Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBA1AA0A26111EFB9E1F998762E951A.roa
File: 6DBA1AA0A26111EFB9E1F998762E951A.roa (raw, json)
Hash identifier: 9goJCeTHzHa8hGb9TIb+oe16dk1IUMD4eQv662t/Cgs=
Subject key identifier: C2:69:FC:CF:3A:1C:8D:FA:C1:04:74:D8:C7:F3:9A:51:46:D9:8F:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBA1AA0A26111EFB9E1F998762E951A.roa
Signing time: Thu 14 Nov 2024 08:21:21 +0000
ROA not before: Thu 14 Nov 2024 08:21:17 +0000
ROA not after: Sat 04 Apr 2026 08:21:17 +0000
asID: 55967
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68848 (0x10cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:21:17 2024 GMT
Not After : Apr 4 08:21:17 2026 GMT
Subject: CN=6735b301-326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:86:a1:18:a0:38:c7:de:5a:c8:3b:a5:1a:
91:ff:48:cc:40:0e:20:ed:4d:1a:fd:f4:25:6f:a7:
4b:94:5b:f6:53:78:bb:1b:25:bf:38:26:b6:47:68:
e5:37:c0:5e:82:34:69:30:2b:21:bf:10:63:99:a8:
9a:95:a4:42:54:b1:89:20:c2:e3:0a:a1:b1:38:3a:
26:4b:e0:3a:b6:00:d0:85:15:0a:84:1a:9b:cb:60:
2d:8f:c0:df:72:84:3c:27:67:8d:1e:23:1e:23:d5:
50:c0:5e:38:c4:e8:4d:3e:9b:3f:4b:82:74:55:39:
74:4f:e2:0d:6a:f5:71:08:70:1e:49:ae:3b:11:60:
dd:67:ba:3e:a4:4c:0d:03:4b:94:a8:26:82:d2:c2:
9f:c3:6a:31:a0:f2:e3:9e:fc:bf:f1:27:92:19:7c:
98:c1:12:d3:4d:c7:6d:91:d9:8a:e2:65:62:24:82:
8c:53:b2:dc:b8:b1:17:28:7d:3b:d2:27:27:b5:cd:
f2:38:f4:58:8e:24:76:96:7d:70:95:9f:4b:a6:60:
24:09:f0:55:9a:da:7e:26:e2:1b:6b:28:68:e8:e5:
38:31:75:41:4e:15:c0:3e:b4:03:65:30:de:ef:99:
5e:ac:af:05:3e:d2:84:52:86:b1:f6:53:cd:b0:3e:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:FC:CF:3A:1C:8D:FA:C1:04:74:D8:C7:F3:9A:51:46:D9:8F:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DBA1AA0A26111EFB9E1F998762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
05:cc:db:18:43:62:fe:de:0a:72:f0:50:99:ad:bf:0e:73:42:
24:a8:9c:ec:ee:2a:3e:72:c3:57:47:ca:ab:70:02:cc:df:5f:
9b:ec:59:98:f6:e2:7e:5f:bb:bf:36:5e:77:24:3b:e1:63:c1:
79:3d:ec:a7:9b:31:00:f8:e4:88:fe:f8:7b:2f:e2:24:2f:43:
7d:6f:db:24:e9:7e:bf:72:8c:63:2c:1b:1e:55:9c:a6:fe:65:
0a:64:e3:11:1a:8a:81:8d:e6:ad:9a:26:ec:dd:a8:82:98:ef:
49:7e:10:9d:9a:3f:7b:51:d5:5c:fc:72:2e:e3:bc:61:d3:a0:
4e:84:6e:92:39:ba:8d:f7:86:ee:a8:53:23:a4:5e:44:be:e4:
29:bd:48:5b:23:12:f4:c6:a8:61:e2:97:72:c5:72:ce:70:06:
49:41:d5:bd:7e:48:42:7e:f8:83:9d:92:0a:ae:34:8f:ba:93:
92:72:67:87:ad:b7:06:95:02:f6:f0:d0:5e:2b:d0:1b:29:42:
1e:29:70:01:ff:95:fd:8e:14:65:ae:b7:2a:6b:d2:82:c1:5c:
b2:06:d3:7c:ce:7a:9d:9e:50:d9:8f:5e:b7:50:e0:78:95:33:
92:a0:bd:24:90:a3:96:f6:9d:3e:e5:47:00:95:57:45:9c:a0:
89:44:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:16 2024 by rpki-client on console-ams.rpki-client.org