Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621016868ACA11EFA4855054762E951A.roa
File: 621016868ACA11EFA4855054762E951A.roa (raw, json)
Hash identifier: yZqGaNT2ClOMabN2RHi0PSyIfouwMm0XUZ6C5E2NKhQ=
Subject key identifier: 5E:A8:0E:FF:E1:32:84:24:AF:2E:05:9C:82:7D:2B:C8:FB:24:38:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621016868ACA11EFA4855054762E951A.roa
Signing time: Tue 15 Oct 2024 07:52:10 +0000
ROA not before: Tue 15 Oct 2024 07:52:07 +0000
ROA not after: Thu 21 Nov 2024 07:52:07 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65062 (0xfe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 07:52:07 2024 GMT
Not After : Nov 21 07:52:07 2024 GMT
Subject: CN=670e1f2a-e2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:d2:a0:60:a7:b5:51:b3:8a:3f:89:8f:2c:
f5:4c:e1:84:6e:83:c1:b8:9c:31:0c:d2:f4:64:d1:
63:f1:6f:a5:e6:d0:68:ce:81:fb:1c:e1:3e:cb:f2:
bb:10:c3:d8:24:49:08:9c:b0:b5:82:4a:2f:25:10:
00:96:f2:5c:2a:5e:20:4b:3e:da:4b:ac:e4:3e:ff:
35:16:a1:73:a3:dd:90:c6:73:fc:dc:fe:f4:43:b5:
df:49:31:7d:22:d0:0c:f2:45:9b:98:03:f8:c5:0e:
a1:cc:7c:0a:b9:1b:34:88:7f:73:3e:62:61:97:56:
0c:b4:3a:ba:b9:0d:2c:30:a7:6f:30:78:f5:f0:7c:
c1:f5:ab:85:ca:30:0e:c9:d0:99:19:ec:f5:f6:85:
a1:b4:64:96:f2:1f:0f:9a:23:16:bd:b7:58:cc:32:
1a:7e:64:63:77:ad:fe:21:4b:21:81:ac:df:48:16:
08:ed:ce:4e:67:09:e9:b4:4b:a5:b7:16:83:1f:48:
1b:bf:bc:86:81:1c:f3:81:47:63:76:a9:67:12:aa:
bb:50:a6:e6:b1:da:7e:c0:16:48:27:ba:51:bf:fd:
a8:2f:69:2d:75:50:60:40:21:f6:f1:72:e7:ef:d3:
bf:cf:43:7d:07:72:e6:2d:c5:b6:29:71:a5:9d:ae:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:0E:FF:E1:32:84:24:AF:2E:05:9C:82:7D:2B:C8:FB:24:38:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621016868ACA11EFA4855054762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:91:7e:1a:f5:bf:a3:ff:b3:f9:25:fa:6d:b6:9a:0f:44:86:
c0:f3:e2:6d:d0:46:12:30:89:d0:12:b7:22:da:99:cf:7f:39:
dd:f9:a0:1a:e0:e7:71:8f:8d:af:41:bc:b7:16:6c:5f:48:c7:
ed:b6:dc:9f:28:a5:50:b2:65:31:9f:59:07:b6:dd:b0:ad:e2:
f4:63:42:f8:44:69:1b:b8:23:2a:bc:3c:50:b6:47:ee:68:5b:
43:72:76:6b:08:9c:3a:ae:8a:99:56:98:3a:b0:ca:8b:8c:6b:
18:1f:3f:c5:39:a1:4b:29:cb:44:d2:fc:dc:ef:fb:37:e9:24:
81:e9:94:a7:f0:0e:3e:d2:37:d9:66:4d:09:f3:2e:df:f8:76:
54:08:5d:f7:97:59:81:64:a0:de:1f:72:ae:da:0e:7e:ac:6c:
b6:1b:9a:d1:16:a1:33:ec:16:b3:a7:e3:9b:10:b3:aa:f0:be:
d5:6b:64:fb:bf:2a:f9:78:e6:52:cb:26:15:b2:f0:cd:7b:cf:
53:7c:f8:8f:2f:c6:f2:0d:74:07:d1:bd:b7:f8:4d:b1:1c:8c:
42:25:e1:a0:21:3a:54:39:07:f4:91:71:16:62:ba:ab:f3:e0:
d4:40:28:94:0a:9c:d1:c3:cc:14:84:2d:20:40:db:a3:45:cc:
13:89:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:11:51 2024 by rpki-client on console-fra.rpki-client.org