Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF327628767711EF831B3BB7762E951A.roa
File: AF327628767711EF831B3BB7762E951A.roa (raw, json)
Hash identifier: kaHJ2RCPwj69S48w/zcae44YIbDp3888kAufLgi4r/A=
Subject key identifier: B6:83:F2:2B:61:CE:C5:CF:F2:BA:16:3B:AF:60:E9:F3:B1:AA:AF:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F07B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF327628767711EF831B3BB7762E951A.roa
Signing time: Thu 19 Sep 2024 11:09:49 +0000
ROA not before: Thu 19 Sep 2024 11:09:43 +0000
ROA not after: Fri 08 Aug 2025 11:09:43 +0000
asID: 133199
IP address blocks: 154.204.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61563 (0xf07b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 11:09:43 2024 GMT
Not After : Aug 8 11:09:43 2025 GMT
Subject: CN=66ec067d-f32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:49:a2:e2:b3:38:f7:b8:f3:03:79:d7:53:
9e:5c:b5:96:d9:e4:01:5a:68:32:90:77:33:2d:15:
39:de:8d:78:ad:04:05:1d:21:f0:97:76:79:14:74:
9d:db:1a:a3:cd:03:e8:6a:72:ff:12:63:02:68:fe:
40:63:53:ae:3c:99:65:e5:47:88:32:f4:5d:e4:48:
08:7f:75:b3:a3:67:19:44:85:3b:b4:8a:dc:f8:b5:
84:29:16:21:b2:fa:20:e7:3b:c6:72:fc:d5:cb:80:
35:39:7b:ca:6c:09:e8:df:39:fe:d0:23:2e:28:c8:
cf:f3:af:1a:43:3d:f3:90:13:b6:de:8a:ad:ba:3e:
da:a7:1d:24:04:21:83:c6:05:20:8b:b8:68:13:9c:
01:20:e8:35:1d:df:27:8c:96:0f:d7:b4:f8:4e:95:
5b:cb:ec:aa:aa:c7:fb:33:6f:ab:ac:d9:66:bf:22:
2e:c3:4d:02:a7:80:e7:58:3c:35:95:bc:70:55:9f:
cc:bb:78:b1:d2:09:7f:11:26:51:d0:6a:f2:76:df:
f9:6b:cd:8c:0f:f5:98:93:70:bf:f0:b9:56:45:2a:
85:81:03:73:b4:03:29:b1:3e:a5:17:2f:19:87:27:
49:b6:78:0a:3d:db:e9:4f:77:8d:21:b5:1f:ed:86:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:F2:2B:61:CE:C5:CF:F2:BA:16:3B:AF:60:E9:F3:B1:AA:AF:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF327628767711EF831B3BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.56.0/23
Signature Algorithm: sha256WithRSAEncryption
84:89:2e:d2:22:26:ac:37:cc:80:42:48:4f:54:6d:0c:3d:c0:
c4:71:ee:34:ee:56:9b:e7:4a:0c:38:c2:ba:88:bf:a2:d2:da:
e1:20:c4:65:59:05:46:9e:e0:56:a8:3e:c4:3a:e3:1d:5f:83:
b2:3e:36:60:4d:e6:86:b1:a1:aa:51:5a:cc:b6:d0:43:7e:06:
48:3d:67:48:31:69:e9:c3:23:a1:3c:1e:fd:3b:b6:d8:c0:65:
34:b9:72:65:39:8d:32:b9:28:22:3a:3e:3e:a7:b9:0a:90:7d:
37:33:e4:bd:a3:6e:54:89:04:2e:b7:61:fa:08:c9:5a:3e:36:
e0:45:12:72:4c:34:91:d7:91:c0:5b:8b:96:8d:ba:2c:83:c0:
de:24:b3:e3:5c:d3:ac:48:25:12:4d:53:36:fd:6d:0c:e9:c8:
20:e3:e0:45:d0:61:66:f4:b0:d2:0a:6a:60:99:e3:06:95:50:
fd:29:e5:10:c9:f3:d7:5c:1e:12:99:3d:82:43:05:8e:27:c2:
f6:bb:19:4e:69:cc:9e:52:75:cc:9a:08:28:bb:c7:e4:ef:85:
37:16:67:d6:24:74:10:04:7d:fb:82:c9:68:6b:60:14:67:89:
49:aa:3a:b6:5a:3e:ca:87:42:82:b9:af:9c:3c:d4:b1:f8:de:
45:9e:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org