Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06537D887B2011EFB530F097762E951A.roa
File: 06537D887B2011EFB530F097762E951A.roa (raw, json)
Hash identifier: gIXQFhkaFil2pxuSmR83HL79F4RrRZgBg+C5ajrvS7M=
Subject key identifier: 5A:D4:07:91:95:87:81:BA:BC:18:05:67:B1:54:C6:57:D9:98:CA:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F342
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06537D887B2011EFB530F097762E951A.roa
Signing time: Wed 25 Sep 2024 09:24:55 +0000
ROA not before: Wed 25 Sep 2024 09:24:51 +0000
ROA not after: Wed 18 Dec 2024 09:24:51 +0000
asID: 47890
IP address blocks: 154.214.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62274 (0xf342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:24:51 2024 GMT
Not After : Dec 18 09:24:51 2024 GMT
Subject: CN=66f3d6e7-be6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:3f:92:e9:b7:d2:c4:c7:36:b0:f7:f1:6c:
2b:85:fc:39:78:39:07:31:2e:f4:1c:46:b9:75:61:
2d:ff:a8:bf:f1:1a:35:c8:8f:d3:45:09:59:73:94:
bf:30:d7:b4:f0:19:53:3a:b2:fe:bb:da:53:9b:74:
fb:98:cd:b5:48:b3:ff:f4:a1:e7:dc:f7:65:33:a3:
62:22:6a:98:6a:91:28:4e:22:c4:89:27:7a:72:50:
dc:6d:74:89:b4:bd:fe:02:66:61:23:b4:87:f9:41:
c5:3f:8a:27:f1:ec:69:04:24:de:44:d1:b1:c5:19:
6c:dc:e6:40:2e:6e:fd:a8:ae:d5:b1:ca:14:e4:12:
22:f2:73:dd:1d:89:6c:9e:dd:4a:af:53:6d:95:32:
ef:10:3e:ce:2a:1a:cf:c6:16:eb:e1:a3:c5:92:a8:
5a:26:2a:43:41:75:67:79:de:c9:d3:c8:b6:b9:29:
87:8b:39:31:e1:76:cb:2e:cd:8b:84:43:76:48:9d:
f5:5d:4b:95:3b:17:07:b8:2b:22:8a:fc:41:c6:6a:
23:7c:cd:4c:8c:4a:30:0e:68:b3:85:fc:ef:36:28:
83:9c:12:68:f6:57:52:3d:37:76:dd:cd:e1:91:9b:
5d:71:59:58:fc:6f:e4:58:86:a8:42:81:ea:ea:04:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:07:91:95:87:81:BA:BC:18:05:67:B1:54:C6:57:D9:98:CA:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06537D887B2011EFB530F097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:71:41:1d:e3:62:d5:05:69:b4:b5:e6:57:ca:43:00:5d:22:
bc:5d:4f:0d:0d:86:6a:95:81:3e:33:b5:57:bb:97:16:19:b2:
f8:27:28:3a:82:b9:a0:98:6b:20:16:57:c7:98:cc:e2:f7:32:
ca:69:75:68:91:f5:39:bc:53:74:9d:bc:34:a4:28:56:7f:3e:
6c:21:59:b0:e6:5e:c5:8a:54:3c:ef:7a:cf:14:fe:2d:56:3a:
c8:48:08:74:8d:fc:f3:9f:ae:8c:1e:28:27:68:a1:bd:ba:48:
17:89:51:c4:52:46:56:bf:4c:3b:bb:77:49:a8:2f:27:ae:24:
b9:f0:72:01:23:d5:80:fa:ba:39:9c:40:78:8d:ae:39:9b:a4:
27:57:7c:ce:18:00:c1:80:5b:a7:af:60:04:26:c7:3f:2c:c0:
29:bd:b2:e3:56:2a:5f:a2:62:4e:90:80:5e:60:ce:3b:4c:6d:
cb:5d:53:23:97:57:20:fd:9f:ff:f7:9f:ad:3d:ac:be:3d:c6:
90:f0:fd:66:58:fd:2f:c6:f1:db:f2:d2:33:d6:e0:3e:01:97:
95:fd:78:1e:99:a9:6b:cc:63:2c:13:cf:f7:f5:9f:7f:8a:ff:
b7:62:f8:5f:6c:7c:2b:1c:c4:00:05:cc:6d:48:fe:36:46:60:
30:95:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:32 2024 by rpki-client on console-fra.rpki-client.org