Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD064D70AE1D11EE8637A79E775412E6.roa
File: AD064D70AE1D11EE8637A79E775412E6.roa (raw, json)
Hash identifier: laqFPXy3ft4AJv9mV7noAnRaSOM7puqKUZvjVnSW+NQ=
Subject key identifier: 9B:F3:4C:63:8A:A2:AB:70:7A:1B:E8:D6:62:4E:7C:3B:21:25:7A:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD064D70AE1D11EE8637A79E775412E6.roa
Signing time: Mon 08 Jan 2024 12:01:38 +0000
ROA not before: Mon 08 Jan 2024 12:01:34 +0000
ROA not after: Tue 14 Jan 2025 12:01:34 +0000
asID: 138965
IP address blocks: 154.222.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29372 (0x72bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:01:34 2024 GMT
Not After : Jan 14 12:01:34 2025 GMT
Subject: CN=659be421-f424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:a7:f3:5f:47:28:f9:ad:16:28:8e:9b:f5:
71:fe:1c:a3:04:61:0f:b6:17:6c:00:7a:34:e5:fd:
dc:e5:36:05:2e:2b:54:21:26:55:02:b0:ce:8e:be:
0c:c5:bc:09:07:c4:00:37:64:f3:dc:8d:9a:f3:7b:
52:d9:0e:f7:96:69:f3:f9:b4:28:13:2b:6c:58:fa:
07:a8:4a:87:30:c9:a9:32:da:68:a9:7d:a6:75:8b:
38:12:7d:5c:a8:e8:89:7b:89:6b:58:2b:80:76:09:
a2:25:60:85:83:27:40:a1:ad:cb:5f:ed:4b:72:75:
71:01:f0:c8:6e:c8:b2:ec:f5:d5:f3:21:45:77:53:
18:2d:da:4c:0c:ba:b5:e7:c3:cd:a6:db:07:4d:75:
9b:8b:73:6b:26:30:44:a8:2d:3e:21:a5:36:24:8f:
c9:e3:b5:58:56:9f:99:63:da:6a:b1:8a:f3:2a:49:
4a:3e:6c:51:8d:27:c9:e7:c4:8d:5a:c6:ee:65:8a:
03:48:75:bc:14:32:83:65:8a:17:64:ec:1c:44:04:
d8:fe:71:1c:47:7d:7f:21:21:6f:fd:34:75:e1:fb:
74:ff:21:7b:2e:c7:a7:f6:c1:3e:2f:5d:0e:04:b8:
3e:1f:cc:b5:45:fa:a2:91:fc:bc:c7:d5:ee:09:4c:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:4C:63:8A:A2:AB:70:7A:1B:E8:D6:62:4E:7C:3B:21:25:7A:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD064D70AE1D11EE8637A79E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.61.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e8:95:26:c7:23:81:91:7c:35:17:79:b9:b3:64:81:f2:c1:
be:0c:c9:83:ac:bd:36:d5:23:e6:a8:56:27:b4:41:a3:f3:17:
37:4d:32:ee:8b:d9:68:31:16:82:61:e6:32:2a:4c:00:87:f2:
76:cc:db:13:9c:6a:f1:59:b7:8e:b6:91:ba:0e:f5:1f:5c:42:
f6:86:00:9f:e3:55:9a:7c:f4:bf:7e:6b:f2:89:96:73:16:e4:
58:f0:43:a8:cd:c4:2f:41:34:c9:7b:dc:4f:70:6a:5d:f9:3d:
df:e0:5a:fc:fa:2f:77:2d:43:8d:87:bd:92:d8:fd:86:43:37:
45:74:17:22:ec:9a:bb:bd:1e:45:06:f9:12:d6:0e:ce:7b:67:
3b:2c:1e:a0:a8:38:25:9c:7c:30:32:06:b8:a9:f0:c4:7f:56:
87:95:7f:67:23:82:9d:79:2b:b7:4b:e3:1a:f9:4d:d6:d1:1f:
57:ae:33:6a:f1:56:16:08:69:3f:a5:21:5f:8f:97:7b:0f:8c:
1d:6d:28:35:3f:85:94:de:89:21:05:25:4f:63:8e:5c:bb:be:
95:e3:f7:be:89:71:7f:9f:0e:59:47:71:54:00:02:ee:14:1a:
d6:52:65:f9:f5:1c:7d:fd:d7:50:82:8a:f0:52:55:75:08:21:
53:54:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-fra.rpki-client.org