Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2AA03A89C1B11EF95427D7C762E951A.roa
File: E2AA03A89C1B11EF95427D7C762E951A.roa (raw, json)
Hash identifier: qGpVudefLW7f3b9JBmG5Y5Q5/vW57L21JofdYJNn3Jg=
Subject key identifier: 9F:0B:3E:FD:DF:18:DB:CE:0E:EF:AC:EA:C2:5D:22:43:90:F3:BB:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010868
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2AA03A89C1B11EF95427D7C762E951A.roa
Signing time: Wed 06 Nov 2024 08:48:25 +0000
ROA not before: Wed 06 Nov 2024 08:48:21 +0000
ROA not after: Mon 30 Dec 2024 08:48:21 +0000
asID: 138915
IP address blocks: 154.93.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67688 (0x10868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:48:21 2024 GMT
Not After : Dec 30 08:48:21 2024 GMT
Subject: CN=672b2d59-bafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:c9:f0:3a:01:5e:b8:86:98:b8:b5:90:96:
9c:80:64:61:54:00:ff:e1:91:59:8e:be:0e:88:06:
9f:65:e7:8a:f2:a3:d1:a8:8b:3b:b3:75:c9:46:8c:
ca:c5:26:37:f0:fc:94:ff:94:a8:d3:c3:d9:b8:4a:
39:89:a9:31:23:99:ba:19:f1:67:7c:f1:e2:1a:4c:
95:68:9e:4d:8a:47:b1:5a:c4:04:43:2f:1f:84:3d:
e4:bf:0f:0e:b9:67:73:aa:05:3c:81:5e:14:4d:ea:
97:23:f6:19:a4:ba:c2:9e:b2:86:59:85:e0:6b:af:
a1:55:10:fc:ca:81:74:bf:1c:8e:81:2a:35:72:40:
99:6e:a2:d3:d6:c3:fa:34:12:2d:60:45:56:0c:a8:
5c:c1:5f:db:e8:f4:88:87:22:10:f9:ac:1c:7c:f3:
32:ac:33:f5:68:68:23:5e:2b:31:81:05:a9:ec:96:
a1:f0:1b:1e:36:d5:6f:42:b7:84:59:4b:8b:72:60:
ea:cf:86:e1:97:f2:c7:71:cc:b5:49:db:73:d9:aa:
90:a3:bf:96:c6:ae:48:78:d1:1e:90:2e:42:a4:5b:
bc:21:fa:93:48:1e:67:12:20:a5:a3:2a:43:c7:72:
cf:70:1e:4f:f1:9d:cc:0f:f6:2b:3b:75:67:53:59:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:3E:FD:DF:18:DB:CE:0E:EF:AC:EA:C2:5D:22:43:90:F3:BB:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2AA03A89C1B11EF95427D7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/23
Signature Algorithm: sha256WithRSAEncryption
21:f4:c8:79:63:59:eb:fb:b8:52:0e:fa:ba:c6:0d:c4:fb:c2:
c4:f0:68:20:be:cc:18:e0:1a:74:75:51:83:69:a7:e7:17:08:
0f:a2:42:70:0e:fe:e5:70:3b:7c:2b:38:6c:07:75:ac:5c:4f:
43:dd:9a:ff:65:6c:c7:98:da:b0:16:e7:b0:34:eb:c3:97:0f:
d1:e9:49:25:8f:b5:87:05:a4:d4:2a:06:41:a4:e2:16:45:4e:
ce:62:a7:a5:ea:a4:48:99:8a:de:53:33:32:3e:6f:9a:fc:35:
0a:3b:cb:57:80:57:d9:f9:03:3e:62:bc:65:89:25:6c:a0:02:
f0:5b:f4:bf:90:6a:5e:78:25:7c:7a:4a:af:b2:d1:05:29:4e:
1f:4d:4b:57:a5:32:a7:77:06:66:73:93:b4:4c:fd:ea:73:d1:
29:78:df:1c:32:8b:26:49:b1:f0:18:79:67:62:95:9f:fa:70:
36:25:26:6d:3b:2e:c7:65:01:bb:60:b5:bb:cf:a0:b5:bd:2a:
5d:01:cc:c1:e1:a0:96:90:ca:07:e0:32:3e:0c:60:e2:84:6c:
78:84:0f:0f:f9:95:64:9c:28:23:3e:2e:5b:1f:7d:db:f5:ac:
12:fd:ad:3d:f1:f5:13:13:74:a8:37:84:ef:5e:08:b1:1d:62:
3b:f7:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:43 2024 by rpki-client on console-ams.rpki-client.org