Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60E628B06AA211EF809EE574762E951A.roa
File: 60E628B06AA211EF809EE574762E951A.roa (raw, json)
Hash identifier: W7wKDJX4Fg6d4MovL8TLvYqWPjSDPNjQyUdTfrlv0G4=
Subject key identifier: EF:D0:52:6B:45:8B:C9:88:1D:EA:C1:9B:89:76:E7:E6:FC:CB:86:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60E628B06AA211EF809EE574762E951A.roa
Signing time: Wed 04 Sep 2024 09:45:12 +0000
ROA not before: Wed 04 Sep 2024 09:45:06 +0000
ROA not after: Thu 24 Apr 2025 09:45:06 +0000
asID: 63888
IP address blocks: 154.207.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59961 (0xea39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:45:06 2024 GMT
Not After : Apr 24 09:45:06 2025 GMT
Subject: CN=66d82c27-b545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:aa:d2:48:70:c1:cd:9a:30:bd:5f:d4:7b:
a3:07:cd:e0:57:ab:d1:35:47:b3:11:59:5a:0a:2c:
e9:49:45:ba:c1:5f:b5:09:7f:c0:fa:64:f2:f7:99:
86:47:1e:a2:9a:95:db:4f:b1:23:f3:e5:46:8d:ef:
0e:59:ea:54:6b:22:34:ae:6b:b0:70:a9:71:48:ec:
b3:55:4e:63:b6:bb:21:59:96:61:18:8a:d0:12:9a:
28:71:09:54:cc:63:1e:e5:8b:c0:bf:e9:d4:5c:58:
65:12:7f:81:7b:b8:4b:be:ff:0a:f1:df:e1:0a:ee:
94:17:a7:49:6b:b0:63:18:1b:7d:9c:05:05:d5:35:
8d:40:22:c6:c2:ad:a5:d1:b2:5e:9b:f0:74:33:e5:
d6:8f:90:88:26:ac:08:d8:2c:54:35:00:52:e6:b4:
55:56:1a:16:ee:2a:c5:e5:09:45:71:0e:04:39:24:
44:9e:85:97:5a:e6:db:60:2f:e4:1e:70:c3:7e:90:
b9:ef:e8:83:03:1c:e8:15:16:c7:9f:e3:bd:8a:17:
59:2f:38:fb:b8:fb:93:d5:4f:33:78:a0:cc:9e:10:
4b:12:29:94:43:7d:4e:0b:df:cb:c3:c5:1c:aa:8b:
75:c1:50:25:57:c7:fc:c7:ed:0c:be:39:a2:d9:e1:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:52:6B:45:8B:C9:88:1D:EA:C1:9B:89:76:E7:E6:FC:CB:86:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60E628B06AA211EF809EE574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:d6:ac:eb:9d:4a:09:6f:b9:8f:89:5b:0d:20:68:65:d9:62:
54:67:aa:3a:80:59:5f:e6:2c:ae:12:f7:1d:d3:7d:35:3a:d3:
0b:d8:16:97:20:1a:1c:06:d6:ac:ab:86:98:38:3f:20:d0:2c:
3a:87:5e:6d:0b:dc:61:c5:fb:b1:32:3c:85:85:42:58:f0:c0:
6c:dc:f8:db:68:e2:d5:bb:a6:ad:08:8f:8e:03:44:a0:7f:f3:
b2:76:cb:b4:f1:5a:99:1e:5f:6e:ee:60:3e:1a:9a:0d:a4:ef:
d2:9a:5e:dd:49:36:89:aa:30:41:89:9b:9c:22:d1:c9:40:36:
48:29:ba:10:7e:a7:58:4a:25:4f:31:51:e4:5b:0a:89:ca:86:
fa:52:83:0a:83:55:e4:e6:96:f8:77:a5:b0:74:76:d3:0c:14:
32:00:9b:79:24:26:9d:c1:81:58:df:88:99:20:49:6e:6f:6f:
8e:d9:21:54:fe:bd:bb:93:d9:62:12:eb:a2:9b:48:89:8d:43:
39:c8:4d:ac:7b:14:b1:1f:6a:e1:56:8c:0d:a0:a8:ee:f3:2c:
1e:9f:79:9f:83:21:25:cf:50:a6:ab:0f:0a:a2:de:66:ff:bf:
ee:1b:af:40:16:b3:90:2c:9f:1c:eb:7a:97:59:1f:f8:5f:0d:
34:27:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org