Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6279CA4C039611EF92E3E623017001B1.roa
File: 6279CA4C039611EF92E3E623017001B1.roa (raw, json)
Hash identifier: pN75UKVyW3nOQAEXFjy0lsNGKqIBZlR3cx4x9g/3k6c=
Subject key identifier: EF:51:F3:7A:74:3D:82:D0:9B:52:23:04:85:2A:35:B7:E7:1C:7F:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B18E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6279CA4C039611EF92E3E623017001B1.roa
Signing time: Fri 26 Apr 2024 06:29:50 +0000
ROA not before: Fri 26 Apr 2024 06:29:47 +0000
ROA not after: Thu 08 Aug 2024 06:29:47 +0000
asID: 138415
IP address blocks: 154.204.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45454 (0xb18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 06:29:47 2024 GMT
Not After : Aug 8 06:29:47 2024 GMT
Subject: CN=662b49de-84f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:c2:f6:02:e7:b8:8d:71:a9:4a:de:e1:49:
b6:9f:7a:c4:f0:20:0c:8b:d4:fd:02:b5:e7:6e:5e:
ee:68:33:87:94:3f:ff:df:7d:ec:6f:a1:78:55:a3:
63:3a:a8:13:4f:71:e7:55:27:41:d1:b2:34:a4:2c:
4f:08:85:6d:44:b7:7b:1a:c2:00:71:d3:47:37:fd:
74:6c:e8:b4:68:dd:2a:f4:9a:92:9a:8d:85:c8:98:
91:76:ff:c1:db:9f:94:77:e8:ef:a0:5a:90:a8:f1:
2d:23:3c:71:d3:98:5f:df:5b:71:23:16:79:4d:de:
f4:a8:71:3c:78:fa:9c:e3:8c:c7:33:63:a0:78:50:
94:ef:c9:21:f4:7c:45:c8:ee:53:2c:a9:0e:d7:f8:
36:1c:70:8d:9f:cf:86:33:49:78:aa:7b:b5:74:d6:
96:9a:2c:71:eb:e8:7c:81:97:ff:01:dd:e5:52:f3:
99:73:50:f5:8d:e1:b8:f1:ec:aa:eb:fc:22:12:6d:
53:0c:71:6a:91:1b:48:23:b5:c0:5b:56:72:44:8e:
5d:4e:e6:34:3e:fd:eb:cf:6b:ed:92:2e:73:6b:a6:
e2:6b:78:93:66:a7:fd:1e:64:90:b6:4b:d8:99:f9:
6e:25:45:c0:d8:34:9a:1c:99:5b:22:91:0c:47:4a:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:F3:7A:74:3D:82:D0:9B:52:23:04:85:2A:35:B7:E7:1C:7F:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6279CA4C039611EF92E3E623017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.24.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:c4:77:f5:a9:66:cb:ce:35:a2:79:e9:f1:97:88:20:2f:93:
2e:45:cf:4d:4c:ca:64:26:9d:85:55:4a:b9:80:d9:f2:2e:6d:
91:66:32:fc:44:db:f6:07:66:84:99:17:ca:c5:a2:51:b4:e1:
a2:84:67:03:eb:96:e8:ff:55:46:8d:65:c5:8e:11:84:3e:18:
a3:d7:3f:ab:32:d7:6a:a0:c1:f7:f1:98:c6:b7:a4:f9:9b:11:
ab:35:6a:ea:2e:c4:fc:e5:d8:5c:49:b6:62:d3:c5:9f:39:37:
d0:f5:74:96:b3:8a:9c:f4:e8:d9:ed:0f:8d:a7:ce:3a:95:08:
ee:08:c1:1e:86:6a:2c:60:74:e1:2e:0a:eb:9d:f1:8c:76:0e:
2f:1d:45:5c:97:12:4f:8b:e9:ac:94:6e:5e:6d:c7:c4:72:74:
c0:81:64:96:f8:15:8b:a2:7d:7f:10:ef:8f:12:34:59:79:9e:
73:10:a9:cc:07:42:57:f9:c5:88:0e:a4:6b:fc:8e:e1:fd:91:
6e:c0:2f:b5:37:62:f4:b1:08:db:20:71:c7:2d:8c:54:c5:a0:
70:ed:7e:87:19:f6:b0:6b:60:5b:73:fa:23:01:fe:c1:b0:e6:
dd:2a:fc:db:95:62:6a:1c:9c:e2:4e:6c:31:36:a1:23:e6:23:
a8:57:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:23 2024 by rpki-client on console-ams.rpki-client.org