Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/600946A89EA911EFBB721E89762E951A.roa
File: 600946A89EA911EFBB721E89762E951A.roa (raw, json)
Hash identifier: 4cl1HKPFHs1iwtDj4b1G7KEMeQEYaAwP6jszbgixNJ4=
Subject key identifier: 75:9A:7C:1E:4D:00:87:ED:9A:45:53:04:3C:5A:BC:A6:23:86:7C:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/600946A89EA911EFBB721E89762E951A.roa
Signing time: Sat 09 Nov 2024 14:46:17 +0000
ROA not before: Sat 09 Nov 2024 14:46:13 +0000
ROA not after: Thu 12 Dec 2024 14:46:13 +0000
asID: 395793
IP address blocks: 154.91.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68105 (0x10a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:46:13 2024 GMT
Not After : Dec 12 14:46:13 2024 GMT
Subject: CN=672f75b9-9411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:c2:b4:dc:b4:93:31:e1:8d:e2:92:e8:04:
92:1f:87:3f:63:d2:d8:a1:7a:56:c5:27:f0:aa:ed:
8e:2e:c1:37:e4:88:4e:33:1c:af:9d:01:9e:91:0a:
71:e7:e0:3d:4f:0d:37:0f:59:54:24:f8:32:5b:fb:
f5:a3:c8:df:92:f9:0e:20:37:f0:8c:df:ed:42:75:
83:25:b2:ff:a1:1b:0c:36:f6:9a:76:f2:ca:43:13:
85:8b:a5:e5:ba:f9:4a:d0:c7:08:89:e5:27:f0:da:
f7:4c:9e:2a:d4:65:15:19:0d:38:c8:55:29:d1:4b:
a1:e9:a3:6d:b5:96:17:f5:82:a7:df:65:fa:91:3f:
b9:5c:03:a4:80:34:b2:e9:34:dd:ce:ed:00:f3:76:
9c:33:e8:29:81:1e:00:f7:c0:e4:13:ed:6d:e9:65:
46:95:35:a1:0b:f6:16:9f:f0:ad:22:7e:07:d2:31:
bd:54:8c:e3:19:c3:2e:b6:35:8a:28:c1:9a:81:23:
f5:7e:a2:b5:32:91:19:12:fb:3d:c4:da:8a:84:94:
a4:d2:8d:8c:25:73:1d:a2:10:82:d7:c0:b3:8f:20:
38:51:1b:ca:60:c7:fa:37:8d:1a:8b:25:ab:0f:23:
e8:f7:40:dc:47:a8:b8:4b:3f:9f:15:f1:96:18:21:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:7C:1E:4D:00:87:ED:9A:45:53:04:3C:5A:BC:A6:23:86:7C:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/600946A89EA911EFBB721E89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:25:e2:18:e1:ef:51:a5:3d:88:8d:5c:49:e6:4b:a5:6a:76:
29:d8:51:a2:00:ec:12:dd:2b:df:e3:09:49:63:06:4a:c3:71:
a0:4f:d2:4d:d9:a3:ac:9d:26:de:ac:62:c9:1d:fa:b7:67:7d:
c0:0e:44:bf:3f:76:f7:5d:4d:50:25:f2:b1:b7:be:5d:05:67:
31:bc:b1:ec:ef:02:f2:f8:e8:da:5d:2b:c4:1d:69:d7:bd:ab:
09:6c:4b:b7:4e:e5:0a:49:0c:4a:a2:7d:5b:99:fa:5c:5a:29:
80:20:9f:c6:ba:41:d4:ba:70:e6:74:76:93:54:a0:f7:08:b8:
86:c7:e7:02:27:c7:62:f9:94:c4:4b:93:0f:23:df:37:ca:5d:
e6:48:79:a1:91:11:dc:59:e6:69:09:57:be:c0:3b:72:7c:8d:
55:c2:66:41:6f:f3:25:a9:c9:87:63:6c:0a:1e:85:62:66:39:
9b:fd:71:e4:8e:ac:07:f6:78:6b:ae:37:44:e0:c0:59:69:7a:
0c:6b:42:3b:47:42:d6:af:0a:4b:de:31:4a:3a:a7:cd:77:2c:
25:4d:6b:91:c2:60:3c:f8:29:0a:bd:f9:70:15:0f:42:0e:a1:
86:cd:92:40:a7:5e:7b:11:b8:1a:32:35:fc:bb:93:c3:e0:64:
ea:c9:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org