Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C69F6A4A72211EFA4319F82762E951A.roa
File: 2C69F6A4A72211EFA4319F82762E951A.roa (raw, json)
Hash identifier: fUPoQcXKnLTO62t67loix7ftQRaMP+5qIUypfjUr6RI=
Subject key identifier: B5:1E:53:22:EA:DC:C4:D1:90:5C:95:E7:72:C6:27:41:7F:CF:57:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C69F6A4A72211EFA4319F82762E951A.roa
Signing time: Wed 20 Nov 2024 09:31:09 +0000
ROA not before: Wed 20 Nov 2024 09:31:05 +0000
ROA not after: Mon 02 Dec 2024 09:31:05 +0000
asID: 39600
IP address blocks: 154.207.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69473 (0x10f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:31:05 2024 GMT
Not After : Dec 2 09:31:05 2024 GMT
Subject: CN=673dac5d-9bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:c3:b4:14:bd:4d:6b:a5:83:17:3a:18:6a:
1d:cc:7b:80:ac:4a:79:22:b3:66:7a:d1:52:75:b4:
25:d5:4c:53:35:3a:60:d6:6b:31:17:28:37:f3:5c:
d8:72:57:a5:a8:dd:64:23:d6:49:21:50:36:5a:7d:
86:b6:ae:98:24:d1:d4:18:b0:6b:2a:ab:a5:da:53:
8c:b6:a8:7f:f4:90:1a:19:6b:34:65:75:2b:ff:e5:
4a:7b:9d:46:7f:bd:da:3a:45:49:80:71:4d:cc:42:
36:53:14:b0:1b:0a:b2:cb:da:53:9a:73:a3:73:b5:
54:70:c5:e0:5e:d3:96:6d:91:15:1b:9f:12:b1:2d:
2a:45:ec:c5:71:7e:a4:89:3c:8d:75:e8:9f:3d:bd:
a8:30:1c:ec:c0:44:71:3f:87:fa:d8:0e:da:d8:8b:
a4:2f:19:52:a8:b3:ae:14:e2:dc:75:c6:5f:48:87:
c7:69:35:dd:49:2c:02:21:1c:93:e0:ac:4b:9f:11:
8a:c7:d5:2d:06:e8:d6:d7:ee:19:7e:8c:75:16:df:
3e:b8:ed:02:50:c6:ef:83:d2:05:45:cd:fa:84:49:
8c:b2:7a:aa:49:a4:14:5a:85:69:a0:ba:b2:75:dc:
f3:2b:81:3f:90:86:d8:8a:58:48:bc:2f:b4:08:8e:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:53:22:EA:DC:C4:D1:90:5C:95:E7:72:C6:27:41:7F:CF:57:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C69F6A4A72211EFA4319F82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.232.0/21
Signature Algorithm: sha256WithRSAEncryption
17:0c:a8:3d:9f:9f:52:0b:12:01:c6:a3:f9:e8:e4:0c:19:2e:
6e:9e:23:95:89:eb:ec:af:88:18:c0:28:49:fc:05:a9:d6:24:
bd:fb:66:0b:67:38:a1:6a:7a:ba:8c:49:36:d8:80:4a:89:9f:
0a:c7:f8:db:0f:20:aa:f4:67:77:18:a8:bf:d7:cd:83:5c:0a:
40:80:8d:26:d5:7b:24:4d:8c:3d:3a:fa:1f:05:f9:b2:dc:7f:
2b:a6:12:82:11:b3:a8:e9:8a:5e:f4:82:82:d2:81:35:05:a9:
82:35:a1:45:4c:ac:9b:dc:ff:b0:c9:c3:8f:0e:2d:3b:87:ad:
a6:c1:05:1d:29:4f:fe:2c:97:5d:3d:2c:b8:55:8b:f0:58:70:
f4:8f:fc:5e:d9:3e:02:74:f5:78:c5:ec:22:22:97:56:e0:74:
d4:c2:b8:b6:1c:6a:71:dd:13:10:52:01:77:1e:59:9c:61:55:
cf:69:6b:e6:06:57:3c:61:fa:cf:2f:48:8c:a8:c3:6b:85:8c:
7a:f1:0d:67:83:dc:6a:4a:7b:9a:ee:f3:ca:e0:3f:fc:f5:30:
fa:f5:9e:29:61:e9:68:1c:7f:77:a6:b7:db:c1:ef:3d:fd:2f:
27:18:f7:c4:ab:bb:ab:74:f9:84:3e:37:57:83:f6:2d:ab:6a:
14:49:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org