Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C0F034A26E11EF8DA4206E762E951A.roa
File: F4C0F034A26E11EF8DA4206E762E951A.roa (raw, json)
Hash identifier: QxceKVgh069fs1D5+QFoSWT+sNWyMLA8/xYPmaSxouY=
Subject key identifier: 5B:10:3E:1A:12:67:47:F0:2A:E8:C1:37:A5:2B:D0:48:1C:0C:2E:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C0F034A26E11EF8DA4206E762E951A.roa
Signing time: Thu 14 Nov 2024 09:58:11 +0000
ROA not before: Thu 14 Nov 2024 09:58:07 +0000
ROA not after: Sat 23 Nov 2024 09:58:07 +0000
asID: 137443
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 09:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68872 (0x10d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 09:58:07 2024 GMT
Not After : Nov 23 09:58:07 2024 GMT
Subject: CN=6735c9b3-1284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:e0:2d:f4:ae:0e:4f:e5:7f:5f:5e:9a:f0:
8e:78:de:68:74:54:ed:7c:a0:91:27:dd:b5:43:a0:
a7:92:f9:b1:6b:7d:11:c7:67:c1:83:6b:eb:3b:f9:
b1:25:71:d3:b2:eb:fd:68:14:ad:57:02:15:82:12:
8a:68:d1:2e:73:a4:15:90:2c:4d:08:c3:63:48:61:
5f:f9:5d:aa:8d:26:cb:31:5e:03:27:ec:3d:bb:67:
62:35:40:c5:c2:ea:f9:6d:7c:01:27:c8:7c:7c:e9:
e0:2e:b4:31:2e:3f:d0:a7:0c:58:d9:be:28:f1:d0:
cb:f6:04:2d:eb:a0:a5:66:99:35:1d:e8:10:75:38:
c2:69:2f:5c:84:84:c7:e4:40:ac:de:99:16:47:3f:
b8:fc:98:61:f3:5f:80:55:7f:f0:31:e1:4f:13:89:
4e:7d:dc:c0:df:20:83:d5:53:25:d0:2d:85:07:20:
32:4a:98:fe:d4:72:d8:6a:7c:48:5d:2e:bb:fe:ca:
33:b6:0b:0c:e9:74:6a:fe:3a:52:d1:5c:90:34:62:
90:e4:33:bf:9c:96:ad:61:f2:26:9a:1b:85:bd:b6:
66:3d:b8:bf:af:9f:e8:fa:6b:e1:27:ef:7f:66:ff:
e8:64:47:c4:c9:1a:03:f6:d4:ab:8b:5b:c6:ce:df:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:3E:1A:12:67:47:F0:2A:E8:C1:37:A5:2B:D0:48:1C:0C:2E:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C0F034A26E11EF8DA4206E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:89:31:0e:e3:4b:c6:48:9e:15:6d:0b:7e:e0:9a:3d:37:ce:
af:fd:a9:91:05:90:15:4f:68:e8:cb:75:14:37:e7:0f:c9:94:
8e:0a:58:85:1e:1a:08:25:3f:e2:d0:bf:23:94:48:e8:f4:b5:
5c:04:1e:ff:93:0e:b7:d6:9c:21:ce:e2:72:ef:2e:03:46:53:
30:e2:7c:e4:bf:fb:67:2e:12:fd:43:5a:28:52:06:83:c2:57:
e3:03:9d:3a:11:ed:88:87:77:ea:2f:11:4d:db:90:2c:30:1f:
a7:e7:1c:c1:91:42:33:da:ac:d9:f2:9c:b0:15:d6:60:dc:b9:
17:e9:6d:3f:84:ba:a4:ae:27:1c:e5:37:b6:e9:ee:ea:00:ae:
5a:3c:bd:dd:c4:11:92:ba:3b:ec:ff:12:3c:1b:4c:27:5f:c4:
55:e7:e8:a1:e1:00:d5:99:af:e8:a5:03:3e:4b:f6:67:63:e6:
e1:1b:6a:72:e6:9a:ae:a5:e0:f4:79:98:e4:37:9b:07:9e:92:
1b:93:01:da:42:8f:6c:3a:02:cf:82:a6:c1:9e:5b:26:df:ee:
14:7d:f1:b0:cf:5c:2b:14:69:cb:88:e6:00:6d:bc:fc:a3:3d:
cb:23:d6:fa:76:15:51:53:ef:8b:07:ff:a7:c2:ac:9b:0f:8d:
36:d4:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org