Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061FB21E92E011EFAE6774B9762E951A.roa
File: 061FB21E92E011EFAE6774B9762E951A.roa (raw, json)
Hash identifier: ZcjQPATJ8vFB2lsukJt05FwP77mxqJDuZ3PH9YDrGDU=
Subject key identifier: 35:67:50:31:BA:70:05:46:8F:32:14:06:02:96:26:F5:2E:EE:B4:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010248
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061FB21E92E011EFAE6774B9762E951A.roa
Signing time: Fri 25 Oct 2024 14:47:14 +0000
ROA not before: Fri 25 Oct 2024 14:47:08 +0000
ROA not after: Sun 01 Dec 2024 14:47:08 +0000
asID: 48031
IP address blocks: 154.223.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66120 (0x10248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:47:08 2024 GMT
Not After : Dec 1 14:47:08 2024 GMT
Subject: CN=671baf72-2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:f3:38:b5:cd:f1:4d:e5:04:5c:69:96:dc:
9c:ed:41:3f:1b:74:0b:37:45:04:61:5f:1b:31:12:
db:c7:f6:d9:ab:03:72:60:ea:bd:82:f8:90:29:c4:
ce:8a:96:bb:0d:fc:59:69:47:53:14:36:d5:bc:95:
21:82:c6:0b:66:42:de:d3:78:63:d1:d3:a8:11:33:
54:d3:b0:d0:c1:42:23:ca:25:8e:c4:18:8b:d8:c8:
60:9f:75:6d:2d:86:6b:17:54:03:bd:2d:93:ff:85:
15:33:bd:c3:92:8e:1a:d2:f5:04:4d:97:15:21:66:
00:4d:59:a8:51:07:1b:38:dd:74:e9:4a:aa:62:61:
71:fb:2c:31:ac:bc:ee:e2:c8:a1:7b:6d:d3:ef:e4:
71:80:6f:18:7d:4b:31:71:12:36:e9:76:60:22:ea:
36:3b:84:47:16:04:aa:fe:c4:87:c2:3c:8c:39:e4:
1e:05:6b:9f:2d:53:c4:ac:aa:29:96:9f:f3:d0:f9:
16:8d:f6:cd:aa:2c:d9:95:95:f9:6b:4d:d3:6e:96:
5a:bf:54:de:43:a7:05:9c:d0:75:74:c6:01:e4:a1:
41:99:31:2b:00:6f:8c:65:8d:36:0d:2e:9d:4f:d5:
e9:50:11:ce:99:db:98:0e:4a:86:18:86:6a:94:1e:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:50:31:BA:70:05:46:8F:32:14:06:02:96:26:F5:2E:EE:B4:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061FB21E92E011EFAE6774B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:db:d3:5f:8c:0c:32:c6:4f:39:3e:a9:a7:2c:3f:6d:3f:3a:
e0:df:2d:e5:17:fc:b3:a8:34:a9:8d:8d:40:1d:34:d5:22:95:
92:9c:38:0e:fe:72:e9:af:11:43:e4:ce:47:b1:a0:6c:d8:f5:
6f:74:32:cf:65:7c:30:e1:21:bd:a4:73:88:db:c1:2f:dc:85:
71:f9:59:0c:e0:be:d5:b3:88:30:8f:fb:13:fa:dd:ad:c1:5e:
92:11:62:1f:3c:7e:a7:54:a1:33:0f:31:28:41:2e:4e:ab:b0:
9d:e9:3b:e7:c9:5f:74:3f:fa:b6:d7:05:ed:a2:c5:5d:25:f8:
52:df:33:3d:a2:6b:12:63:c9:df:cd:eb:b3:3d:bc:11:be:e1:
ee:77:9e:9b:35:84:bc:51:22:cc:67:fe:06:89:a9:cd:be:4c:
e4:dc:b3:7d:13:3c:cf:8b:5f:0e:b4:b8:e3:1a:a8:ca:cb:ee:
82:e7:c3:4d:b1:24:7d:19:14:9e:ac:9c:fa:c3:2e:a9:bf:1b:
d3:a0:78:ac:a7:00:7f:c5:9a:a3:4a:b1:e4:a4:e2:86:00:13:
d1:19:4b:11:0d:d0:ae:ed:bf:ff:19:eb:ed:7e:3f:20:aa:22:
83:21:63:f9:ec:5c:f5:ae:4c:1f:0e:52:d6:89:cc:d3:51:a1:
97:66:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:58 2024 by rpki-client on console-fra.rpki-client.org