Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F34C68E92DD11EF8CB03CA9762E951A.roa
File: 6F34C68E92DD11EF8CB03CA9762E951A.roa (raw, json)
Hash identifier: QsidLTWGbRMgC787ZXpk5V4UPoOYKr+zC6h2HGR6pcE=
Subject key identifier: F0:40:DE:E0:29:E7:FF:73:C5:B3:DE:82:FC:D7:1E:19:9A:D8:85:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01022E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F34C68E92DD11EF8CB03CA9762E951A.roa
Signing time: Fri 25 Oct 2024 14:28:42 +0000
ROA not before: Fri 25 Oct 2024 14:28:39 +0000
ROA not after: Sun 01 Dec 2024 14:28:39 +0000
asID: 44559
IP address blocks: 154.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66094 (0x1022e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:28:39 2024 GMT
Not After : Dec 1 14:28:39 2024 GMT
Subject: CN=671bab1a-8df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:fc:bc:c6:63:22:77:6d:83:22:f1:15:0d:
02:3b:ff:d3:fe:2a:14:ec:09:dc:f6:84:94:c1:ec:
72:88:dd:0b:ec:7d:7e:fa:68:4a:0b:22:f4:9a:a9:
f5:b4:30:1e:c5:ed:52:4b:85:f8:39:cf:1c:8c:a8:
c9:0a:7a:4b:a6:7b:bf:1d:2b:5a:4d:e3:73:9f:83:
b9:e2:fc:5e:a3:42:cb:18:f4:ac:54:02:2c:b5:3a:
46:9e:8a:5c:35:34:39:8d:50:65:80:d7:ee:89:e0:
93:b1:a8:d4:ab:9f:f3:66:21:ae:e9:04:f4:39:92:
af:49:18:4f:75:bb:58:80:67:09:3f:3e:4a:3d:1e:
4f:7d:21:e7:49:cc:d2:44:05:3b:7f:c4:7d:f0:e8:
5f:b4:3e:c0:c1:43:7b:31:54:21:6b:d2:5d:ed:a0:
68:18:20:52:b9:ae:8a:08:64:da:d6:30:b3:62:48:
94:7f:a8:a4:a7:32:f4:66:44:61:0a:d0:01:78:e6:
6d:a2:b1:d9:5f:7e:66:02:b4:48:a7:61:73:82:c9:
ab:fa:5f:51:67:20:a2:5d:a1:54:c1:2d:6d:42:19:
d6:9e:e1:32:6c:8d:3f:6c:c4:30:45:90:f3:ac:82:
55:0d:77:8e:e8:2e:57:98:6c:73:a7:67:73:b1:db:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:40:DE:E0:29:E7:FF:73:C5:B3:DE:82:FC:D7:1E:19:9A:D8:85:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F34C68E92DD11EF8CB03CA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
07:06:6e:67:02:78:5e:4a:a5:d7:2a:d7:ab:b5:42:b1:98:c9:
bb:61:66:3e:69:d3:3b:b3:5d:56:d4:dd:54:ef:3e:d9:7c:4d:
e0:24:c2:ea:08:15:6a:c0:89:f9:0c:ac:57:56:db:3c:2b:cb:
db:72:f6:2c:e9:0e:ce:e0:54:4c:70:f3:ee:a0:45:dd:f1:64:
cf:dd:4e:06:63:d9:79:db:78:ac:2e:d6:96:57:b8:38:6c:fa:
37:42:39:83:24:08:9a:f7:38:6c:ea:76:3c:26:46:1a:45:00:
e6:a6:75:59:7c:e6:e2:08:97:27:f1:08:25:dc:1e:99:f6:0b:
59:34:c6:5e:29:27:00:a5:63:33:93:ef:3c:c8:17:f3:04:b6:
30:16:cb:fb:17:d8:ff:7a:61:f8:b2:cf:5a:3e:0a:64:ea:8c:
fb:6c:40:ed:a4:97:88:fb:a0:63:02:cd:37:31:eb:82:e6:4f:
b0:57:c0:36:81:71:4d:f9:e4:0f:5a:d4:b0:b9:53:f0:6b:d8:
33:dc:f1:a8:ba:d3:9e:77:b1:dc:96:c3:55:c8:5c:68:12:a1:
3a:9a:43:61:12:e6:b8:33:c4:e0:e3:46:8e:5e:27:fd:51:ea:
37:00:96:fd:58:e7:85:89:13:69:58:43:e5:ad:a4:ae:56:24:
cc:64:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org