Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2FCD1C7CA511EFADF29FA7762E951A.roa
File: 6F2FCD1C7CA511EFADF29FA7762E951A.roa (raw, json)
Hash identifier: LAvwsothuW2l7/y70VFBy1//vlwXftuK+5ihq1zI61k=
Subject key identifier: 23:1A:27:48:B9:41:DB:7A:E4:0E:03:2F:98:14:B9:91:7C:9E:00:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F3D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2FCD1C7CA511EFADF29FA7762E951A.roa
Signing time: Fri 27 Sep 2024 07:52:25 +0000
ROA not before: Fri 27 Sep 2024 07:52:21 +0000
ROA not after: Tue 30 Sep 2025 07:52:21 +0000
asID: 201411
IP address blocks: 154.205.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62416 (0xf3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 27 07:52:21 2024 GMT
Not After : Sep 30 07:52:21 2025 GMT
Subject: CN=66f66439-c33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:25:b3:6d:41:76:fe:69:a2:03:d2:d0:b6:
03:9b:5a:75:64:26:30:ef:81:0a:7a:e8:40:08:e6:
5b:03:86:12:37:d0:ad:6a:a7:83:b6:22:a1:a6:3b:
9c:43:5c:3f:9b:a7:6a:ab:a0:7c:96:ba:d0:bb:f7:
4e:0f:1d:90:bf:15:1d:5f:3d:58:24:dd:09:f8:c9:
7a:65:93:23:04:0b:7a:6e:77:2b:2f:2c:1f:17:e3:
ca:77:e4:77:e9:51:8a:b8:d4:95:e0:62:dd:50:a8:
5d:59:da:ac:d0:37:ef:92:a4:9d:a5:a0:18:5b:0e:
49:ed:4f:6e:49:f4:0b:d8:db:a2:76:f6:df:21:d1:
b1:6c:bd:ea:3e:c3:61:4c:0b:21:a2:67:09:d0:14:
a2:89:cb:9b:7a:dd:5c:76:fc:96:47:b4:f3:8d:99:
44:29:d1:9a:52:d4:18:8d:22:5e:d2:24:3f:48:c2:
12:aa:70:09:21:ed:42:47:bf:bf:4d:86:72:4f:f5:
07:10:5a:30:f3:12:8f:a8:7c:17:62:68:b3:7b:7c:
8e:90:c0:57:d5:7a:6f:ff:df:73:05:bb:af:6b:0e:
4d:ca:6a:9b:63:a9:4c:5f:63:80:83:34:d8:ee:d3:
b6:ad:37:bd:c2:29:5f:08:8d:6f:d7:3e:20:eb:a5:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:27:48:B9:41:DB:7A:E4:0E:03:2F:98:14:B9:91:7C:9E:00:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2FCD1C7CA511EFADF29FA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3a:89:fa:93:83:6e:b9:eb:08:51:7e:26:87:9e:73:06:fa:
01:20:67:e2:ee:0a:37:6b:16:7e:f2:51:bd:77:53:ac:da:c0:
a8:c1:34:cc:46:cc:37:78:92:d3:d9:11:4d:10:37:bb:09:1b:
93:c2:4f:3c:c0:f5:6b:3e:2e:0f:8e:74:74:50:55:54:66:a8:
1b:ef:32:10:b9:15:36:27:9e:d3:fd:d5:7d:12:1e:c0:78:f4:
8e:bc:45:d4:5c:b7:00:91:bf:bc:96:98:d7:53:f1:25:65:cf:
8f:0e:00:37:79:85:a3:a0:a9:79:26:d5:31:89:a9:0c:9f:7f:
e5:09:fe:d3:b8:14:4e:1e:4d:de:e5:d4:9a:da:f2:d5:5b:d1:
94:71:8b:e7:d2:6f:ee:90:f1:6e:37:c2:4e:76:07:b9:1e:ff:
60:ea:bb:c2:e4:24:51:f5:61:4c:1f:b4:3f:68:e4:13:80:67:
a7:ae:0e:bd:52:8b:82:67:8a:9c:0c:71:eb:1c:05:dd:c0:e0:
16:25:9b:86:97:6e:a1:44:92:0b:51:2b:32:22:d5:cf:b6:c5:
67:e1:0e:5f:78:8c:e9:e3:6b:40:ab:41:b9:e5:d0:7f:69:aa:
cb:d7:ea:97:4a:d0:76:35:93:8b:44:d5:f5:56:13:3e:7f:15:
10:68:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org