Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE4DB48F72D11EEB59AF5F6007001B1.roa
File: 6EE4DB48F72D11EEB59AF5F6007001B1.roa (raw, json)
Hash identifier: 37IhqsPFcPyPxuk2ATUcdqosni+FgPAwMHfog+cZYQw=
Subject key identifier: 42:CA:17:ED:58:B2:FD:C6:8C:6F:F8:1E:4B:54:95:51:B5:FB:8E:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE4DB48F72D11EEB59AF5F6007001B1.roa
Signing time: Wed 10 Apr 2024 11:28:20 +0000
ROA not before: Wed 10 Apr 2024 11:28:17 +0000
ROA not after: Thu 17 Oct 2024 11:28:17 +0000
asID: 137443
IP address blocks: 154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43744 (0xaae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 11:28:17 2024 GMT
Not After : Oct 17 11:28:17 2024 GMT
Subject: CN=661677d4-a14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:57:85:6d:20:f0:d9:ae:35:bf:15:44:9f:
ec:7c:7b:4f:ae:2e:19:90:f2:0a:3f:39:70:ce:c9:
8b:9a:07:77:01:6a:25:80:67:81:28:8d:19:9a:9a:
4d:0d:ec:38:6e:b7:d6:e6:6c:7d:95:01:57:79:00:
2a:8a:47:29:2a:d8:70:00:51:0a:2f:3c:6f:eb:7f:
e2:f8:d7:d5:aa:e6:b2:d3:03:a8:82:c4:fe:6b:63:
9e:52:63:a6:a6:ac:4f:da:5f:d3:9d:0e:ac:f2:b5:
e0:68:76:8c:8e:97:d9:10:fb:29:a7:ba:af:b3:8a:
de:cf:62:ca:13:6b:72:54:de:41:8a:96:92:cd:81:
37:eb:c1:83:48:03:2b:d7:fb:84:cb:ee:31:f6:3f:
0a:6b:d2:97:1e:2f:2e:e6:40:69:b6:0e:b6:32:15:
63:35:54:95:18:7f:76:97:53:34:56:f4:85:81:43:
95:6e:12:f3:4f:e9:3c:d3:ad:ed:c0:f5:f7:b6:07:
93:95:e5:5c:14:92:eb:11:77:e9:25:b2:14:ef:86:
0d:f1:ad:57:e7:e8:9d:51:5e:59:97:ab:10:28:ce:
82:b2:96:ea:c9:23:79:b5:bb:97:8b:63:cf:08:c4:
2c:c7:20:cf:0a:08:40:c8:e2:1c:a0:1f:69:1e:64:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:17:ED:58:B2:FD:C6:8C:6F:F8:1E:4B:54:95:51:B5:FB:8E:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE4DB48F72D11EEB59AF5F6007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:a5:3c:f6:2b:71:52:fe:68:ea:ad:dd:6a:ba:de:a2:67:28:
0d:51:f6:80:f6:d2:39:e7:a6:5b:b4:94:aa:b8:89:b2:8d:e9:
e8:5b:2c:0d:6a:b7:fd:90:11:52:40:db:06:2f:cf:5b:91:85:
a1:87:70:83:ea:07:6f:8c:8e:6c:11:49:13:c1:49:fe:f2:1f:
52:2f:96:83:40:cb:41:f9:ae:cd:b4:c6:ec:49:71:00:48:af:
21:32:aa:5a:1a:19:f0:d0:68:1e:db:9a:0a:5c:59:31:31:54:
df:3e:20:00:e3:4e:99:fd:6f:46:50:06:79:0c:6c:f4:fb:aa:
2a:d7:8e:a4:e4:56:2d:64:5e:ff:28:6f:33:1b:b5:10:f2:cf:
31:83:c6:82:5e:76:64:09:a2:5c:cf:85:d4:6f:91:38:79:28:
22:1b:66:95:1c:68:34:5a:57:e0:39:9d:3c:f9:eb:c6:80:61:
ee:d7:94:c8:17:6f:66:39:34:35:75:d1:9a:74:3b:d6:7e:01:
63:72:08:b2:d9:ea:02:38:80:b3:5c:56:9f:f1:58:57:62:02:
ae:e7:e1:6e:ce:7e:ca:65:77:44:0c:0b:ed:e6:41:2a:0d:58:
6f:57:e6:1f:8c:06:2b:ba:9b:f6:6c:e6:33:76:62:62:4b:da:
65:b0:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:05 2024 by rpki-client on console-ams.rpki-client.org