Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D14B249F8211EF92E6455E762E951A.roa
File: 60D14B249F8211EF92E6455E762E951A.roa (raw, json)
Hash identifier: XgUEzyjNoYKwl6hKll8LjqJoRgyw2sKiV9eEviRKDXk=
Subject key identifier: B6:8D:10:78:B3:C6:6B:72:A4:3F:E7:3D:B2:52:3A:08:D0:48:9D:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D14B249F8211EF92E6455E762E951A.roa
Signing time: Sun 10 Nov 2024 16:39:39 +0000
ROA not before: Sun 10 Nov 2024 16:39:36 +0000
ROA not after: Fri 17 Oct 2025 16:39:36 +0000
asID: 137443
IP address blocks: 154.91.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68390 (0x10b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 16:39:36 2024 GMT
Not After : Oct 17 16:39:36 2025 GMT
Subject: CN=6730e1cb-db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:16:2a:16:0a:21:22:bf:53:2b:b2:3f:ec:
63:51:d2:6d:66:44:40:1a:9d:fa:5d:3e:52:d2:26:
12:ee:9e:02:a2:ab:57:74:12:18:80:ed:27:b9:91:
e2:1c:98:cd:8e:ce:26:1c:ad:7d:5d:8a:01:80:01:
02:00:f2:b8:66:b5:12:30:fe:77:df:7e:cf:ed:7f:
bf:d8:07:5a:01:cc:2b:28:61:08:ee:0a:f1:ef:28:
94:59:fc:8f:69:dc:c9:7e:db:ee:79:41:a3:55:e3:
5d:e4:a9:25:15:d5:36:24:71:dd:19:fc:b7:d6:cd:
06:81:4d:b3:b6:7d:90:80:5c:d9:c7:0c:12:55:3a:
27:2c:9b:42:f4:26:94:66:e7:90:a3:0f:5e:a1:e2:
7f:1b:c4:a4:bb:8b:75:6e:63:32:52:32:7b:8b:8f:
65:5f:0d:02:1e:6c:62:c8:af:b6:f8:0f:aa:3f:ae:
ca:bf:83:d1:c9:f5:e2:94:a5:cd:c4:10:cb:3e:f9:
ef:45:ab:f1:a1:c4:dc:3e:5f:e4:c4:78:e1:83:33:
f1:38:45:9d:bd:c1:c6:6a:cf:b8:ad:4d:32:c3:df:
81:2a:5e:01:72:0a:42:c3:25:10:b2:f5:19:66:c3:
0f:6e:2e:59:36:18:29:bf:98:a4:8f:04:07:ad:5c:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:10:78:B3:C6:6B:72:A4:3F:E7:3D:B2:52:3A:08:D0:48:9D:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D14B249F8211EF92E6455E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/24
Signature Algorithm: sha256WithRSAEncryption
25:57:d4:a3:a9:af:54:ad:18:2f:61:91:54:d8:44:eb:e3:77:
ad:86:01:a3:7c:29:24:a1:71:e8:70:9d:e2:89:2e:f3:e3:d4:
c2:10:10:40:c7:3e:d1:60:38:04:32:e9:85:f9:3e:b7:97:f5:
9d:5a:c0:fb:f8:c3:05:a2:22:6a:7c:33:42:83:3b:69:f6:ee:
9e:99:68:ad:db:fa:9e:60:12:7a:76:35:c2:2b:8d:11:a8:7a:
c3:64:d8:8e:b9:a3:e8:85:82:80:7e:c6:71:6d:61:fb:92:a5:
59:fc:6c:77:bc:b5:28:e3:2f:32:23:bd:f2:d1:88:56:60:35:
c6:ee:ce:ee:56:7d:cd:52:55:a0:b2:bc:3b:91:a5:02:3b:34:
0b:99:d5:5a:2b:02:1d:85:fb:44:b1:20:95:69:f1:c5:c7:a3:
8e:ef:2d:93:a0:9e:63:a4:7d:6b:d5:40:ec:3d:65:61:cd:2a:
c1:a1:52:8b:24:ce:83:b3:84:2b:4f:d9:d1:00:bc:94:d3:80:
93:ee:00:52:ea:dd:82:f4:4d:b3:e2:a7:14:51:fb:10:5a:d4:
c9:68:fe:05:86:01:fd:aa:03:4a:4f:21:83:c3:46:c7:f4:7a:
41:6e:92:64:f9:5b:75:d2:20:30:c5:e3:38:9e:98:ae:f2:97:
5f:f8:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org