Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DDD629A1E5211EFAF2C57DE7CDC24C2.roa
File: 2DDD629A1E5211EFAF2C57DE7CDC24C2.roa (raw, json)
Hash identifier: m3rcnyvjH9kC0OjJoDH9TTORVmq1cY76D/teu9ktfLI=
Subject key identifier: AF:8F:01:4A:B9:08:52:E9:B1:A5:20:D5:E0:5B:9A:60:70:36:19:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BBF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DDD629A1E5211EFAF2C57DE7CDC24C2.roa
Signing time: Thu 30 May 2024 06:59:38 +0000
ROA not before: Thu 30 May 2024 06:59:34 +0000
ROA not after: Mon 01 Jul 2024 06:59:34 +0000
asID: 44559
IP address blocks: 154.209.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48118 (0xbbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 06:59:34 2024 GMT
Not After : Jul 1 06:59:34 2024 GMT
Subject: CN=665823da-d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f0:20:52:df:6c:7d:2a:de:fc:92:78:04:3a:
9d:6d:df:a1:74:64:d4:73:96:d7:60:e8:f3:8f:f8:
d9:bf:24:bf:ab:c1:30:a9:ad:9a:a4:75:9e:3a:da:
93:b7:74:b0:28:58:68:d3:37:b9:75:70:e3:e2:de:
3e:b9:74:ff:03:57:53:2a:7e:69:fc:67:56:fd:9b:
ce:f1:e0:e9:41:56:5b:c7:df:4e:d6:ba:f0:62:a0:
49:f3:be:1c:84:76:27:a4:91:3f:e4:3d:0d:3c:dd:
cc:13:7c:90:3c:ba:89:d5:14:99:30:10:23:da:b8:
b0:bd:bc:8b:ab:69:39:55:a5:22:42:35:d1:e4:f5:
10:54:24:63:ea:bd:7e:a7:17:b3:f0:33:67:2f:4e:
4b:5f:f3:47:d2:14:6f:c6:82:c4:dc:50:5e:9a:2f:
44:e2:89:cb:6b:7e:09:eb:90:37:b8:c5:8c:46:a0:
ee:fc:a3:65:e7:ab:45:cc:fc:63:97:5e:87:ad:2a:
cf:94:e0:05:89:28:b8:96:c3:4a:78:d1:64:72:ee:
40:4c:90:2f:8b:85:89:f4:92:74:0c:f2:72:04:aa:
8b:ff:30:39:1a:f9:b2:33:3e:03:6a:e9:5e:7f:1c:
01:00:65:bb:c6:3c:9f:e3:1b:3e:f0:13:62:4e:fe:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:01:4A:B9:08:52:E9:B1:A5:20:D5:E0:5B:9A:60:70:36:19:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DDD629A1E5211EFAF2C57DE7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.150.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:64:59:21:38:38:f7:21:29:9b:6e:60:74:4a:9b:bf:30:0c:
71:9e:1e:4c:57:15:1d:70:7a:f1:3e:79:1d:4e:09:3b:2b:85:
f3:cf:e2:37:d1:c1:f9:f4:c5:57:21:1c:34:70:f3:5c:c0:bc:
7f:de:7d:c7:2c:c5:3d:56:06:2f:6c:0b:e2:df:85:c1:6a:b8:
c6:52:e6:ee:5f:ab:a1:32:fc:a0:0b:15:68:e5:05:2a:ee:63:
eb:51:b7:d7:98:f9:c9:dd:ff:fe:ea:28:d1:0a:f0:01:c5:dd:
4a:f2:0e:bc:4d:35:e9:da:27:aa:be:7b:0b:a5:97:6a:55:40:
4c:b8:e4:a6:f5:98:1f:61:cb:eb:18:6c:a2:df:db:7a:24:7e:
d1:5d:4a:07:23:15:1c:8f:6c:38:d6:df:a8:8c:70:4b:58:df:
16:ff:b5:9e:9e:e0:ec:ca:39:a9:48:b4:54:ae:88:bf:30:aa:
35:82:6b:c0:08:ae:e7:b4:1e:7f:e8:f1:22:87:6b:47:b8:d1:
ba:48:51:a0:50:67:a8:9b:e9:14:1d:3f:3b:89:bb:77:b7:c3:
ed:11:9b:49:28:12:4e:3a:dc:ef:aa:96:f7:95:b7:21:eb:00:
86:83:66:fa:c1:97:17:dd:fb:99:1c:96:c6:1d:d1:c6:ee:b6:
ee:d5:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:21 2024 by rpki-client on console-ams.rpki-client.org