Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686DEE708E2311EFB92E3D63762E951A.roa
File: 686DEE708E2311EFB92E3D63762E951A.roa (raw, json)
Hash identifier: wEb83ijVBuJqSwNSf7ZVpoXL79WLBP7xm7t66CZ20ls=
Subject key identifier: C6:B0:C3:BD:7E:43:6D:50:F3:D5:D3:F3:8F:DF:ED:01:22:27:15:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010004
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686DEE708E2311EFB92E3D63762E951A.roa
Signing time: Sat 19 Oct 2024 14:07:00 +0000
ROA not before: Sat 19 Oct 2024 14:06:56 +0000
ROA not after: Sat 30 Nov 2024 14:06:56 +0000
asID: 138915
IP address blocks: 154.93.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65540 (0x10004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 19 14:06:56 2024 GMT
Not After : Nov 30 14:06:56 2024 GMT
Subject: CN=6713bd04-ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:d6:da:4f:66:6e:27:21:00:a7:07:6b:71:
3d:8e:11:db:fd:91:65:66:3b:70:b9:39:3e:d1:3d:
5a:7e:80:d4:e6:35:97:db:bc:ba:b1:30:9a:80:7b:
95:bf:d8:d5:4c:2d:99:1e:e9:77:f9:d8:d1:b3:db:
69:ac:2d:5b:15:fa:93:fd:fd:4f:67:60:00:9d:c6:
f5:a3:fe:10:01:f2:02:c7:e0:77:3f:6d:75:10:a3:
3e:5a:85:bd:1a:e5:cc:b7:00:00:12:67:fd:11:25:
f4:f0:09:72:23:ef:17:f9:b5:13:ff:44:d4:e8:b0:
5e:f9:49:5f:3b:fd:ea:02:05:0e:fb:b1:47:d7:75:
5d:ba:55:cb:70:f0:09:6c:63:56:38:f1:d7:4c:22:
a5:64:ed:8c:f4:18:23:dd:7c:c9:70:34:70:2e:0a:
91:4f:2d:bd:cc:19:72:09:97:d8:3d:01:0f:15:f3:
37:d9:48:aa:40:20:f7:d7:c4:4c:53:ee:f5:da:aa:
27:85:a7:c8:f2:14:44:ea:a9:59:cf:da:ed:09:c4:
43:53:ed:b0:ef:3a:87:c4:c4:6f:24:2b:5a:47:49:
6c:2f:e1:a9:37:73:d2:81:23:63:9d:d3:b7:0f:2c:
e3:6f:58:41:8b:90:a4:38:dd:47:94:ac:5d:b3:83:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:C3:BD:7E:43:6D:50:F3:D5:D3:F3:8F:DF:ED:01:22:27:15:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686DEE708E2311EFB92E3D63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.114.0/24
Signature Algorithm: sha256WithRSAEncryption
85:65:d8:d7:30:99:33:55:79:59:b2:a7:d1:79:72:09:87:1e:
ec:e9:af:55:31:85:17:63:11:f8:7c:2f:e2:bc:ac:c6:b7:49:
ab:a3:d5:33:ca:b2:5a:4c:8c:83:2b:40:2f:2f:4e:9b:7e:81:
c5:69:0e:92:7c:fa:f8:33:a2:52:69:f4:ab:63:1d:6e:9a:cb:
a9:aa:86:99:e3:9d:51:53:a8:9a:54:e4:3e:58:bf:6c:26:ee:
34:c9:00:cf:f0:47:09:97:96:ae:65:47:0a:6b:5c:4c:5b:2d:
32:c6:ca:af:92:03:59:6d:fe:94:fe:44:a6:41:85:e0:97:5d:
dd:af:d3:17:c6:8d:5b:95:1b:3e:cd:ad:b9:e1:2e:f7:9e:63:
db:35:0a:28:01:f6:96:a9:83:dd:b7:cb:5c:15:8a:db:09:b1:
49:5f:e3:89:ac:6d:10:96:80:25:d9:6b:39:97:48:b0:d0:01:
ef:96:ff:d3:ff:ee:b3:6a:97:f8:74:62:e9:9d:1c:a3:90:14:
1c:4f:53:b1:05:66:ee:dd:cb:39:dc:40:bf:ec:12:1d:47:be:
95:57:7f:de:93:50:e0:b9:e7:90:a4:7a:ee:fc:ec:6f:cc:16:
99:1f:46:3b:b3:7f:9e:6c:39:cc:4e:ed:69:18:cb:99:b3:ee:
ca:7a:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:15 2024 by rpki-client on console-ams.rpki-client.org