Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A59E6EAA912011EF8E24E5BC762E951A.roa
File: A59E6EAA912011EF8E24E5BC762E951A.roa (raw, json)
Hash identifier: UFGBUywcLiEyniiZpFOzwddf7m1gzJ7ymHDEFRWwDnE=
Subject key identifier: 6C:6D:78:2B:84:A6:A3:F1:15:2D:37:97:10:AF:49:8A:ED:B6:C6:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A59E6EAA912011EF8E24E5BC762E951A.roa
Signing time: Wed 23 Oct 2024 09:24:47 +0000
ROA not before: Wed 23 Oct 2024 09:24:44 +0000
ROA not after: Sat 13 Sep 2025 09:24:44 +0000
asID: 23764
IP address blocks: 154.198.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65788 (0x100fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:24:44 2024 GMT
Not After : Sep 13 09:24:44 2025 GMT
Subject: CN=6718c0df-822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:9d:ae:bb:e1:2f:c3:9b:6e:8d:2e:82:9f:
43:29:5e:89:2d:39:3b:d6:1b:c8:16:79:05:29:e5:
8b:5a:28:b5:1d:62:de:1f:2d:8c:ae:e2:05:c2:aa:
81:b8:93:1f:d0:49:30:dc:c2:20:81:3c:70:9e:6e:
38:c6:28:f4:76:7d:55:1d:7f:24:46:52:eb:9b:ef:
c6:a5:ce:3f:c3:ec:17:af:31:37:a3:7b:bc:db:d3:
3c:35:44:2e:6a:e4:38:fb:41:74:cd:73:71:ca:1b:
5d:0d:dc:33:44:a2:4a:26:2b:6d:24:56:8c:6d:43:
71:51:e8:c2:d4:68:bd:67:6c:5b:ab:27:78:5c:74:
39:3f:8e:84:42:d7:73:0b:d2:ee:dd:6f:ff:02:94:
99:d6:ad:85:df:0d:a6:33:85:5a:dc:29:17:21:f4:
40:96:11:01:2b:42:52:49:2c:4e:41:26:8f:b8:9a:
0e:92:e9:07:a1:c5:9a:e2:b7:64:2a:2e:eb:d0:d9:
b1:93:44:3a:1f:40:74:c8:82:c9:76:63:56:70:3b:
c3:59:9c:83:6b:a4:a9:e3:c6:77:4a:81:e5:e5:67:
18:35:cd:98:ca:7c:9c:c9:d8:33:1e:5b:70:ce:40:
dc:b8:43:76:91:7c:04:f5:0b:7d:82:8f:5f:6b:53:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:78:2B:84:A6:A3:F1:15:2D:37:97:10:AF:49:8A:ED:B6:C6:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A59E6EAA912011EF8E24E5BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.2.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ff:ec:a8:af:f0:b4:cc:8c:bd:e5:8e:54:8f:fc:67:e6:53:
51:68:ce:d9:ea:e1:16:c2:0f:92:d7:ea:8b:6a:83:9e:9d:92:
23:04:e9:e4:a5:3c:4b:1b:a5:c9:e1:88:56:d1:39:ae:16:ae:
8c:3f:da:5b:c6:fa:26:fb:d2:0c:f0:5f:eb:08:1e:71:a6:31:
c6:33:55:82:e1:a6:f6:f9:38:30:7a:5d:6f:58:85:cd:ca:fb:
49:a6:a9:27:e8:22:49:e9:60:1c:04:c2:a6:e1:4e:dc:2c:c9:
8a:a2:81:2b:59:77:37:58:c2:5e:72:c1:c8:df:ed:a2:6c:46:
57:b8:8f:39:22:0d:12:50:0d:5a:5f:24:ab:9c:3b:89:3a:4e:
c0:2c:ff:69:48:00:31:c6:2f:a9:e7:44:67:40:c6:b0:5f:ae:
4a:d0:90:7f:1c:80:dc:a6:7a:48:c4:ca:5c:65:af:ff:62:8c:
2d:ea:d5:d4:85:6a:cb:29:d0:67:08:7f:0f:6a:00:9b:37:47:
0c:2d:a4:e7:e9:99:b1:ae:f1:c7:eb:35:43:58:69:62:86:0d:
d4:12:bf:e3:73:2f:3c:68:b3:fd:75:1e:77:8e:e4:83:e9:3c:
08:a9:2e:4f:ab:2e:32:c6:2a:37:92:02:fb:e3:6b:4d:7c:88:
a7:8c:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org