Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6737DF1E7E3A11EF9BEE0298762E951A.roa
File: 6737DF1E7E3A11EF9BEE0298762E951A.roa (raw, json)
Hash identifier: o95EllvXxo0rjjgAT43ZrpBVJeKHqvwidEWD4AUHKcY=
Subject key identifier: 4B:E7:DE:01:A5:9E:96:9E:DE:5D:77:57:4A:BF:DA:3E:D6:CC:FE:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F47E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6737DF1E7E3A11EF9BEE0298762E951A.roa
Signing time: Sun 29 Sep 2024 08:11:18 +0000
ROA not before: Sun 29 Sep 2024 08:11:14 +0000
ROA not after: Mon 30 Dec 2024 08:11:14 +0000
asID: 17561
IP address blocks: 154.81.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62590 (0xf47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 08:11:14 2024 GMT
Not After : Dec 30 08:11:14 2024 GMT
Subject: CN=66f90ba6-26bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:84:7e:68:c5:cd:b3:cb:2b:8e:a0:a6:6f:
96:90:3b:15:00:67:fe:4d:c7:1f:49:c0:e9:06:3e:
9e:f7:e0:52:94:9b:b6:ca:de:f5:6b:d5:5a:33:bc:
a5:de:a0:63:fc:2a:8a:94:fa:44:95:17:de:06:9a:
1d:b6:69:cb:a1:f9:27:32:69:a0:e6:5f:7d:16:3b:
de:04:5b:8f:88:03:ef:88:29:4d:db:63:f5:b9:d7:
4b:d7:48:ec:c8:08:cc:3c:68:3a:9d:8c:d2:09:4d:
c0:78:03:1d:f0:07:0a:8c:62:be:8c:59:87:78:c1:
77:f5:90:6f:e9:70:98:39:ef:36:85:3f:a7:5c:e1:
8e:fb:a2:70:d4:c0:32:e4:75:e2:1a:47:f2:63:cb:
2a:68:4d:74:f7:de:77:68:df:96:78:ef:aa:80:a4:
fe:84:4d:fa:b3:2f:77:97:72:a8:ab:e6:3c:4e:51:
1e:19:0d:27:00:73:22:9a:fc:ff:a0:71:9b:4e:85:
e7:ce:62:60:cf:e3:70:27:ae:7f:a7:2d:1f:8a:36:
55:27:b3:c6:4f:53:24:7c:de:d2:9f:29:c5:07:7b:
53:2d:cc:9d:2d:d7:54:71:bc:d9:fa:8d:47:08:83:
e5:3e:29:db:dd:59:65:e2:68:e2:32:72:67:61:37:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:DE:01:A5:9E:96:9E:DE:5D:77:57:4A:BF:DA:3E:D6:CC:FE:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6737DF1E7E3A11EF9BEE0298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.49.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9d:d5:26:21:33:ef:66:5a:94:39:c8:e6:75:69:98:dd:85:
ab:7b:ec:f0:d2:95:84:86:b3:44:be:59:92:ba:4b:18:f2:33:
a9:92:98:47:6a:b3:81:a7:38:dc:a1:ce:58:1d:55:44:10:7e:
c3:9f:6c:7a:72:9a:87:38:1b:b7:be:f5:dc:ea:87:d0:3c:bc:
56:98:9e:bf:a8:88:d6:67:28:2d:1f:68:d5:42:c3:c3:06:ac:
14:32:7f:2b:5c:55:76:d5:6b:97:e3:80:6e:5c:fe:ae:4f:e9:
0f:57:21:c5:cc:21:78:b7:1f:16:ba:c6:b2:b7:81:2e:c1:dd:
a2:c7:b2:d8:05:4c:82:2e:0a:2d:a9:4a:25:8a:ec:52:16:c5:
17:ff:3d:da:4c:53:1e:33:35:87:1d:ec:0a:88:2b:d4:e9:e3:
dc:6d:5f:0c:43:4f:e8:9d:75:37:4e:16:b4:1f:e5:c6:b3:9a:
38:bf:29:16:25:9c:f5:5a:de:08:30:f1:f7:3c:6e:94:08:10:
c6:f2:ac:0f:f6:ef:59:de:c3:43:ab:c1:e0:60:dd:c8:61:72:
55:f0:b2:25:31:07:88:f6:ca:2a:6b:a9:a6:41:15:65:d5:e3:
13:de:a7:2c:0a:18:1d:09:a1:a4:f5:17:6b:df:48:ae:5a:8a:
af:51:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org