Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB9183A0B4D11EFB8CF55FB007001B1.roa
File: 6EB9183A0B4D11EFB8CF55FB007001B1.roa (raw, json)
Hash identifier: Cben25Njh/ncbDl1opRq+SIlbqYuG05Sj/Wu/cRSBQ0=
Subject key identifier: 67:17:7C:E5:79:FE:0A:72:4C:69:B0:E1:A9:AB:E7:0F:AF:4E:5A:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB9183A0B4D11EFB8CF55FB007001B1.roa
Signing time: Mon 06 May 2024 02:07:47 +0000
ROA not before: Mon 06 May 2024 02:07:44 +0000
ROA not after: Tue 11 Jun 2024 02:07:44 +0000
asID: 138915
IP address blocks: 154.203.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46194 (0xb472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:07:44 2024 GMT
Not After : Jun 11 02:07:44 2024 GMT
Subject: CN=66383b73-8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:82:78:d9:76:f4:e8:6c:6f:08:02:d2:5a:
f5:46:c0:dc:2a:95:dd:4e:d9:dd:2a:b0:e4:1b:e3:
04:ae:03:04:6f:9c:78:7c:81:df:f0:b8:38:56:1c:
1e:0c:8b:61:28:1b:ad:91:96:55:ad:d1:b3:5c:0e:
9a:54:0f:fe:5d:aa:6e:40:13:c3:d4:dd:fe:6d:53:
e4:40:dc:e7:1d:9d:77:ab:da:fb:f1:18:ca:f4:81:
35:92:da:b4:6e:dc:a6:bb:1d:49:ca:fd:56:32:89:
8a:a3:9f:df:9c:36:19:dc:77:f4:52:d6:ad:d3:52:
58:56:cc:0d:26:b5:61:38:44:6c:b3:b1:7c:e9:b4:
33:3b:80:7e:ba:09:85:1f:3d:07:8c:94:29:0d:b9:
b4:d0:d8:4e:6c:4a:0a:7d:cc:de:f3:a7:ff:a7:d5:
05:09:e2:d0:99:64:a3:08:ee:16:82:7f:e2:f7:ee:
00:9d:3b:56:25:d8:3f:ea:29:32:75:d3:81:f3:59:
ac:0e:4b:5a:e4:dd:fd:e0:4a:33:b0:d8:99:ac:b3:
7b:90:ec:72:23:f4:65:c3:ba:ce:23:04:f7:72:de:
04:0d:2c:35:a2:81:1b:c3:7e:5e:01:b3:9a:b6:c0:
28:f5:2c:da:c8:cd:3a:e7:3d:ba:66:5b:10:25:0a:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:7C:E5:79:FE:0A:72:4C:69:B0:E1:A9:AB:E7:0F:AF:4E:5A:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EB9183A0B4D11EFB8CF55FB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:7d:81:1d:a3:0f:fc:66:2d:2a:d2:9d:db:61:d6:ab:1e:33:
48:7f:03:77:99:f6:5c:ec:ba:58:1c:73:c2:93:8f:04:e8:d3:
ac:9f:67:6d:05:32:d6:bf:dd:a9:32:5d:b6:67:7e:80:ee:34:
ad:9b:f7:9f:48:fd:a1:c0:fc:42:50:85:e8:40:c2:7f:f8:f8:
86:44:ec:99:f2:5c:37:cd:d2:e7:93:75:e7:ab:3b:e4:f4:56:
b7:a0:b8:7a:c1:93:53:3c:51:28:ec:70:f0:2c:ec:ea:5c:d8:
fc:5a:3d:2b:72:14:05:70:9b:a9:02:39:4f:88:e6:a3:44:b8:
20:8e:fa:d0:df:d4:6a:62:3d:96:f0:01:f8:d5:b1:cb:d3:ce:
00:84:f8:9c:aa:f9:d6:15:41:c8:6b:d6:6d:f4:99:1c:44:1b:
0a:80:eb:5c:4f:50:9a:a4:32:35:2c:b4:3c:d8:0b:f5:69:78:
52:b0:20:74:f4:d1:41:3e:61:c6:ca:84:bc:f9:0f:01:68:fe:
19:31:3e:6d:85:e9:7f:6a:87:f0:f8:ce:07:20:b0:e9:46:28:
4e:94:52:32:61:34:e3:d3:ed:ed:ef:12:81:86:b6:e7:ec:41:
ec:08:df:25:58:b9:2e:7b:74:b9:bf:54:77:cd:ea:de:2c:91:
46:21:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:17 2024 by rpki-client on console-fra.rpki-client.org