Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDF46A2311111EEADCE42294AD9E6FC.roa
File: AFDF46A2311111EEADCE42294AD9E6FC.roa (raw, json)
Hash identifier: Dkq9ccKZTDlxrBeGBguDUNNl9fzjmMOmpv3nZDmX7+s=
Subject key identifier: 92:FB:A3:0C:20:48:02:D6:41:E6:C3:E4:75:EE:0B:73:1E:14:87:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 346F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDF46A2311111EEADCE42294AD9E6FC.roa
Signing time: Wed 02 Aug 2023 08:50:53 +0000
ROA not before: Wed 02 Aug 2023 08:50:49 +0000
ROA not after: Wed 07 Aug 2024 08:50:49 +0000
asID: 137962
IP address blocks: 154.209.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13423 (0x346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:50:49 2023 GMT
Not After : Aug 7 08:50:49 2024 GMT
Subject: CN=64ca18ed-1a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1a:63:34:b8:4f:e0:56:0c:d5:d2:52:09:dc:
ef:25:69:b5:cf:3f:f7:b9:c1:de:87:33:44:0f:5d:
59:ce:83:fc:0f:c7:c9:64:1c:09:89:1b:a6:85:d4:
65:04:b1:86:cf:30:de:07:10:c5:a3:19:df:a8:7b:
9a:d8:ed:ce:38:8a:86:b4:71:c3:ee:94:4a:db:a3:
20:34:58:0a:19:3e:cd:c0:9c:ff:13:3e:2f:5b:65:
20:c9:05:bb:1d:86:e0:f7:a6:d2:24:4f:38:e6:95:
f7:52:b1:38:cb:5c:5e:f2:96:91:d8:67:52:89:de:
8e:a3:08:b8:ac:3e:14:89:d1:79:c3:25:84:ae:84:
2c:46:d7:bf:47:c6:10:fe:9e:1a:99:31:67:76:68:
cc:17:00:af:d8:6d:20:5a:1d:e8:1b:f8:9a:33:81:
d5:55:9d:da:8d:21:f0:8d:36:33:f3:d6:f9:d0:b2:
b9:25:ee:01:33:f9:06:e3:65:a9:ad:8f:d8:5a:74:
f4:0e:9d:40:1e:76:cb:0f:14:0f:be:9b:30:33:83:
9b:c2:b9:e5:08:69:f2:af:b9:83:1e:2c:b7:af:26:
cb:fb:25:b3:b2:51:20:70:57:8e:dc:e3:46:ba:8f:
96:2f:eb:4c:6a:49:5e:c0:f7:b5:8b:f2:36:d4:27:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:A3:0C:20:48:02:D6:41:E6:C3:E4:75:EE:0B:73:1E:14:87:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDF46A2311111EEADCE42294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.1.0/24
Signature Algorithm: sha256WithRSAEncryption
30:66:2b:07:85:fb:3f:f0:06:fc:11:84:8e:12:16:bd:88:bc:
09:5c:2c:24:30:e5:9c:af:87:05:de:8c:67:af:85:dd:b4:20:
e3:1b:48:83:2b:57:fe:ca:68:1b:05:3a:3f:52:c8:40:a4:d0:
5d:f1:0d:36:06:c2:9f:a8:55:69:ea:af:0f:64:74:cb:0c:a6:
5f:6e:a2:4f:59:fc:69:ef:a4:38:1e:f6:ac:73:84:03:7d:ac:
34:c0:20:7c:fd:a7:21:98:9f:16:1b:2f:15:07:1e:8e:2d:61:
8c:8d:2c:76:d8:1b:1d:77:00:38:76:8f:2d:97:42:6c:63:23:
0b:78:6b:06:df:9b:b4:7b:d5:65:e9:cc:dd:67:72:e9:88:89:
de:e5:e4:6a:7b:bb:2d:ce:7c:53:c3:6e:03:cb:65:bf:d7:10:
5e:f6:1e:81:d7:14:7f:a3:fc:39:17:ee:9c:17:bd:e4:3f:3b:
d9:f8:e4:87:b5:08:c0:f1:68:20:71:2a:2a:7f:06:b4:3c:8d:
6d:f6:c6:ad:98:58:b0:4c:74:0b:1e:58:38:7b:68:d1:54:50:
fa:30:45:24:28:ed:3e:c5:e4:8b:34:ac:b5:ca:39:ce:94:a1:
16:c8:f5:ae:0d:b7:a5:96:19:32:54:6d:ff:81:55:27:1c:f7:
53:b4:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org