Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E91B4CF29B8411EF9F6B11BD762E951A.roa
File: E91B4CF29B8411EF9F6B11BD762E951A.roa (raw, json)
Hash identifier: Z6gKkAhvdupCo/BLN6w6nAGaxLL6jtPihR+WzjVS4cQ=
Subject key identifier: C2:4D:2C:50:98:59:A1:28:5E:49:DC:5E:98:60:D4:DA:57:AE:4A:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010811
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E91B4CF29B8411EF9F6B11BD762E951A.roa
Signing time: Tue 05 Nov 2024 14:47:42 +0000
ROA not before: Tue 05 Nov 2024 14:47:38 +0000
ROA not after: Mon 20 Jan 2025 14:47:38 +0000
asID: 135097
IP address blocks: 154.213.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67601 (0x10811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:47:38 2024 GMT
Not After : Jan 20 14:47:38 2025 GMT
Subject: CN=672a300e-ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:5a:6e:fe:1a:36:8e:2a:e8:1c:28:ba:f5:
94:56:fa:c8:d1:f4:87:15:41:17:5e:6f:96:c0:df:
e3:8b:39:07:4e:9d:d4:2d:5c:4b:22:c3:20:a5:5d:
e3:a4:ec:0d:ae:0b:9f:f1:18:be:ac:11:c7:bb:8e:
35:75:37:a0:a1:f8:6d:f8:3f:13:5e:dd:7d:85:93:
30:a7:27:ac:72:08:7f:f6:f1:d0:0e:30:f4:97:c4:
e5:63:a1:c9:bf:2b:23:08:22:ac:9e:58:ec:20:15:
6b:51:d6:30:af:7d:95:f1:14:5d:8d:1b:a6:b6:df:
a8:dd:c6:af:f0:9e:2d:ba:4c:7c:54:7a:dc:c7:11:
ed:ce:80:14:ba:be:cb:2e:67:2c:4b:6a:dc:d9:a0:
a5:06:1a:3f:94:20:b0:32:e1:82:f1:c7:e7:f7:be:
0c:25:a3:c7:53:eb:72:2c:94:eb:8e:aa:65:0c:fe:
6f:fa:4f:de:40:e8:d0:fb:e8:53:19:a2:75:9c:9e:
62:6e:24:4a:f7:b5:f9:51:af:e1:f2:f8:da:fe:b2:
c8:d9:3e:08:94:6a:e0:f9:f8:7e:8a:88:f7:66:04:
14:4b:c6:a6:46:a1:cf:48:bc:69:e9:f3:00:f5:b1:
1c:e7:f2:e1:19:ab:95:fc:8e:32:0e:3e:70:51:9a:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:2C:50:98:59:A1:28:5E:49:DC:5E:98:60:D4:DA:57:AE:4A:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E91B4CF29B8411EF9F6B11BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.12.0/22
Signature Algorithm: sha256WithRSAEncryption
18:b7:d7:95:36:46:62:52:67:0c:a8:05:25:6c:ae:b8:2f:9b:
af:f1:a5:4d:02:57:62:3a:5d:c1:66:f0:49:b5:83:de:c4:ee:
34:5a:ad:50:ed:30:da:1d:05:83:fd:44:a1:49:d0:91:f4:56:
e0:a5:02:94:b6:06:25:60:f8:76:4a:c3:88:22:56:4d:77:8f:
39:66:5d:b3:f4:4e:94:6a:71:0d:18:8b:89:2d:3b:b2:03:f5:
02:9d:ec:80:42:e2:cc:66:5a:04:a2:e3:e4:a8:95:5d:fd:81:
86:52:ad:63:af:0e:ca:0d:75:6a:8d:40:63:8c:dc:7f:e4:91:
94:02:70:c3:bc:f1:ce:b3:da:d6:a4:6a:94:49:fb:d1:be:d8:
b4:9a:97:21:2e:af:44:a7:8a:58:15:98:7a:f8:13:de:a3:22:
96:88:18:51:55:4a:4c:4d:22:55:fa:a0:09:91:d6:99:7f:fd:
ab:49:59:42:f4:7f:e2:32:43:97:3d:0b:c8:e3:8a:9e:6c:aa:
09:04:38:5c:8e:aa:53:ca:c8:91:72:77:4e:f3:05:4c:12:cb:
15:23:fc:d1:4b:99:e4:05:3f:89:12:75:49:8a:a7:a6:bf:f3:
95:2f:45:06:7d:62:4b:1d:85:84:be:ed:d8:c8:5d:96:67:c5:
a5:cc:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org