Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1BAA2CCA32D11EF8D529DAF762E951A.roa
File: E1BAA2CCA32D11EF8D529DAF762E951A.roa (raw, json)
Hash identifier: pPfJQK+KodV/8eAV8Ns7OBzK86poAVh2s1qNPptgpoE=
Subject key identifier: 9E:D7:39:EE:5F:F8:98:CD:15:09:94:63:A7:61:88:47:28:65:70:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1BAA2CCA32D11EF8D529DAF762E951A.roa
Signing time: Fri 15 Nov 2024 08:44:53 +0000
ROA not before: Fri 15 Nov 2024 08:44:49 +0000
ROA not after: Wed 19 Nov 2025 08:44:49 +0000
asID: 9123
IP address blocks: 154.194.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68954 (0x10d5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:44:49 2024 GMT
Not After : Nov 19 08:44:49 2025 GMT
Subject: CN=67370a05-6dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:60:bf:87:a0:80:16:16:bc:67:f0:61:a9:
b0:92:bd:68:6f:53:e5:3b:57:4d:27:b8:fe:d7:9e:
e6:38:e9:b7:15:cd:7f:b7:d6:9b:57:3e:11:81:db:
01:50:f9:0e:0b:36:e6:bf:6e:e6:cd:02:58:ce:e1:
0b:91:72:b4:14:40:49:6f:f4:35:95:a3:b9:e2:37:
2a:66:6a:aa:91:9f:c6:56:c4:e9:b3:9a:2b:21:64:
3e:ec:c6:e4:61:67:5d:f5:03:07:e8:0a:2e:1c:9d:
58:f4:b8:71:1b:cb:4e:d6:ec:72:0c:f5:5a:b8:74:
1b:89:1e:6d:c8:f3:6f:e2:dc:72:aa:16:6c:b1:cd:
cd:65:c3:8b:a9:18:dd:0d:43:32:b7:b6:36:29:59:
87:cb:27:d3:d6:5b:e5:b0:fe:e2:12:f0:15:e5:dc:
5d:0d:ae:16:59:be:09:e6:0e:d8:d1:1a:52:75:f8:
94:7c:ea:db:4d:e2:f0:1f:29:8a:ed:08:53:4c:2d:
cf:a9:23:93:d5:41:62:d7:1f:91:3e:94:af:1b:ee:
31:9d:37:14:ad:5b:7c:b0:1a:cc:b9:f3:56:75:38:
46:21:3e:9f:1d:1a:12:f4:5a:35:ac:e8:bf:78:2f:
13:27:36:9d:4e:af:40:6c:4c:5d:4c:24:6b:4d:3f:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:39:EE:5F:F8:98:CD:15:09:94:63:A7:61:88:47:28:65:70:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1BAA2CCA32D11EF8D529DAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1a:58:26:d3:33:dc:d5:2a:68:2b:05:24:36:77:98:88:b7:
d1:b1:3d:dc:59:be:f6:bf:f5:49:65:5e:52:ca:2e:a6:d8:e1:
14:47:ea:80:3a:25:eb:ba:67:13:c1:ed:62:bc:7b:0c:3a:60:
33:4d:2a:bd:2a:a0:88:71:85:85:f9:bf:36:86:1f:6b:7c:d1:
46:21:0c:19:9b:e9:f1:98:2e:25:d4:6b:4c:07:d4:d7:4c:97:
fa:8e:80:43:98:9c:f8:d9:36:73:09:d5:8c:a3:e3:eb:3d:da:
00:9f:37:cc:70:9d:8d:c2:76:b1:b7:53:ee:87:6b:4c:ab:88:
04:9d:b7:7c:da:72:56:2e:be:13:77:80:06:03:3e:02:d6:48:
d1:d3:66:18:12:1b:95:35:ee:6a:2a:48:b5:21:b9:ad:a0:46:
4b:cc:8a:0f:8c:6f:30:aa:32:3f:92:eb:ea:3b:f4:82:7d:21:
51:89:8d:51:b8:78:d1:c7:f7:71:9d:a2:3d:ac:88:17:29:a5:
43:95:fe:a8:58:76:e6:15:aa:8f:f3:4b:97:2b:77:47:96:75:
02:ea:47:fe:44:36:2d:bc:37:2a:66:00:5e:59:9f:b0:c7:9b:
52:d1:16:24:5c:97:f1:ef:67:41:77:6a:0c:d9:a5:22:ec:75:
8b:d0:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:54:48 2024 by rpki-client on console-fra.rpki-client.org