Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A4E8E474D311EF82965B6C762E951A.roa
File: 68A4E8E474D311EF82965B6C762E951A.roa (raw, json)
Hash identifier: pI8UoUuOn/634xAH1LyFoVaYKmXq+ojqGM3QLwciK74=
Subject key identifier: FE:0B:6E:45:EB:AD:B3:11:E3:52:E9:7D:72:F7:D7:A2:7E:57:3A:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F038
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A4E8E474D311EF82965B6C762E951A.roa
Signing time: Tue 17 Sep 2024 09:01:21 +0000
ROA not before: Tue 17 Sep 2024 09:01:18 +0000
ROA not after: Wed 10 Sep 2025 09:01:18 +0000
asID: 135600
IP address blocks: 154.205.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61496 (0xf038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 09:01:18 2024 GMT
Not After : Sep 10 09:01:18 2025 GMT
Subject: CN=66e94561-5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:79:b8:40:8c:5e:98:9d:4d:8f:af:5b:09:
13:81:24:07:a3:6f:21:7c:86:7a:9d:ed:70:74:96:
b4:c3:83:76:e7:d4:cb:7f:e7:ca:38:f9:8b:6f:63:
2f:e2:c8:7d:12:c7:a1:0a:4e:9a:a6:4e:06:21:98:
70:e4:21:93:b6:2a:6a:0c:a2:8e:84:13:e3:69:f0:
89:e5:be:ad:af:cc:0e:f7:74:57:4a:52:d4:9d:85:
15:d0:60:f7:f7:28:11:16:ed:9f:24:53:23:c9:24:
24:27:cc:7d:99:72:3c:78:29:9b:39:ff:6a:6b:d2:
02:f1:8b:63:0d:91:17:78:b2:0c:d4:f1:e2:1d:37:
c8:18:e0:4e:5c:48:7f:7e:d8:8f:12:01:15:ef:3b:
33:ab:26:51:d3:92:cb:71:78:a0:13:ba:d7:33:1a:
de:9d:38:ca:a8:40:c7:41:a8:ac:3c:59:c7:92:46:
6f:b4:6e:6f:05:c3:30:62:e9:64:46:85:c6:ee:bc:
9b:07:f7:67:c1:78:04:f4:a8:0f:7d:5c:8b:a1:60:
fd:9b:ac:b8:3b:2b:4d:7b:e7:c4:02:b5:79:bb:83:
0e:f4:e9:b6:05:8a:45:7b:dc:61:6b:f9:af:3f:b4:
24:0a:27:78:ab:d8:79:6c:f4:ff:95:00:93:77:2b:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0B:6E:45:EB:AD:B3:11:E3:52:E9:7D:72:F7:D7:A2:7E:57:3A:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A4E8E474D311EF82965B6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7a:0a:c6:df:06:f2:fa:3d:2f:2d:12:d4:07:e9:c3:dc:bc:
2b:e5:f3:1f:ed:ee:60:92:d9:92:ab:ba:71:56:86:f6:51:25:
e2:b2:ca:d8:6b:3f:d8:0a:44:25:96:2e:b1:06:3b:2c:14:74:
36:28:57:52:1b:04:89:59:d5:18:b5:72:e8:65:24:90:cd:d5:
62:f0:ba:c1:e3:21:c5:79:dd:1e:74:c1:cf:18:91:2d:d6:a6:
a4:78:7f:1b:98:9c:29:15:b6:65:d5:60:a7:76:c6:84:a6:5c:
05:c0:02:0b:d2:f5:33:46:9c:4d:39:76:93:ce:c7:e5:60:be:
ec:48:86:24:f6:cb:f9:f6:19:8f:ae:4d:62:89:f8:24:e9:fd:
ab:0e:c1:bb:3b:d3:1e:94:d9:c7:86:0b:0c:19:df:ce:17:61:
54:58:83:4b:13:cc:a5:fb:e9:c4:7a:40:a5:98:43:a4:21:eb:
55:44:2c:e7:b0:5a:97:3c:60:98:8b:8f:4f:60:c7:11:af:91:
36:3c:7b:9d:33:da:c5:3a:01:57:a1:b8:ba:9a:4f:06:10:e4:
52:78:9c:b1:e5:fe:6b:61:8d:d7:8d:a5:88:38:81:2c:88:42:
d4:61:6f:1a:0e:e5:ed:dd:7b:e9:49:7d:34:db:4f:db:08:ff:
cc:88:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org