Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4C4A2C725711EF97C9AA65762E951A.roa
File: 6E4C4A2C725711EF97C9AA65762E951A.roa (raw, json)
Hash identifier: GexYRaqIWT9O2Icz42EbqyWiprry+v43mtUNboPpQT0=
Subject key identifier: BD:F0:97:BA:1C:E0:5E:2A:89:F8:98:A0:60:97:0D:57:E5:B2:BE:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4C4A2C725711EF97C9AA65762E951A.roa
Signing time: Sat 14 Sep 2024 05:08:51 +0000
ROA not before: Sat 14 Sep 2024 05:08:48 +0000
ROA not after: Tue 31 Dec 2024 05:08:48 +0000
asID: 17561
IP address blocks: 154.217.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60882 (0xedd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:08:48 2024 GMT
Not After : Dec 31 05:08:48 2024 GMT
Subject: CN=66e51a63-ae15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:74:8f:45:32:14:a7:e7:cb:64:80:e6:7d:
06:5b:6b:5a:10:a5:83:c8:92:7b:61:eb:7d:e3:7f:
11:10:e2:81:c8:02:fd:aa:9a:4e:80:22:f1:5e:32:
e8:6a:15:fc:eb:c4:36:45:67:00:a0:ac:b8:aa:c9:
e3:94:88:8e:df:05:22:2b:eb:7d:05:8a:72:55:98:
db:db:90:13:81:47:e7:82:ec:49:be:7e:46:a9:e6:
fa:08:54:8b:85:84:d7:e3:e5:40:69:73:a3:bb:43:
60:f3:c9:03:77:da:a4:94:61:39:2b:35:72:44:e4:
19:4f:95:c6:6f:22:df:d3:97:e7:44:7e:40:38:f8:
e7:e9:11:8f:5f:f8:22:5e:0f:8c:7e:51:51:41:40:
08:20:ab:15:a2:59:12:92:85:e7:c4:36:58:59:76:
fb:46:0b:50:4c:65:a9:4d:e2:fa:ba:93:2f:9d:19:
6d:47:fa:57:c4:c1:92:32:fe:96:b6:d9:13:a9:9d:
c9:f9:97:af:4e:86:fb:3d:c8:c4:78:cd:df:f2:0f:
9e:d7:dc:b0:42:96:67:db:bf:be:ea:d2:76:df:49:
c1:9a:a5:5a:58:bf:65:69:ed:5a:47:c0:1b:97:39:
c7:a1:8c:61:f8:76:2d:1a:b8:56:2f:77:07:ef:76:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F0:97:BA:1C:E0:5E:2A:89:F8:98:A0:60:97:0D:57:E5:B2:BE:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4C4A2C725711EF97C9AA65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:85:12:8f:68:61:35:99:7e:d7:9f:a1:6f:98:e3:f2:36:7a:
84:a3:78:0e:68:f3:76:97:0a:64:3f:ea:98:5c:80:1c:76:9a:
53:5b:92:a9:ea:2e:42:00:59:12:64:05:1f:54:55:73:94:38:
2a:e1:c3:c3:bd:eb:5b:41:5c:b4:2a:54:18:1e:c9:87:79:9b:
53:41:f8:de:64:3f:f8:50:c9:f5:63:92:6e:17:cf:46:f1:6c:
10:8e:46:d9:42:80:44:2a:0d:e7:90:52:38:0a:e9:de:45:3c:
a1:73:31:46:cd:17:1c:f5:12:5f:74:f7:37:d4:95:b5:23:be:
48:27:ef:1a:b1:8c:f5:ba:db:1a:79:cd:f7:cd:5a:10:f4:ee:
d7:11:db:1c:ad:12:61:d1:a1:e1:de:17:36:df:4d:fd:4f:75:
4c:3e:6b:61:dc:08:b9:63:1f:78:e2:01:8b:e6:3d:4e:0d:94:
06:0e:1b:b0:d6:39:aa:3f:5a:b1:e5:e0:5c:47:26:24:12:c0:
f1:f5:03:86:ca:22:96:c7:72:03:5c:52:d1:8a:23:d3:4d:28:
cf:8c:34:c7:77:fa:f8:34:22:4e:4b:67:f6:66:a2:f2:45:b2:
a7:76:e7:bd:92:15:83:dd:94:84:60:cc:3d:41:6f:12:de:8d:
ce:97:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org