Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C53AFDCFD3911EE9035A447017001B1.roa
File: 6C53AFDCFD3911EE9035A447017001B1.roa (raw, json)
Hash identifier: KbqznIaNg9JIvcLJkRG8bd6QDUfAxRRtkPaA6r66Bnc=
Subject key identifier: D0:30:66:3B:DC:00:90:EC:10:3D:35:03:0F:48:E5:D4:C3:E2:7B:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C53AFDCFD3911EE9035A447017001B1.roa
Signing time: Thu 18 Apr 2024 04:09:17 +0000
ROA not before: Thu 18 Apr 2024 04:09:13 +0000
ROA not after: Fri 26 Apr 2024 04:09:13 +0000
asID: 39600
IP address blocks: 154.91.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 04:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44559 (0xae0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:09:13 2024 GMT
Not After : Apr 26 04:09:13 2024 GMT
Subject: CN=66209ced-9edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:af:81:93:af:99:42:5b:8e:6a:2f:88:0b:
af:db:a1:72:d7:19:fe:e6:d0:33:5b:a3:41:6c:b0:
89:b6:ba:ab:75:58:0c:c8:91:91:de:29:27:2f:45:
66:68:fb:d4:37:23:7d:b9:81:ea:22:1f:6c:26:44:
9d:77:be:b7:51:4b:27:6f:34:7c:84:14:61:d9:c3:
dd:d6:fa:64:67:8b:c6:23:b6:fc:b7:02:e1:09:59:
26:4b:53:34:23:ed:d0:f2:7c:84:9f:00:03:7f:37:
20:47:4f:28:31:af:f0:d7:ec:84:96:25:0c:9b:82:
b9:40:b8:d0:e1:a6:5c:09:3e:34:13:c6:e7:43:95:
e0:c6:9d:89:f3:b8:2d:c2:e7:74:da:a6:c4:4b:de:
55:3e:16:95:43:d1:0d:2f:23:ac:e5:2b:ae:67:0d:
d4:43:98:34:74:54:bb:d8:c6:1c:8e:20:51:87:95:
12:f6:06:64:60:bd:95:64:e8:d5:c2:2d:43:40:39:
25:83:92:39:73:d3:d8:25:21:f8:71:85:e6:79:f7:
cc:d3:17:09:39:22:1e:a4:d1:a2:3b:0f:f4:0b:2b:
a4:de:08:46:d4:ea:bf:91:57:7b:83:1c:84:e8:93:
c1:7e:72:32:3a:60:6b:5e:6e:19:4a:b0:2c:f6:b9:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:66:3B:DC:00:90:EC:10:3D:35:03:0F:48:E5:D4:C3:E2:7B:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C53AFDCFD3911EE9035A447017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.152.0/21
Signature Algorithm: sha256WithRSAEncryption
25:00:6b:81:72:79:7a:b0:51:f0:75:ce:b1:e4:7c:cb:b8:b2:
e8:5b:f1:eb:43:03:0b:98:7f:a6:4b:6d:c7:d8:68:6b:f3:27:
a9:a6:37:fb:55:5e:dc:0a:77:d8:28:05:5f:a9:48:42:c8:ff:
f6:b3:f8:2c:4a:23:5c:5e:c7:de:d6:ed:d5:b0:0b:66:35:98:
0b:26:af:74:75:4d:2c:f5:92:31:44:65:dc:41:90:62:1d:2c:
c1:18:5c:93:df:eb:1d:d4:2e:46:78:26:29:21:bf:ab:b9:ef:
71:ed:54:5f:fa:92:b2:3c:30:11:0e:93:f1:e8:c9:c8:11:6f:
2d:50:40:a6:08:72:50:86:84:56:7e:4f:ac:7e:f0:7e:1a:ae:
4d:99:b6:f1:9d:94:a6:3f:35:60:b6:9b:9c:9e:1f:a9:91:2c:
e5:c8:0a:5c:ca:8d:45:89:4a:cc:64:38:bf:ae:08:17:14:16:
9c:7e:f9:96:f7:21:cb:53:05:10:9c:9e:23:e2:f5:0e:68:ae:
34:80:f5:47:11:7e:0e:db:f2:1e:52:bd:5d:7a:6e:ac:f7:40:
65:77:8d:8b:19:cc:3e:58:19:2a:df:f9:64:50:87:ff:7d:1f:
0b:2c:a1:3e:c3:d9:03:71:82:d7:39:b5:5b:1b:49:1e:9d:f8:
b9:22:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:43 2024 by rpki-client on console-ams.rpki-client.org