Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123AE88022411EF9B6FBD59017001B1.roa
File: 6123AE88022411EF9B6FBD59017001B1.roa (raw, json)
Hash identifier: 7Zu2kEUmgJ68ccDnU7w4Ey9jB+DSUT3SvdQpQOLEc3c=
Subject key identifier: A0:CF:F5:AA:64:74:33:26:45:C9:57:A6:F7:A9:B7:D8:79:54:73:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B028
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123AE88022411EF9B6FBD59017001B1.roa
Signing time: Wed 24 Apr 2024 10:21:14 +0000
ROA not before: Wed 24 Apr 2024 10:21:11 +0000
ROA not after: Thu 12 Sep 2024 10:21:11 +0000
asID: 135097
IP address blocks: 154.89.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45096 (0xb028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 10:21:11 2024 GMT
Not After : Sep 12 10:21:11 2024 GMT
Subject: CN=6628dd1a-e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:a9:25:ef:63:fb:43:14:a5:63:31:e9:cf:
04:86:79:a0:15:28:72:ea:09:6a:74:69:95:e7:f3:
68:23:b0:06:54:a9:dd:65:62:0d:b2:f6:f6:93:d9:
40:5d:5d:92:49:6a:99:00:f7:d5:39:65:ad:7d:99:
ed:3e:56:c9:72:89:5b:b9:76:27:53:bb:68:4d:29:
d2:39:7d:7e:b2:25:c8:cd:f4:bf:53:47:14:88:36:
a1:6b:e6:5f:db:9a:4d:74:6a:ea:17:60:12:44:c0:
9a:72:e1:d3:f8:78:25:23:8a:d5:62:5e:a6:5a:21:
97:6c:3f:39:1e:2e:f5:01:23:88:d5:01:84:0d:99:
b2:04:b9:6c:db:a3:b3:19:f4:6d:fc:48:88:f6:09:
fe:10:c2:46:66:61:8a:a0:df:1c:38:12:d5:b7:b9:
ae:54:c3:5d:b0:56:55:7e:76:cd:37:6c:5a:5d:5d:
bd:8d:01:00:20:b0:d4:ab:2d:2f:56:fb:cd:34:fa:
52:c3:04:45:e0:e0:a2:b4:d1:4c:ce:af:13:58:11:
f8:44:8a:ba:83:6a:5b:e2:1f:59:cb:49:12:14:62:
29:96:84:f0:01:c9:55:d8:55:6c:4f:58:03:28:26:
7c:70:13:27:15:3a:73:c4:af:59:a4:8e:75:38:32:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:F5:AA:64:74:33:26:45:C9:57:A6:F7:A9:B7:D8:79:54:73:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123AE88022411EF9B6FBD59017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:1e:ea:cc:49:b5:f6:3e:9c:ef:6f:c2:6b:d9:5f:19:82:3c:
f8:84:f5:36:2f:3c:e8:3d:7f:e5:cf:8d:96:87:ac:fb:b5:57:
d4:bd:22:17:51:38:ef:9f:78:3f:27:cd:b4:9a:0b:28:31:f2:
77:28:8f:7b:f3:58:a9:81:f3:10:74:ac:a2:5c:b2:9d:db:49:
bc:35:3c:cc:cb:f5:89:ba:22:47:08:5f:89:94:a8:cb:5f:18:
90:f5:15:d8:a0:e0:e9:19:28:e0:fe:4c:c4:10:de:80:80:94:
4e:39:8e:2e:27:fe:4b:43:2e:90:f7:6c:0c:38:bd:50:24:71:
7c:a3:1b:53:67:d4:44:0c:f1:79:95:ed:97:78:f9:e9:df:e2:
67:a4:f9:b9:a6:4b:9d:7d:10:bd:0c:af:1d:1f:0b:65:e4:94:
c6:62:ba:be:11:99:e3:fb:fd:9e:f2:ee:14:81:90:fe:55:f2:
15:6e:c9:14:75:d0:65:bb:58:ae:37:f3:c8:0e:23:af:54:00:
73:f7:31:0d:23:fc:f9:1b:29:23:f2:37:fe:3f:3c:ea:e9:96:
34:7f:3e:6e:99:e0:4a:6a:7e:8b:95:7e:df:8d:35:12:bf:8f:
83:4b:2c:da:ae:ad:7c:53:2f:a0:96:b7:27:a0:1f:00:b6:75:
bf:a3:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:15:21 2024 by rpki-client on console-ams.rpki-client.org