Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD9AB9E0B4B11EFA7E5B365017001B1.roa
File: 6CD9AB9E0B4B11EFA7E5B365017001B1.roa (raw, json)
Hash identifier: UTeYT8Nj2eoN8riqQJBI709N1bFzWyW5Q1V3ETpNUNk=
Subject key identifier: 23:2C:EE:48:2E:24:62:E0:75:0C:C9:C5:5B:9A:B8:2B:08:84:AE:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B45E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD9AB9E0B4B11EFA7E5B365017001B1.roa
Signing time: Mon 06 May 2024 01:53:25 +0000
ROA not before: Mon 06 May 2024 01:53:22 +0000
ROA not after: Tue 11 Jun 2024 01:53:22 +0000
asID: 138915
IP address blocks: 154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46174 (0xb45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:53:22 2024 GMT
Not After : Jun 11 01:53:22 2024 GMT
Subject: CN=66383815-ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:4a:94:48:a1:1c:98:f0:98:9d:74:10:00:
5d:a5:12:9a:70:55:81:21:0a:17:0b:3a:74:19:4b:
ca:8d:35:ab:a0:77:d7:4f:ec:30:4f:a8:e6:9d:56:
38:d9:86:c8:4f:6b:22:50:5f:fe:37:88:b8:5b:c3:
e6:af:c1:67:ff:91:0c:83:b8:c5:ec:f1:61:f7:34:
3d:97:d4:0b:9a:9c:b5:0f:ff:0f:59:19:b6:02:ff:
68:16:cf:2b:5f:4e:46:2f:8f:43:22:d0:35:e9:3f:
86:3b:03:07:0a:e9:2f:34:fc:f5:41:13:f3:98:16:
58:3e:b1:d4:44:01:b1:52:5f:00:e5:19:82:5a:77:
f9:db:1a:ca:2f:90:5f:0d:4c:67:b1:76:7d:10:85:
0e:25:ad:65:8a:c2:a1:39:28:8d:60:02:57:97:1d:
6b:eb:d2:a9:4f:ca:96:ee:18:fb:6d:a5:ee:37:96:
98:c0:c6:a3:07:e1:22:44:50:32:4c:b3:ef:dd:32:
82:c2:39:6e:44:f5:4b:c5:62:66:85:04:b0:0e:d7:
d4:05:ab:84:0e:40:63:35:34:71:95:6a:4d:e6:ca:
87:07:77:01:ab:2e:13:f5:a0:cc:5a:26:83:39:21:
39:34:9f:d7:28:32:65:ec:63:17:45:7b:07:31:31:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:EE:48:2E:24:62:E0:75:0C:C9:C5:5B:9A:B8:2B:08:84:AE:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD9AB9E0B4B11EFA7E5B365017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4c:7c:d0:f9:05:be:f6:7d:51:16:41:20:08:d3:4d:78:2b:
3f:40:61:a5:32:b2:ff:55:cd:9e:63:7f:58:c9:a5:45:58:0a:
3a:d6:e0:9c:e6:8a:8d:1d:34:94:bd:45:4f:82:6f:16:24:79:
32:aa:d4:ff:50:4b:f5:e1:f2:67:c5:25:b5:fd:9a:9d:de:64:
43:d1:16:15:87:78:77:f9:61:68:93:7d:b3:e5:f1:d9:b8:15:
30:df:6c:5c:21:9f:d2:3f:fb:c5:0a:e7:ed:3f:05:b9:dc:4a:
34:9a:01:3e:5c:6c:83:ea:e8:3f:43:a7:ef:0c:3a:04:c0:64:
fd:92:57:49:90:22:8e:3d:bc:a0:aa:6c:f7:08:af:7c:4c:87:
f8:e4:c1:87:dc:51:73:5f:03:d2:38:01:38:79:6a:b9:db:c4:
10:db:d3:0f:2a:40:29:e8:88:e2:07:69:e7:51:48:63:32:8e:
57:a2:90:2c:1d:f2:96:b6:95:36:9b:2b:1a:3c:cc:31:05:e0:
6a:0f:aa:06:12:d2:85:82:3d:17:9c:40:f4:91:07:a4:2f:e2:
1a:96:65:ee:29:cc:a7:44:af:87:2b:9c:91:e0:ca:cb:cb:29:
ef:2f:ec:91:09:a4:a3:53:2e:72:be:97:8b:bc:11:be:a6:7d:
be:63:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:24 2024 by rpki-client on console-ams.rpki-client.org