:db:be:47:52:e4:e5:ed:50:a3:fa:
ea:1d:f5:11:c7:f9:cf:91:c0:96:73:f8:e2:53:9d:
bb:03:71:bb:f7:05:a7:2b:07:cc:8b:ab:01:7c:92:
6f:8b:32:f7:9c:1a:6c:95:14:fc:e8:cf:9c:51:eb:
0b:4c:f0:2b:d5:09:10:db:fd:29:b5:e4:d7:52:c5:
af:85:7c:e3:4e:b7:2f:69:d0:48:87:2b:60:6a:9b:
4b:87:2a:b4:a0:9a:a5:ef:79:56:b9:f5:b5:ff:49:
4e:94:d6:15:a6:33:3f:5e:76:7f:96:00:4b:e7:0e:
1e:82:42:88:c3:7a:b4:1e:8b:7d:59:2b:95:52:2e:
a0:f2:3a:c7:4d:06:58:7f:3b:89:af:89:23:68:62:
00:8c:3b:25:fa:68:75:6b:a9:c5:59:f5:94:e8:0f:
82:73:9b:a2:e6:cd:4f:41:45:48:aa:c0:c1:fc:2d:
ff:55:f0:33:96:ca:ba:a3:f8:cd:b7:76:21:33:80:
0f:9e:f7:8d:4e:d5:3c:24:5b:67:06:da:6a:6d:94:
00:7b:3a:52:9d:06:c0:2d:f0:48:d4:25:b4:61:63:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:EE:A4:8E:CD:E2:83:F2:07:32:E6:23:D8:D5:9C:85:22:A5:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5ACDEAEA8D911EFA1454A50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b8:ce:0d:0c:7b:37:c1:7c:fd:40:47:6e:40:c0:36:f7:36:
ce:70:aa:64:52:c6:7f:c0:8d:3b:00:93:89:4f:fd:0a:ab:68:
7f:26:e9:07:8d:88:b0:2c:df:99:27:b7:96:14:30:a2:6f:d9:
d5:3d:60:2c:51:e8:f5:40:0f:f3:47:06:25:2f:dd:3e:24:c9:
d2:8c:d1:03:8b:ef:d3:e1:62:de:92:bc:96:95:a5:b3:47:df:
b7:40:22:c8:21:bd:3b:11:5b:30:87:67:84:0a:11:80:51:19:
04:04:8c:fc:10:32:72:e6:cb:82:43:aa:4d:81:f9:4b:7c:5f:
cd:76:72:f3:95:3b:95:ac:c2:3b:0c:0c:82:97:de:d5:25:12:
06:dd:85:34:9c:fd:68:58:6a:74:f4:15:be:a4:05:1b:e7:06:
df:8f:dd:af:76:f5:59:47:80:dd:e1:31:68:a3:40:e8:f8:57:
bb:b7:a0:2d:2f:73:44:68:c5:fe:92:25:ec:b4:b9:ad:c8:85:
b5:d5:ea:31:ab:8a:a8:48:f9:b7:ab:20:4a:a8:b2:fa:c6:2e:
eb:3c:c7:29:cc:b0:98:e9:d5:fb:93:01:a6:76:b0:0f:0f:2a:
05:af:0d:9c:ad:14:36:a8:ac:ac:52:de:ae:c0:12:82:7d:be:
82:47:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:35 2024 by rpki-client on console-ams.rpki-client.org