Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60176B9621F711EE9B62B1264AD9E6FC.roa
File: 60176B9621F711EE9B62B1264AD9E6FC.roa (raw, json)
Hash identifier: gM5vd60/Li3qoqzQWtdrH25wmLpFQa+g84w5bX6sBXs=
Subject key identifier: C0:18:80:58:38:65:CB:CC:8F:E8:AB:FC:CB:87:20:A3:AB:73:F9:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3289
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60176B9621F711EE9B62B1264AD9E6FC.roa
Signing time: Fri 14 Jul 2023 03:34:45 +0000
ROA not before: Fri 14 Jul 2023 03:34:40 +0000
ROA not after: Wed 17 Jul 2024 03:34:40 +0000
asID: 38638
IP address blocks: 154.215.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12937 (0x3289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 03:34:40 2023 GMT
Not After : Jul 17 03:34:40 2024 GMT
Subject: CN=64b0c255-aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:d3:4d:d2:85:e0:40:58:6f:63:f4:00:77:
66:f2:a8:4f:67:10:26:8d:81:9b:81:67:32:85:07:
4d:25:49:7c:35:ef:20:14:46:75:e8:d5:a1:9f:01:
ac:5a:ac:01:2b:ee:91:df:0b:0e:71:a5:c1:f1:20:
c4:88:de:67:fd:18:84:f9:14:20:5b:8d:33:fa:cb:
27:e9:23:6e:45:42:da:be:86:4d:68:67:ba:71:77:
e0:b9:87:aa:2e:96:51:f4:9b:08:f0:31:71:9e:9d:
49:8e:c8:2d:98:44:b1:ac:d5:a9:56:c4:3e:57:e0:
ef:83:60:a8:be:53:4a:4c:0d:8c:45:09:66:08:8e:
07:f0:1c:49:59:4b:b7:55:d5:0a:bc:7b:06:84:c0:
5b:b3:80:cd:80:ab:23:d3:27:b3:96:35:18:a7:eb:
e2:41:78:1c:85:e8:8f:dc:58:f3:58:32:b6:eb:ac:
aa:0f:15:09:a2:cf:27:7d:f0:b3:fa:1f:03:65:b7:
fb:7d:d5:68:69:69:0f:98:da:90:63:15:1d:b4:bc:
c3:6b:9b:23:f5:be:7c:2c:67:73:84:fa:d5:2d:3e:
0d:9c:61:dd:51:7d:8d:a8:18:b1:e3:4f:ad:ed:3d:
db:fd:0b:d9:d9:a2:fe:72:6c:86:a3:7c:9d:e7:d3:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:80:58:38:65:CB:CC:8F:E8:AB:FC:CB:87:20:A3:AB:73:F9:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60176B9621F711EE9B62B1264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c8:a9:fe:3d:e8:62:40:ea:46:d1:19:d8:79:fb:8e:d8:19:
44:17:3a:3b:ce:79:43:39:8c:01:d2:80:a0:7d:da:a6:f7:40:
0b:af:e2:a1:bc:2a:1d:9a:2d:26:1f:2c:5f:a6:4c:3b:5a:f4:
c4:60:f0:4b:56:47:1d:cb:e7:ae:62:09:3f:95:45:a2:de:95:
5a:9d:33:68:94:6b:28:63:7c:22:cd:f7:b5:4c:db:1a:d8:a9:
9c:8c:3d:ab:36:e2:b6:01:a5:0e:a8:5e:fb:6d:d7:36:e1:ad:
c5:30:f5:6c:ce:74:8c:2c:a4:eb:e1:db:f6:09:2a:9f:50:47:
7c:d1:0b:04:16:c1:32:56:6b:a9:81:7d:89:1f:c8:af:eb:25:
75:19:ae:e7:a5:d1:b3:8f:a8:ab:55:a8:ac:ad:6f:34:eb:22:
76:6a:d8:9b:df:b9:07:ad:84:93:21:99:ce:36:0e:9b:9d:92:
ba:83:89:76:c9:c9:2d:0b:81:ec:8d:51:73:ce:a6:a3:2b:38:
5d:74:11:13:4e:18:c1:8c:1c:6e:91:9a:c0:58:3d:f0:99:3f:
9f:fe:00:10:43:b4:55:41:ae:c8:fe:c9:aa:91:f3:18:ff:82:
70:98:ef:c9:a6:4a:e4:55:40:72:e3:18:2d:32:dc:45:b1:f4:
35:cc:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org