Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B66FA206CD11EF820B5D5D017001B1.roa
File: A9B66FA206CD11EF820B5D5D017001B1.roa (raw, json)
Hash identifier: uQYwQyNSH4drEEDdWOE6bTU8himoKlO/4+EDniVItH4=
Subject key identifier: D0:56:65:67:33:C8:0F:A3:31:B7:50:0C:70:69:E5:5A:57:FE:3F:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B28F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B66FA206CD11EF820B5D5D017001B1.roa
Signing time: Tue 30 Apr 2024 08:43:06 +0000
ROA not before: Tue 30 Apr 2024 08:43:02 +0000
ROA not after: Sat 25 May 2024 08:43:02 +0000
asID: 5065
IP address blocks: 154.206.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45711 (0xb28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:43:02 2024 GMT
Not After : May 25 08:43:02 2024 GMT
Subject: CN=6630af1a-6315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:b6:fe:65:bd:2d:be:40:30:9f:1c:05:16:
95:61:8c:6a:3f:f4:ec:29:2b:d3:a2:4b:a4:fe:c2:
76:51:cd:c8:44:52:97:97:53:c9:9a:c3:03:94:4f:
96:e2:5e:24:64:41:59:8d:99:55:45:8a:17:a3:1b:
c2:06:c6:f8:e0:3b:c4:11:ef:0d:28:63:b7:80:ff:
08:33:e3:66:38:9b:0b:d2:7f:ac:9e:ea:2c:ea:13:
73:e2:9c:9f:75:cf:b4:60:d9:d5:84:f3:c1:08:55:
b1:62:96:26:c7:d4:bb:e1:80:56:19:2e:3a:b0:18:
b3:00:cc:05:ef:67:88:93:10:81:65:01:69:99:9f:
78:54:14:65:fa:5e:f0:09:a6:3e:8d:ff:00:1c:2d:
43:cb:10:68:bb:21:c4:9c:67:13:e9:9d:7a:23:a8:
a1:fe:ba:68:32:c6:7d:36:8a:64:35:df:96:36:15:
ed:14:ae:d6:be:c8:b7:fb:bb:e8:34:97:14:b3:af:
ed:e2:e8:25:94:21:5d:3b:2b:d5:86:90:53:bb:35:
c6:56:15:87:af:63:7b:63:da:7c:78:75:fc:63:92:
95:fb:39:5f:6a:e2:a4:1d:93:15:11:00:22:a7:7b:
c5:41:f1:59:0a:51:b8:39:54:13:40:2b:69:be:3a:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:65:67:33:C8:0F:A3:31:B7:50:0C:70:69:E5:5A:57:FE:3F:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B66FA206CD11EF820B5D5D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.41.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:f1:c8:9e:8a:88:77:0f:20:97:c6:f9:66:7d:41:b1:e5:b6:
eb:40:a2:24:58:c0:f6:74:7e:a4:b2:2e:58:1f:63:a4:29:e3:
cf:a7:90:f4:89:49:00:5b:c9:47:7d:67:fc:76:be:68:1d:a0:
ee:3a:21:a4:dd:f9:df:1a:37:49:ed:db:82:69:1b:2d:2a:1c:
07:a0:7e:a9:cf:26:7a:4b:a1:d7:33:be:55:44:6f:95:c7:37:
92:b6:64:8b:f0:c6:5e:0b:73:74:cd:bd:f4:2b:8e:85:70:ca:
e8:f9:ea:20:f1:91:47:d6:9a:c6:0a:f3:85:e7:33:5a:c4:09:
07:5a:6a:f2:4f:de:af:9a:79:ae:b4:d6:22:69:3f:93:20:91:
0d:0e:82:9e:36:8d:98:1f:ae:91:52:53:a4:1a:c4:45:43:86:
41:b6:65:06:20:99:3e:d2:c3:d3:bb:0b:5f:ec:0b:db:a4:a9:
64:03:75:6f:69:e9:86:6b:81:bc:bc:9a:ce:e7:1b:90:42:09:
de:4a:7f:77:01:14:0a:41:c3:e5:55:2c:49:de:af:58:cd:e0:
a0:94:9b:f8:84:30:8a:92:5d:12:41:42:34:ec:fd:2d:73:d8:
b9:f0:f7:e9:4d:f7:44:98:71:c4:55:50:13:22:f7:09:c3:38:
3e:49:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:21 2024 by rpki-client on console-fra.rpki-client.org