Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69564D7CCCC311EEAEE0D18D775412E6.roa
File: 69564D7CCCC311EEAEE0D18D775412E6.roa (raw, json)
Hash identifier: QX7tznKF6QS6hi00assuQDqRGXMQYSY/UQNEaF6dXC8=
Subject key identifier: 72:B4:F0:9E:36:3A:F7:64:81:97:6A:C0:C3:C6:D9:78:CC:24:0B:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69564D7CCCC311EEAEE0D18D775412E6.roa
Signing time: Fri 16 Feb 2024 12:03:35 +0000
ROA not before: Fri 16 Feb 2024 12:03:32 +0000
ROA not after: Fri 26 Apr 2024 12:03:32 +0000
asID: 9009
IP address blocks: 154.218.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35617 (0x8b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 12:03:32 2024 GMT
Not After : Apr 26 12:03:32 2024 GMT
Subject: CN=65cf4f17-96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:65:5e:73:10:0a:36:d0:32:55:d1:ec:d9:
a2:f1:98:a4:a7:74:8d:f9:ea:c0:33:74:2d:c7:7a:
c6:fb:20:04:c3:6c:54:6a:6c:c1:79:9a:54:99:90:
d5:f0:b7:9b:56:a4:6b:62:cb:29:84:4b:1a:26:8c:
77:5b:d0:9d:2c:e7:a8:10:04:0e:90:6d:cf:42:d8:
c6:0a:53:b9:9c:9b:5a:28:f9:25:b8:0e:b4:2e:85:
e9:50:5e:70:f2:39:10:dc:8e:1b:1d:f3:c9:34:95:
63:f8:f6:a6:42:ff:60:1b:ea:c8:9e:e6:39:ea:15:
dd:4d:ce:e8:c6:d9:54:e8:8e:13:14:eb:7f:7a:11:
91:5a:09:31:d6:2a:ab:84:8e:16:e3:7b:09:14:7f:
46:b9:61:ff:10:27:25:4a:45:f1:92:39:65:82:05:
af:fb:0e:39:e2:46:90:de:75:01:60:20:69:4c:70:
f7:ad:1f:e4:60:81:82:cf:80:ca:12:c2:8a:5b:60:
c5:9d:e4:20:c5:e6:ba:b7:6c:3d:fd:76:c2:fa:05:
0e:fc:30:90:13:f3:c6:6c:8f:b2:09:22:7b:99:1d:
42:19:1f:6d:79:34:60:ed:cd:0c:3a:c9:54:53:81:
2a:d9:d9:db:ff:74:75:88:ce:e7:fe:be:b1:aa:e4:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:F0:9E:36:3A:F7:64:81:97:6A:C0:C3:C6:D9:78:CC:24:0B:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69564D7CCCC311EEAEE0D18D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:40:25:14:a9:97:d8:2d:8c:c1:5c:88:c2:35:db:16:96:c0:
32:c2:c9:6e:01:a7:05:6b:78:5a:a3:8f:3f:42:b5:69:f7:6d:
d9:a9:4d:d2:4e:9c:ce:ec:b2:ee:6a:97:c9:1e:00:02:57:00:
f5:b0:51:ec:68:a6:ce:42:05:94:9b:5a:7c:91:96:90:dc:8b:
6a:b3:11:01:0c:2b:3d:f0:08:e0:7c:d8:b2:3f:65:ae:f3:69:
11:2b:04:4c:b9:68:4a:64:bb:c8:86:2b:56:30:d9:6a:1b:d9:
7d:d5:65:d9:b6:58:a0:ee:a5:d2:11:cc:3d:d9:da:f9:db:d2:
ab:a6:d5:56:10:92:17:31:91:22:6d:4a:67:f2:e1:29:6d:76:
c9:a2:5d:ed:10:ab:7b:f5:5c:0b:bd:59:53:31:7e:07:02:f6:
47:06:df:e9:a5:60:7b:72:b9:78:dd:4e:40:44:26:4a:e8:c4:
4b:da:78:a0:8f:dc:ce:8a:45:30:db:bf:11:00:aa:81:77:d5:
8c:c7:5c:16:dc:1e:ee:b0:2c:7a:04:a4:56:5d:e3:d0:63:76:
60:a7:26:38:8f:a3:91:07:f0:61:81:80:99:ff:e4:7e:8f:53:
f1:ab:4c:d0:65:dc:ed:df:10:21:5e:f8:ac:bd:df:7d:0c:b5:
87:f4:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:38 2024 by rpki-client on console-ams.rpki-client.org