Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4399D7AA26211EF987994A1762E951A.roa
File: F4399D7AA26211EF987994A1762E951A.roa (raw, json)
Hash identifier: 552PmuD34J27JNmBZbnBcAJanbzGfez2XfiCKLmr2JU=
Subject key identifier: 10:E1:C7:56:F8:0B:60:6F:5C:18:E0:29:9A:8B:68:77:7F:BC:C6:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4399D7AA26211EF987994A1762E951A.roa
Signing time: Thu 14 Nov 2024 08:32:16 +0000
ROA not before: Thu 14 Nov 2024 08:32:12 +0000
ROA not after: Wed 19 Nov 2025 08:32:12 +0000
asID: 9123
IP address blocks: 154.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68854 (0x10cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:32:12 2024 GMT
Not After : Nov 19 08:32:12 2025 GMT
Subject: CN=6735b590-b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:35:d0:d7:92:5d:78:7f:53:2f:7d:69:7e:
b2:2a:ad:f9:ef:3c:5b:a9:7c:db:b2:a9:bb:9c:0d:
5d:3d:9e:f5:e6:e5:4e:da:33:98:6c:84:ea:f6:cf:
5e:42:9c:05:05:c6:a4:9b:d3:72:6b:ed:87:8c:85:
15:08:48:99:4d:70:78:a5:ce:a3:97:64:49:d8:ba:
60:83:bc:d5:e3:0f:d9:6c:87:98:5e:a6:f2:be:65:
bd:16:c0:4f:d6:c8:81:0c:2f:03:39:b1:8a:ea:9d:
a7:30:0a:fd:ee:a2:c6:48:4f:c1:3f:65:6e:5a:80:
0b:af:05:74:05:45:78:e6:0f:dd:0c:6c:40:e1:4e:
37:65:0e:f8:2e:ea:57:d8:d1:6d:9b:f2:f0:06:7c:
4e:d5:0a:14:e7:d6:01:74:92:2d:45:b7:1c:2d:ba:
8d:15:30:57:ed:96:7b:85:c3:1f:78:93:0d:35:4e:
52:c7:2f:4a:c5:ab:59:a2:a5:02:09:9a:d2:37:09:
83:d5:84:52:b2:62:d4:28:32:94:77:0b:90:a1:89:
5b:54:1f:dc:d0:c6:71:27:94:d8:db:f3:21:2d:02:
70:b3:d7:37:1e:1e:2a:09:ea:d9:6d:f4:10:2c:59:
f6:9c:87:54:4e:a6:66:58:cc:76:06:be:0d:06:2a:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:C7:56:F8:0B:60:6F:5C:18:E0:29:9A:8B:68:77:7F:BC:C6:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4399D7AA26211EF987994A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6b:01:4d:80:b2:2d:df:8a:89:db:4b:aa:56:81:87:71:74:
69:ae:9d:7a:3b:a8:af:5e:a4:dc:d0:92:dc:1d:9e:64:ca:f4:
f9:dd:2c:39:f2:66:b8:1b:fd:91:bf:e4:d8:b9:e9:22:bd:77:
6f:69:97:f4:d5:c3:9d:db:a2:97:5b:0f:72:bf:07:7c:32:d5:
3c:26:fd:3c:17:0b:02:a9:01:50:61:53:8a:38:1c:22:db:1d:
48:1a:2f:e1:d0:b2:b7:6f:d1:20:5d:c4:5f:10:10:08:24:21:
97:e1:30:ff:11:a8:ce:b9:5c:98:bf:15:8d:34:7b:d8:a8:62:
ce:1f:71:97:78:f9:a3:5f:86:41:93:75:a7:82:fb:6c:fe:82:
ba:f4:91:4c:ee:87:03:b1:24:9d:17:fb:81:f0:1a:f8:d4:58:
ac:bc:74:57:85:70:4f:69:71:d4:cf:66:f2:b5:ac:c6:a8:0f:
de:23:de:fe:94:92:c6:08:a9:a5:48:71:9d:bf:4a:d1:bd:36:
eb:f3:21:49:c0:d7:f2:13:7e:7c:ea:ce:a6:1c:eb:5e:8c:5e:
f3:5f:36:7c:60:4d:5b:f4:d9:18:ed:81:e8:b2:1a:77:47:81:
9f:23:01:0f:03:84:ea:08:c0:05:95:74:49:74:7b:1d:cc:80:
11:04:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:48:44 2024 by rpki-client on console-fra.rpki-client.org