Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A699134A87C611EFB2752EB5762E951A.roa
File: A699134A87C611EFB2752EB5762E951A.roa (raw, json)
Hash identifier: D1mbdh/pvP15ULxEoH415QgKoA7YtN2RxQ1HgIueEH4=
Subject key identifier: 61:D6:30:DE:24:5B:D3:D0:8D:0C:C1:FF:96:70:D3:32:B8:7F:1D:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FD6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A699134A87C611EFB2752EB5762E951A.roa
Signing time: Fri 11 Oct 2024 11:47:54 +0000
ROA not before: Fri 11 Oct 2024 11:47:51 +0000
ROA not after: Sun 12 Oct 2025 11:47:51 +0000
asID: 136907
IP address blocks: 154.86.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64878 (0xfd6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 11 11:47:51 2024 GMT
Not After : Oct 12 11:47:51 2025 GMT
Subject: CN=6709106a-2ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:45:de:1e:db:be:3a:ec:75:27:73:fe:27:
b2:73:55:f2:66:d9:94:b3:c7:c9:da:ec:63:c6:63:
3c:e9:6e:e9:a1:94:bf:61:11:91:da:71:4c:07:76:
42:a5:3d:fd:10:68:1d:66:de:35:5f:44:e7:e6:b0:
ee:1a:0c:23:dc:fc:e5:a4:98:af:00:76:ea:71:be:
f0:a8:a6:77:fa:27:e2:8a:b8:4b:c7:bc:e4:8f:93:
f5:ae:4f:78:39:bb:bb:d7:97:85:97:e6:21:38:95:
d8:4a:7b:35:2b:61:0a:f6:44:97:49:39:65:57:bf:
b2:59:cb:db:46:19:e2:95:e6:1e:f6:1a:d6:27:6a:
ea:9d:6f:b9:53:b4:7b:1b:e1:17:b6:86:a8:e9:1b:
66:7f:1e:21:45:48:e7:11:e5:18:f1:32:d3:2a:32:
85:a9:88:0c:82:e6:a9:9e:40:af:52:29:4a:71:e7:
ee:c3:7d:fa:bb:3c:93:a6:17:bc:05:83:4d:87:e8:
c2:fe:f6:40:3e:ab:1e:07:8a:fd:08:b6:ae:65:19:
ff:25:65:4b:c0:5f:d2:88:9c:f9:3d:21:b4:38:47:
b7:49:1b:8f:94:9d:b8:ed:2e:0d:15:d2:d3:c0:57:
db:f9:41:a5:a0:83:14:a5:d8:bb:4e:4a:a4:47:cf:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:30:DE:24:5B:D3:D0:8D:0C:C1:FF:96:70:D3:32:B8:7F:1D:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A699134A87C611EFB2752EB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.32.0/20
Signature Algorithm: sha256WithRSAEncryption
38:5c:6b:ce:67:ab:4f:7e:f1:0b:88:ea:08:b5:5e:fa:0e:b1:
ff:0a:e6:24:da:22:c7:7c:c5:c9:17:5b:b5:c0:bd:4e:27:54:
e7:6f:47:25:7e:be:9a:d1:58:40:dc:5a:02:be:6a:57:17:37:
b5:f2:6f:23:e4:a1:cb:b1:61:1c:8f:14:ee:57:71:ec:75:fb:
00:82:7e:ab:4e:37:6f:b5:b0:0d:0e:2a:02:ec:87:2e:20:f2:
f5:8e:4c:c6:a6:38:7e:2b:41:fe:5f:3c:15:8b:da:35:35:6e:
58:92:c5:38:21:01:51:e3:31:47:f8:7a:25:ba:59:45:26:f3:
d4:30:1d:71:ef:a5:af:2d:76:fb:be:67:7f:17:82:e5:16:5e:
a6:c4:45:0b:a1:a2:b0:3f:18:a1:dc:d0:26:0c:80:65:8e:e9:
af:95:2a:48:4f:46:2c:8e:3c:c2:bd:26:5c:33:36:64:d6:f3:
d4:ff:2d:88:cc:71:cf:eb:e8:ee:da:e5:84:5f:d3:1e:6a:81:
7f:5f:6d:25:db:46:83:cc:39:00:59:f5:53:36:01:2b:01:80:
80:ad:df:2f:bb:ef:ab:b4:ba:95:09:61:cf:1a:f8:27:c2:78:
fb:93:88:c5:c9:28:02:87:0a:c8:1b:fa:8f:6a:d6:a4:cc:ca:
dc:a8:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org