Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB99831CA18411EFBF2D40BD762E951A.roa
File: EB99831CA18411EFBF2D40BD762E951A.roa (raw, json)
Hash identifier: mgcIvgh3mZ9gVew7prNODZfBoTAYqgrXEaH6SeU5nbM=
Subject key identifier: 01:F8:44:6B:81:50:84:2A:40:9E:44:C2:47:BB:3E:0A:51:E9:69:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB99831CA18411EFBF2D40BD762E951A.roa
Signing time: Wed 13 Nov 2024 06:02:53 +0000
ROA not before: Wed 13 Nov 2024 06:02:49 +0000
ROA not after: Mon 13 Jan 2025 06:02:49 +0000
asID: 5065
IP address blocks: 154.198.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68753 (0x10c91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 06:02:49 2024 GMT
Not After : Jan 13 06:02:49 2025 GMT
Subject: CN=6734410d-8c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:69:e8:1c:6f:28:09:4c:33:a5:dd:6c:9b:
ee:3a:5f:a2:77:45:76:59:cc:67:15:50:7a:4d:8d:
43:95:35:bd:57:2e:f2:10:58:12:b4:f9:52:c6:12:
bd:b6:f0:a0:4d:a6:2d:93:25:7b:3d:a4:5a:83:ef:
8b:75:65:ce:fa:5e:2f:70:0e:1e:db:74:8e:20:d5:
63:7e:b1:d2:20:c4:77:0e:e6:89:27:11:f4:b1:83:
7c:86:cc:1c:df:d9:4b:49:8a:17:d7:18:46:01:b0:
c4:8c:45:1d:0b:92:c4:46:e3:3c:43:54:24:a1:bd:
a7:c1:cf:9d:7b:51:94:03:68:c9:15:14:22:34:8c:
d5:e2:4a:64:1a:21:d5:43:91:cb:85:2e:eb:9d:f3:
d5:e9:56:6d:18:c8:b3:53:95:ec:ac:1a:e4:e9:64:
ab:30:53:bd:d6:22:97:b9:8a:22:a4:71:b5:02:cc:
bd:52:9c:e1:90:7f:55:36:f8:75:dc:b6:b0:0d:df:
21:99:36:02:77:68:3e:bb:e8:bd:19:55:88:34:3b:
67:84:b1:cf:0e:78:e0:9f:ec:46:1c:51:f8:91:b2:
dc:ed:96:f0:07:eb:db:42:42:b3:46:4e:4c:03:8e:
6a:f4:2d:ff:cc:da:7a:00:60:31:ea:ff:f0:c1:86:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:44:6B:81:50:84:2A:40:9E:44:C2:47:BB:3E:0A:51:E9:69:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB99831CA18411EFBF2D40BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.23.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0d:d6:61:e5:9d:ec:73:f9:c6:ad:2b:e7:41:6d:c2:aa:7a:
1f:4c:aa:44:cf:3f:a9:66:0e:f6:99:bc:82:53:81:b2:d0:a6:
a7:13:55:4b:91:27:45:34:07:95:fe:82:4b:cf:fd:9d:22:0d:
d9:66:0e:99:d7:a1:35:58:6e:65:b2:b6:78:6f:ff:d7:a1:8b:
5b:7b:a4:38:9b:db:77:0b:5f:ef:25:52:2c:f6:91:87:21:43:
4d:d0:ad:60:d7:a0:bb:03:22:8a:a7:70:bb:af:2d:8f:f3:26:
ee:6a:ad:ed:74:70:5b:a2:64:28:25:3d:41:39:3c:a5:69:2b:
a1:0e:40:47:df:c6:36:0a:13:8c:1a:75:6f:6b:5f:43:f7:a5:
e3:61:ac:47:48:42:43:59:14:b5:3d:4d:0a:83:1b:17:14:25:
53:c5:f6:ae:85:1d:d2:92:a8:4c:ba:a3:ac:00:bd:8d:1f:a8:
c1:5d:d7:07:ef:38:57:45:0d:87:94:c0:e4:0d:18:87:05:0b:
f8:c9:ee:d4:79:83:4e:c2:be:dc:06:2b:9b:91:d4:d8:10:f9:
4f:bb:18:94:71:d5:51:f7:da:31:36:ef:77:02:a7:78:a7:ce:
91:1c:22:74:b6:f1:ec:09:54:60:12:7e:e1:cf:8b:e1:aa:be:
90:42:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:13 2024 by rpki-client on console-ams.rpki-client.org