Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D6997A60EC11EE8068CB534AD9E6FC.roa
File: 69D6997A60EC11EE8068CB534AD9E6FC.roa (raw, json)
Hash identifier: 7WbR9cYwMKzsnUFIoLdZYaKv3wOFWgdVV9BxYdr+hJc=
Subject key identifier: 7D:79:19:AF:23:28:62:44:6D:3C:51:04:7B:53:74:85:59:A9:29:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 445C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D6997A60EC11EE8068CB534AD9E6FC.roa
Signing time: Mon 02 Oct 2023 06:25:00 +0000
ROA not before: Mon 02 Oct 2023 06:24:57 +0000
ROA not after: Tue 01 Oct 2024 06:24:57 +0000
asID: 211392
IP address blocks: 154.85.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17500 (0x445c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 06:24:57 2023 GMT
Not After : Oct 1 06:24:57 2024 GMT
Subject: CN=651a623c-6ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:5a:8a:06:83:41:87:cc:7f:c0:d2:55:f8:
d4:92:69:6c:7d:a3:30:c4:b7:18:ae:66:b7:fa:5b:
b3:a4:0d:4f:b3:b5:a4:5d:b5:47:1c:fb:70:49:89:
28:a8:b9:c2:6e:02:c2:a7:61:a4:10:32:74:b8:3e:
51:09:1b:09:ae:71:e3:b2:b6:c0:8a:23:72:1d:b2:
f9:fa:2c:2a:54:dc:d9:80:ea:79:92:4a:c6:39:f0:
5c:42:69:3a:e7:f4:12:72:eb:bd:a0:f5:fb:a5:36:
93:09:7e:d9:fd:e0:7f:17:1b:fd:4e:3b:c6:3a:3e:
2c:13:56:5b:60:ab:21:fc:bc:42:f1:97:c4:a9:a7:
eb:fa:d9:68:6c:13:75:b5:99:8d:69:9b:eb:2b:63:
b8:83:88:e2:93:f2:38:85:95:1e:96:55:23:00:b3:
fe:38:73:4a:59:ca:4d:ba:11:79:22:b0:68:39:88:
42:c1:ae:c4:65:a0:d0:02:47:83:2d:dc:b6:9f:7d:
1c:f6:8c:ac:36:4c:94:5d:9a:34:d4:e5:a7:09:57:
8e:1d:5b:48:1f:70:95:a9:7c:74:8d:b2:48:cb:ba:
83:44:d7:94:b4:1a:49:67:ea:28:e9:fc:2d:0f:d5:
95:f3:6e:a8:3d:fe:89:83:ae:52:68:14:f8:b8:b5:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:19:AF:23:28:62:44:6D:3C:51:04:7B:53:74:85:59:A9:29:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D6997A60EC11EE8068CB534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d8:bd:bd:48:80:b0:cf:4c:21:6a:88:3d:e8:a9:03:42:75:
95:2a:81:f1:de:cd:da:7f:75:85:da:39:32:9a:d6:e5:05:64:
3c:a3:d8:59:dc:d0:ed:6e:55:77:35:1b:f7:b9:ed:dd:eb:e8:
a7:6b:d7:f3:94:98:31:56:38:ea:ea:90:28:85:55:55:4d:52:
25:b6:0d:63:4a:06:89:57:91:06:d9:4d:a9:e9:4a:74:bb:f8:
0d:30:80:db:22:ca:7f:d6:e1:36:29:d9:80:9e:94:ed:a3:e0:
89:d8:98:cf:c4:75:7e:44:f3:7b:65:d5:80:c1:a6:72:68:09:
4a:28:69:9b:d1:f1:ac:7c:d6:24:a6:52:f7:d4:85:4b:78:52:
49:d8:8a:8f:04:46:9f:ea:c5:6e:23:df:40:b2:70:47:f9:89:
d8:cd:06:87:c6:ef:15:70:f7:fd:06:7c:10:6c:90:5e:95:4e:
5a:d5:97:82:b1:50:f6:be:e5:8c:28:bc:1f:87:86:11:67:4f:
03:aa:02:2f:d8:0b:0c:d5:5a:32:1f:41:53:bb:30:f1:d7:3d:
45:4c:6e:83:40:3f:52:dd:fb:1c:2f:a4:9c:b8:1b:76:fb:9a:
e4:81:f7:f9:80:15:ec:3f:c8:c9:16:16:c7:b2:bf:b7:71:70:
a8:69:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org