Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E231683C7E3C11EF8D78D0A9762E951A.roa
File: E231683C7E3C11EF8D78D0A9762E951A.roa (raw, json)
Hash identifier: 24bnm8nUhNAkS0HD0H8B/4hiDL+7xi0JcChXjyZcokU=
Subject key identifier: D6:1A:61:26:4E:A4:54:1F:9F:37:C0:06:6A:15:36:89:85:69:FE:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F494
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E231683C7E3C11EF8D78D0A9762E951A.roa
Signing time: Sun 29 Sep 2024 08:29:03 +0000
ROA not before: Sun 29 Sep 2024 08:28:59 +0000
ROA not after: Mon 30 Dec 2024 08:28:59 +0000
asID: 17561
IP address blocks: 154.93.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62612 (0xf494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 08:28:59 2024 GMT
Not After : Dec 30 08:28:59 2024 GMT
Subject: CN=66f90fcf-cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:4d:33:49:4f:83:4d:0f:b5:2c:9b:64:d0:
6a:86:92:b4:b7:96:a2:bb:0a:61:f1:ba:2c:5e:42:
20:91:32:b5:41:86:ca:54:36:67:4f:1d:e5:71:29:
48:d9:e7:10:4c:6f:d7:18:04:cf:65:93:d3:32:27:
4c:63:e1:a0:74:be:e7:e6:3e:54:05:09:66:08:c4:
06:5a:b2:48:53:95:f7:16:e3:d0:76:bc:45:ea:49:
32:c0:ad:fe:6c:72:00:04:ef:c1:d6:09:d6:15:10:
aa:23:e8:c3:bd:2d:8b:27:d7:67:4e:62:2e:49:2d:
8d:44:e0:4b:aa:db:24:2c:9a:10:80:de:a8:13:3d:
27:7c:91:a7:cd:6b:f5:bb:56:79:63:d6:d3:ba:13:
56:dc:43:33:01:14:2c:4c:bf:32:3a:8f:01:2a:84:
68:1b:7f:0e:2c:e5:4d:53:ae:93:c3:a3:7c:1e:47:
d3:0a:92:13:77:2f:30:62:ad:3b:4b:ef:bd:12:86:
77:7b:0d:70:96:41:22:b8:7d:8e:9e:d9:ae:ea:b0:
40:90:b9:ce:6e:66:23:f8:ca:1a:05:a1:e8:66:55:
c8:f9:a5:1c:d5:9e:db:33:56:24:3b:80:37:e6:19:
9c:c8:f5:27:48:8b:4c:60:d0:61:89:98:55:6c:84:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:61:26:4E:A4:54:1F:9F:37:C0:06:6A:15:36:89:85:69:FE:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E231683C7E3C11EF8D78D0A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/23
Signature Algorithm: sha256WithRSAEncryption
72:42:68:11:8d:99:26:13:4e:0a:54:8f:66:21:4e:c4:d8:54:
c8:39:67:1b:5c:d6:1c:10:20:3d:c1:43:27:ee:e2:e5:ae:87:
11:38:a0:95:3a:31:6f:5c:7e:66:b3:69:ed:88:4a:b3:bc:5d:
2e:6f:47:8f:c7:4d:db:34:01:bb:8b:30:dc:b7:ee:09:8a:01:
44:5a:83:41:2b:b5:0d:69:3d:de:7a:76:7d:d1:8d:95:46:3c:
5e:6d:28:1f:7c:52:53:7a:ad:d4:2a:47:17:e8:98:c1:12:82:
13:8f:de:c6:f3:c7:b6:6f:89:c8:b9:40:25:19:ea:27:dc:d0:
e8:76:b7:a5:73:e8:91:1a:40:3c:d3:39:4e:34:bf:c2:b7:60:
8b:db:7a:99:b5:07:2a:bd:da:72:32:35:a6:bf:4a:d5:25:88:
33:c6:29:d2:4a:e6:51:51:af:b4:7e:37:ef:2e:ce:b9:ce:08:
5d:fa:df:27:a4:97:24:f4:87:ac:da:f7:e2:cb:79:39:21:8d:
0c:1e:56:42:ac:ff:32:b2:1b:87:9c:75:9a:b1:ec:fd:84:20:
90:88:ae:19:d3:1a:d5:7e:ff:f8:a0:eb:fd:8f:14:b9:c3:05:
be:a0:6e:8b:b1:80:40:3e:8d:ba:34:04:f7:74:de:c6:5f:b0:
9d:d7:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org