Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60AF453AA8BD11EF8B824B9C762E951A.roa
File: 60AF453AA8BD11EF8B824B9C762E951A.roa (raw, json)
Hash identifier: 6tbrON8CyTve/tqVP9OC1dd0z5pJiiUVfmy4oM/tlOE=
Subject key identifier: 82:81:82:90:2A:C6:4B:AA:13:59:05:5A:EE:E3:1B:73:E2:39:D3:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60AF453AA8BD11EF8B824B9C762E951A.roa
Signing time: Fri 22 Nov 2024 10:34:40 +0000
ROA not before: Fri 22 Nov 2024 10:34:36 +0000
ROA not after: Thu 29 May 2025 10:34:36 +0000
asID: 55720
IP address blocks: 154.91.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69629 (0x10ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 10:34:36 2024 GMT
Not After : May 29 10:34:36 2025 GMT
Subject: CN=67405e3f-df5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:92:84:02:72:25:95:1f:72:c2:41:77:2b:
bf:f1:d0:fc:58:e5:68:c7:3d:f4:20:eb:9a:a7:d6:
c3:ec:0a:da:ee:e9:e9:3c:79:96:c6:73:c0:15:42:
85:80:9c:81:10:64:1e:47:a5:b4:b3:75:3f:91:c2:
0c:ea:14:fe:e0:99:b9:f9:09:7f:a7:bb:56:4d:94:
a6:41:48:ed:74:c4:54:9e:48:c3:31:6f:f5:30:c4:
25:f6:37:34:f1:25:20:a7:9c:f5:c1:f7:85:e3:7e:
46:5f:68:40:07:6a:3f:21:b0:1c:f9:c3:fd:21:56:
aa:c1:7b:db:4f:36:b0:5e:f4:c1:c1:49:3e:8d:f5:
7d:4d:a3:87:6d:61:ba:b0:2f:89:f9:9f:0e:36:c8:
e7:b9:78:cb:a9:ca:63:c3:d6:13:66:7e:a9:49:ca:
cd:85:e3:ad:2b:eb:9f:f6:1f:4c:5a:11:bd:65:4b:
f2:70:38:53:9f:55:65:e6:ef:ad:8a:0c:7b:ad:48:
bc:f2:4e:0b:a4:b4:9c:ec:11:e8:c1:1d:33:09:82:
01:cc:1f:48:08:88:00:7b:cb:dd:26:28:01:db:68:
ca:f0:6d:59:8e:6d:3a:f7:98:50:83:8d:70:8c:ed:
17:1c:7c:44:f2:31:6f:61:25:2c:95:92:38:5b:21:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:82:90:2A:C6:4B:AA:13:59:05:5A:EE:E3:1B:73:E2:39:D3:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60AF453AA8BD11EF8B824B9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.146.0/23
Signature Algorithm: sha256WithRSAEncryption
73:0e:52:c2:c0:de:8f:7b:f5:ae:56:bb:0c:8b:77:2f:f0:96:
e6:95:c8:e6:d0:d7:74:7e:ce:f6:a2:12:5a:e4:1d:62:c9:fa:
d9:ec:c9:d9:94:6a:b1:65:ef:bb:e7:22:40:4d:0a:15:bd:a2:
6c:ad:f7:d9:16:d5:24:bb:0b:de:ff:c4:13:ed:f1:70:1e:60:
42:9b:9d:df:59:9d:41:20:dd:23:ca:5b:5c:8c:c6:c3:33:db:
37:63:10:b5:05:f5:90:bb:d8:9c:f3:f6:bf:85:44:f0:84:9a:
06:9f:ba:7a:ff:e1:d9:92:7f:29:2d:58:46:d8:b4:2c:14:a7:
bb:b0:68:4e:d1:2d:32:58:7d:78:0d:4d:a2:49:ce:74:91:20:
23:f3:c9:b4:b6:8f:9d:d0:df:74:21:7d:5b:74:0a:20:e6:7a:
ac:ee:ab:d3:ed:68:5e:3d:bd:2f:ea:54:f8:95:7c:d1:d6:b5:
07:97:23:bf:ba:f0:d8:f2:96:64:b5:4e:ba:f1:e9:83:c4:23:
77:29:91:2b:94:3b:eb:56:83:14:fb:16:03:c9:23:a9:93:1d:
52:5e:f2:67:93:50:f3:60:60:f6:58:eb:78:87:22:37:62:17:
f4:70:e7:e9:2c:ef:19:43:ff:a2:84:3c:ef:98:25:1f:08:cb:
87:13:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:27 2024 by rpki-client on console-fra.rpki-client.org