Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61C4DEB4A27111EF91EF697D762E951A.roa
File: 61C4DEB4A27111EF91EF697D762E951A.roa (raw, json)
Hash identifier: i4tLtG0MYgrY6j0KrocVF12vkfQ/zsB9TetnGvsUGQA=
Subject key identifier: 82:4F:A5:DF:FE:BE:02:F0:25:C3:D3:68:12:92:99:8D:D0:4C:77:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61C4DEB4A27111EF91EF697D762E951A.roa
Signing time: Thu 14 Nov 2024 10:15:33 +0000
ROA not before: Thu 14 Nov 2024 10:15:29 +0000
ROA not after: Sun 24 Nov 2024 10:15:29 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 10:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68896 (0x10d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 10:15:29 2024 GMT
Not After : Nov 24 10:15:29 2024 GMT
Subject: CN=6735cdc5-9a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:b5:75:f3:2f:58:3e:7b:8d:02:6a:1b:0b:
73:aa:ef:a8:99:4b:d7:77:3f:7c:23:ec:04:f1:36:
6d:08:46:e6:1e:2f:0f:52:34:40:9e:57:52:b3:72:
0c:49:a6:55:a4:97:fa:c4:0f:1b:b1:22:7d:29:3f:
a2:33:6d:f8:8b:ec:2f:4a:2c:3f:4f:75:0d:27:1a:
bf:3f:76:09:d6:92:6f:7d:fa:72:57:50:ac:37:be:
4e:4f:73:29:79:b9:bf:75:d9:f4:d9:e2:33:4b:bf:
6f:57:6a:cf:e6:a7:ac:d2:15:d6:06:f4:d6:bc:77:
63:c0:b9:8e:f3:e0:1c:1a:6b:7a:b4:7d:1f:af:42:
f8:e5:e5:47:1d:af:04:54:ed:84:47:5c:99:82:74:
6b:46:b3:48:c7:41:2a:ce:39:0e:77:93:5b:88:02:
7c:b0:4c:47:a4:96:86:3b:10:ef:f7:87:4b:89:b8:
23:57:3b:38:f4:a0:46:99:d5:fa:b9:02:9d:da:13:
f5:79:a4:c1:f7:08:59:8b:b9:4c:9f:0d:7c:d6:48:
06:ea:a3:f2:65:92:b0:5a:d0:d6:f6:04:46:69:bf:
b1:0c:4d:0f:ad:a7:99:6b:09:f0:18:2a:45:15:ea:
df:c6:04:54:e3:cc:87:ef:cc:50:26:58:60:d4:f8:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:A5:DF:FE:BE:02:F0:25:C3:D3:68:12:92:99:8D:D0:4C:77:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61C4DEB4A27111EF91EF697D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
79:04:a7:2e:1e:95:9e:1d:a1:ea:a4:e8:d8:f8:38:3f:67:7f:
82:7f:7e:16:36:45:d4:fc:12:d7:91:67:3e:da:7d:c7:fb:36:
3a:2f:8b:d7:fc:85:a5:c7:6b:46:2f:23:94:dc:ce:e9:38:cd:
57:0e:de:11:f3:8f:ae:4f:c5:b3:31:07:4b:31:50:60:49:e8:
c9:ce:a9:6e:6a:21:8b:11:84:a1:26:99:e7:5e:d4:09:ce:cd:
12:1e:da:5d:a4:65:ee:42:08:64:db:a0:60:f9:1c:61:76:e2:
14:db:26:91:f9:16:3a:4f:b4:f0:14:8b:52:8c:6a:d7:de:f8:
44:0b:93:75:ac:fd:2e:59:6d:50:55:e9:81:ad:4d:36:3f:63:
f8:96:67:9f:12:c3:82:34:8a:2c:e5:51:94:e3:b9:27:22:b8:
e7:70:8a:b5:e1:f7:cf:bf:60:f2:e0:cb:d9:a8:37:8b:38:81:
4b:d1:a4:b3:0e:fb:1a:74:50:4f:a6:6a:b0:51:40:37:50:0e:
53:73:9b:dd:e2:32:13:53:ef:6b:99:08:04:72:d4:5e:de:0f:
58:3c:3d:92:41:91:e0:4f:6f:94:1d:82:af:8b:5c:b5:19:34:
d7:54:14:a4:ce:a9:2f:f6:93:b0:1d:fc:78:b8:13:c7:2b:86:
c3:78:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org