Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36440A2A43E11EFAF10FB57762E951A.roa
File: F36440A2A43E11EFAF10FB57762E951A.roa (raw, json)
Hash identifier: ifG2lAR9m5umjV8JSWFIsQYNusoDlDH8J42ebgRVLhg=
Subject key identifier: 90:80:34:71:19:E9:C7:98:D9:21:4C:FB:74:97:BF:A8:DB:41:76:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36440A2A43E11EFAF10FB57762E951A.roa
Signing time: Sat 16 Nov 2024 17:19:35 +0000
ROA not before: Sat 16 Nov 2024 17:19:31 +0000
ROA not after: Fri 20 Dec 2024 17:19:31 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69043 (0x10db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:19:31 2024 GMT
Not After : Dec 20 17:19:31 2024 GMT
Subject: CN=6738d427-db31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:6e:b5:ce:b0:e7:55:07:62:2c:ab:e5:cc:
4e:1e:5f:2f:5c:5c:70:38:2a:27:e9:7f:08:80:0f:
70:9d:ea:8e:db:2f:00:af:38:9d:dd:63:9f:fe:53:
de:2c:22:f7:21:8e:29:0b:22:41:87:d3:ee:5b:6b:
8a:51:73:a5:e3:5c:08:21:6e:51:e2:00:e6:33:19:
7a:bb:36:71:e7:c0:e5:d9:24:14:86:5d:b5:b9:62:
d3:c5:b4:b6:40:1e:c4:8c:50:04:6c:3e:c4:c7:58:
9e:49:42:5a:9f:15:06:a9:59:6a:21:50:7d:6f:b1:
cb:3f:b9:83:56:05:14:7b:c3:62:76:71:c5:2f:02:
df:53:f7:33:c9:dd:18:00:ba:87:b7:c8:89:0c:f4:
23:d8:ec:70:f1:0e:d7:cb:8b:a0:f9:e1:d0:21:71:
de:41:01:0a:80:df:68:c0:e8:11:6f:f3:c8:6e:8a:
5b:2b:a6:1e:95:9f:47:a7:e8:93:43:f2:bd:db:ec:
44:4c:62:bb:70:2c:02:4e:cc:b6:7f:2d:fe:70:53:
e4:94:2a:95:db:82:20:5f:fc:e8:dd:1d:bc:1c:e4:
83:1d:78:f4:f7:1e:4a:91:bd:34:46:25:41:cd:0c:
97:c2:c2:fc:17:e1:5c:e7:b5:53:20:89:f1:45:d3:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:34:71:19:E9:C7:98:D9:21:4C:FB:74:97:BF:A8:DB:41:76:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36440A2A43E11EFAF10FB57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:37:51:b1:c6:73:39:4a:c9:1c:f4:00:b8:3d:db:35:dc:09:
b2:e6:98:8f:bc:68:c5:55:8d:00:e9:3c:7c:d4:e2:78:85:47:
2f:3e:88:75:9a:1e:04:69:5e:86:91:7e:ec:19:56:6f:e1:37:
31:7f:da:7b:bd:34:98:97:b1:47:47:15:e4:f2:9c:58:ed:65:
af:91:49:51:2e:92:95:e3:de:5c:a4:e3:39:a6:c2:4f:67:7a:
d9:a4:6f:3d:66:8d:53:9d:89:b1:b8:68:39:a3:88:58:08:9c:
42:19:46:e8:24:9d:b7:9d:13:a9:7d:74:c8:bb:7f:3c:4c:a0:
33:76:f3:66:aa:bf:5e:53:25:56:62:60:2d:2b:d4:5f:6e:8e:
f8:c7:d2:66:d8:2f:53:ab:d9:93:22:8f:dc:13:96:a2:de:f4:
21:1e:82:1b:93:56:95:f1:7b:37:b5:ce:16:c3:e5:d2:34:1a:
af:98:07:6a:e4:3d:f1:80:ff:85:e8:a6:f5:9f:b8:f1:de:f8:
34:4b:ee:f3:66:73:0e:1c:da:da:36:d3:2d:8f:76:88:8e:48:
62:93:49:8a:60:ea:23:03:4a:e9:88:cb:9f:d9:d1:3f:c4:45:
a8:ab:f3:27:14:55:37:ea:13:55:bc:e3:00:f5:fb:45:a4:db:
b7:e6:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:13 2024 by rpki-client on console-fra.rpki-client.org