Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B82BEC736511EFA1A921B7762E951A.roa
File: 06B82BEC736511EFA1A921B7762E951A.roa (raw, json)
Hash identifier: 2uZUFMW3WTTC7UnHWOpIbzeqbypYozV25MpJVtXFmLY=
Subject key identifier: F7:E6:C1:87:C3:7D:FF:1B:D8:99:2D:D0:4E:15:9D:F0:66:A9:5D:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B82BEC736511EFA1A921B7762E951A.roa
Signing time: Sun 15 Sep 2024 13:18:41 +0000
ROA not before: Sun 15 Sep 2024 13:18:38 +0000
ROA not after: Sat 30 Nov 2024 13:18:38 +0000
asID: 142403
IP address blocks: 154.221.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61182 (0xeefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:18:38 2024 GMT
Not After : Nov 30 13:18:38 2024 GMT
Subject: CN=66e6deb1-5490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2e:ce:56:da:74:7d:b9:64:c9:ea:98:03:77:
c0:b4:91:c1:12:47:0b:82:c3:92:de:90:52:d6:29:
8e:0f:50:ae:78:b4:ff:5d:96:b2:36:2f:52:0a:8e:
b9:0d:d9:04:49:7b:fd:c2:96:f6:ab:29:96:c7:27:
c4:c5:00:b3:64:be:10:80:72:9d:c6:28:27:ef:47:
ef:1e:67:cc:12:70:92:70:98:b2:0a:dd:5c:e5:e7:
75:9b:20:2e:1c:ac:b6:ae:d5:84:f6:ab:d6:46:ca:
8c:b7:a3:d3:31:9f:6e:f8:31:eb:49:3d:53:76:58:
71:c2:1a:09:52:a1:cf:75:b3:e3:48:9d:99:a8:98:
41:e0:94:19:60:34:fd:2f:4d:64:3c:0c:21:2a:88:
15:4d:d8:90:c7:3f:e9:5b:04:eb:cd:7e:ea:f4:6b:
b0:00:b3:4b:38:c3:d6:a9:66:aa:d8:55:00:c0:ab:
3d:ff:8e:0f:a2:28:55:7a:f0:1e:67:81:30:ce:e6:
b5:03:f7:6e:91:d9:de:54:ae:fe:ed:75:0c:87:0a:
bf:43:13:8a:81:50:c8:cb:cb:9d:5d:64:b9:dd:f6:
5f:2f:77:cf:77:f5:6a:f3:d2:66:46:d1:36:dc:95:
05:71:35:83:56:34:5d:ba:72:ce:ab:19:3d:29:59:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:C1:87:C3:7D:FF:1B:D8:99:2D:D0:4E:15:9D:F0:66:A9:5D:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B82BEC736511EFA1A921B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:be:96:00:91:33:d8:70:aa:5e:6e:0d:33:37:5f:9a:84:23:
d5:2f:ce:60:bc:99:1c:b4:cf:97:ea:69:36:ea:2f:cd:dd:63:
8f:7b:f4:7c:f1:d6:1b:5e:aa:b2:7f:7a:95:f8:51:a7:99:eb:
94:58:9d:48:8c:29:39:d0:da:77:f3:16:84:01:b9:4a:9e:fa:
d1:34:d0:0d:50:a2:3e:31:4f:5e:56:10:2b:25:dc:24:9e:1e:
1b:1a:e4:04:3e:ff:d7:c6:6e:ad:be:25:b4:a5:78:d1:b5:42:
54:77:36:d3:fc:94:97:a6:fe:c2:82:2b:2b:d6:01:1b:14:b9:
eb:42:b0:02:fc:ca:37:b2:98:fc:f3:28:b8:5c:91:45:42:ef:
c7:de:3a:76:90:a8:d8:66:b1:8b:cf:f9:c3:2c:0e:46:f7:04:
be:13:54:a3:0e:fb:12:7f:80:59:01:c8:1d:22:10:b1:6a:ff:
3d:99:00:0a:08:e0:dc:34:bd:54:5a:1d:7e:62:c7:84:15:3b:
e5:54:35:37:57:10:39:37:34:c3:52:41:c5:e7:1c:75:dc:7a:
bd:ee:e7:aa:e1:bf:19:f4:dd:11:8d:70:5e:b2:5f:f3:d6:25:
17:d9:84:a1:32:24:0e:c2:a1:2e:f8:fe:21:35:ab:bc:4a:e1:
e4:d8:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:58 2024 by rpki-client on console-fra.rpki-client.org