Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51194B1674CE11EF9F16DE4C762E951A.roa
File: 51194B1674CE11EF9F16DE4C762E951A.roa (raw, json)
Hash identifier: ywMXdksDV0qhQSZaWIZ3nBpSGZXFFYtJX6dTpCMkA6M=
Subject key identifier: 06:A2:A8:E2:44:28:B4:9E:C5:D2:9B:D2:FB:13:60:A3:FF:5A:3C:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F002
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51194B1674CE11EF9F16DE4C762E951A.roa
Signing time: Tue 17 Sep 2024 08:24:54 +0000
ROA not before: Tue 17 Sep 2024 08:24:51 +0000
ROA not after: Sat 30 Nov 2024 08:24:51 +0000
asID: 136970
IP address blocks: 154.197.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61442 (0xf002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:24:51 2024 GMT
Not After : Nov 30 08:24:51 2024 GMT
Subject: CN=66e93cd6-1169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:c1:ab:0c:05:f8:06:12:1d:60:6e:54:17:
ef:aa:a7:a0:48:30:c3:11:87:1a:98:bc:a8:a3:9b:
23:ac:71:7c:01:3a:73:38:d3:1f:7a:cf:5b:c8:20:
66:28:a1:8a:c9:a8:12:41:ed:8d:5f:04:c2:9b:21:
31:68:80:30:1a:b0:b1:d9:82:c9:71:b7:43:cd:18:
1c:42:24:83:fa:81:af:48:88:bd:b9:04:c4:83:17:
67:70:1b:ba:1a:56:11:21:9a:fa:c4:60:d2:58:b1:
b7:f8:36:c5:e8:1a:4e:b5:ef:22:e4:33:8f:73:57:
56:d3:d1:37:a1:77:e1:8a:29:aa:a8:3e:5d:63:29:
bd:37:18:54:1e:06:85:a4:31:69:a7:2c:a4:a2:7c:
96:26:30:93:03:6c:cb:26:c9:0c:f6:38:6e:4b:f5:
50:83:05:a8:d1:71:05:16:58:de:38:4d:ce:34:5e:
06:4e:3e:22:0a:48:3e:a8:d9:1d:46:5e:27:4c:de:
d3:ff:fd:fb:4f:38:fe:84:72:ca:c2:9e:22:da:a6:
48:b4:f5:60:d4:24:e8:a6:fe:c9:aa:30:d7:3f:df:
b4:98:a0:85:17:d5:8a:09:56:ef:73:98:c2:6f:e5:
b0:6e:ae:4c:1a:13:85:ad:30:3d:8c:5b:89:52:67:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:A8:E2:44:28:B4:9E:C5:D2:9B:D2:FB:13:60:A3:FF:5A:3C:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51194B1674CE11EF9F16DE4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.6.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a1:fb:0b:43:cf:5b:fc:4b:bf:77:9f:b0:03:5c:93:9f:2f:
c6:69:83:11:9c:3f:dc:ad:ae:6e:19:ef:4a:01:a6:a6:75:4f:
11:7f:2d:a2:20:37:ea:5f:b9:a6:2b:00:7f:d4:7b:4c:71:03:
44:13:75:13:71:1f:81:53:d0:09:58:5e:da:7c:1e:d2:0b:ca:
99:8c:eb:86:2a:71:fc:f1:a3:b5:d1:8f:55:87:4d:ba:33:89:
f7:af:31:88:31:0e:f0:e9:8c:f3:17:57:ed:36:89:aa:03:b0:
91:49:6a:03:e1:15:67:57:78:9d:d3:71:10:60:42:ca:ad:76:
03:7a:82:41:85:09:6d:16:18:36:a8:74:67:02:d2:c5:6a:4e:
a5:0e:07:a1:02:d7:09:d3:58:2d:ec:59:75:25:8d:15:0c:af:
46:bd:4d:75:c3:8f:51:71:4d:90:a2:a6:65:64:c4:a9:e6:f3:
6c:5c:f5:c1:d0:8d:96:0f:64:a5:16:f5:c8:3a:35:ef:7d:49:
c3:d3:19:6a:c3:00:ac:e6:57:7b:62:06:e4:83:e5:64:2d:e3:
d4:ad:e9:03:9b:b0:3f:40:32:fa:b4:77:dc:b6:12:90:1f:11:
4f:aa:7e:e8:e6:8e:ca:fa:ab:05:11:af:49:00:ff:34:58:04:
de:35:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:03 2024 by rpki-client on console-ams.rpki-client.org