Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F14877C0ACA411EFA382D7B7762E951A.roa
File: F14877C0ACA411EFA382D7B7762E951A.roa (raw, json)
Hash identifier: qv3K9Ol/T05QJd1ORrGG4im5Z/Pi4bAb2TpQWY2pI6s=
Subject key identifier: C7:B4:C6:E3:57:36:99:C0:0B:DE:F1:DB:62:E0:3A:6C:68:26:1E:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011448
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F14877C0ACA411EFA382D7B7762E951A.roa
Signing time: Wed 27 Nov 2024 09:49:49 +0000
ROA not before: Wed 27 Nov 2024 09:49:46 +0000
ROA not after: Tue 11 Feb 2025 09:49:46 +0000
asID: 9009
IP address blocks: 154.92.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70728 (0x11448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 09:49:46 2024 GMT
Not After : Feb 11 09:49:46 2025 GMT
Subject: CN=6746eb3d-63fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:67:ac:25:bb:ff:d4:84:29:5c:14:0d:8a:
a1:ca:7f:8b:e0:69:90:80:14:0c:74:89:74:0f:10:
73:0e:49:c0:9b:bd:de:9b:e2:10:45:ea:4a:c8:e8:
da:dc:96:f0:87:08:a6:3d:0b:8e:67:b0:c8:72:77:
dc:39:96:d2:2e:0c:2e:a8:48:de:62:e2:78:d9:02:
54:3c:52:7a:52:a4:bd:cc:94:60:85:50:f9:fc:c1:
23:3c:03:2a:e4:48:ae:93:03:f1:50:c3:a8:66:c1:
4a:0f:c9:39:36:f6:bf:3f:dd:39:0f:a5:be:a3:92:
92:4d:ec:4e:4e:01:3d:dd:7a:37:78:5f:d9:31:a8:
90:2c:39:c8:3c:ce:df:9e:e1:32:dd:6e:58:61:7b:
78:87:ca:a0:45:f5:7c:bc:d0:b7:56:bd:bb:17:e2:
f0:e6:59:5a:a9:63:30:ce:9f:7c:3e:01:55:06:c7:
99:77:39:5d:36:35:0e:37:98:7e:96:6e:8e:18:c7:
05:79:81:96:aa:90:ab:cf:11:11:2d:22:49:8e:24:
8b:2d:52:a0:da:31:a3:78:f6:27:da:3f:7a:4d:b4:
c4:6a:88:ee:d8:73:87:39:27:f8:fc:05:5d:72:4a:
a3:9d:21:d1:13:05:72:59:ae:85:67:10:32:5a:fe:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:C6:E3:57:36:99:C0:0B:DE:F1:DB:62:E0:3A:6C:68:26:1E:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F14877C0ACA411EFA382D7B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.120.0/21
Signature Algorithm: sha256WithRSAEncryption
21:31:7a:7b:3b:48:80:33:55:14:52:99:e8:43:8a:fc:42:f8:
fb:02:9e:44:3a:90:77:0f:04:6b:40:62:18:cb:f4:10:7f:87:
99:00:49:d3:46:d6:13:a8:97:fd:4d:6d:aa:7e:a9:2a:56:3d:
11:8b:59:55:58:21:f1:2e:ac:11:45:c5:a6:d0:69:29:a8:da:
de:03:80:85:5f:16:1e:77:cb:ca:c2:0e:fa:16:a5:a4:85:10:
82:ee:d4:cf:6c:8f:b0:00:a0:8a:ae:63:73:46:57:21:f6:f6:
ee:d6:b7:7e:f2:ef:e3:3a:91:8e:17:5f:9a:a5:28:5b:43:5a:
46:70:b1:3e:e6:23:6f:86:2f:c4:2d:0e:72:8a:e1:73:77:75:
86:0e:37:04:ab:10:39:79:47:2b:19:82:78:c5:b5:aa:5d:87:
a1:a1:b6:c0:cd:31:23:ee:4a:12:fc:75:e1:9a:b9:e7:9a:ce:
a3:aa:13:b2:08:6e:23:7a:30:61:d2:64:4a:44:ae:37:87:f7:
48:4b:89:6c:ed:fc:d1:9a:53:92:a2:29:7a:d6:79:2f:04:4b:
35:8f:71:ff:f8:d1:b2:4c:8c:dc:0f:f9:09:d4:01:69:63:fe:
9e:c2:0d:8f:92:25:16:05:08:7f:77:98:a6:36:81:2a:e0:72:
23:d0:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 14:47:07 2024 by rpki-client on console-fra.rpki-client.org