Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6B70EE4767611EFACBDE5B2762E951A.roa
File: D6B70EE4767611EFACBDE5B2762E951A.roa (raw, json)
Hash identifier: W+XjTk3PzDHhkMKzNdsUI8zwr61jwZy5BsGUEors9ns=
Subject key identifier: AA:47:C6:AF:0B:5D:7C:F8:71:F4:21:11:84:5D:BD:E3:42:9D:DD:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F071
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6B70EE4767611EFACBDE5B2762E951A.roa
Signing time: Thu 19 Sep 2024 11:03:45 +0000
ROA not before: Thu 19 Sep 2024 11:03:42 +0000
ROA not after: Fri 08 Aug 2025 11:03:42 +0000
asID: 133861
IP address blocks: 154.204.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61553 (0xf071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 11:03:42 2024 GMT
Not After : Aug 8 11:03:42 2025 GMT
Subject: CN=66ec0511-20a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:cf:9b:fd:62:5a:96:a1:e3:87:cd:fb:7d:
54:9d:1b:07:2d:d7:59:3a:d8:14:04:65:1d:06:a6:
7a:f4:2a:ef:8c:9a:be:3e:88:af:b7:ea:ac:58:80:
20:c7:9f:27:be:54:7d:af:bc:14:af:ff:23:13:b6:
fa:12:59:a8:0f:01:d7:4a:3f:08:58:25:14:a8:8a:
59:66:9e:dc:4b:bc:ea:b3:73:c7:2b:6e:72:49:0f:
63:a5:a0:58:fa:8c:26:6e:97:61:4b:90:ea:aa:29:
e6:e6:b9:4b:c6:66:96:f6:f6:69:24:e4:89:33:15:
fa:31:98:87:36:db:4d:e5:96:b0:f6:cd:05:93:20:
08:01:05:92:bd:5b:d1:49:7e:71:ab:13:b2:96:0a:
16:77:43:49:44:53:5e:2d:73:eb:28:0e:90:de:56:
89:ac:32:82:d6:30:01:1c:5b:ab:b8:24:a0:ff:23:
5b:d5:a9:ad:67:17:9e:ca:94:ce:0e:d2:1f:e2:71:
ef:bc:17:23:99:ed:f4:ce:8f:4b:c8:fd:fb:e2:dd:
c2:d1:69:5f:5a:02:13:f3:13:45:2d:5e:59:b4:f3:
02:4c:7e:e8:d2:b3:3e:d4:7b:f5:ea:f8:96:d5:1c:
c1:09:aa:58:82:38:5c:ca:7d:8c:7c:3a:19:66:59:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:C6:AF:0B:5D:7C:F8:71:F4:21:11:84:5D:BD:E3:42:9D:DD:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6B70EE4767611EFACBDE5B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.63.0/24
Signature Algorithm: sha256WithRSAEncryption
05:71:71:b2:4b:9b:28:8e:6c:a3:8d:c6:6e:90:5e:d9:b1:c2:
59:dd:f4:41:31:a2:29:ce:5b:f8:67:77:76:d0:a3:75:e3:55:
98:48:f3:0a:5a:60:72:38:eb:fd:90:75:59:5b:c7:2b:ed:27:
7d:e6:ec:93:75:98:2d:08:13:f9:fc:65:ee:df:e5:f1:05:db:
4b:5b:ad:04:c9:63:ae:17:30:25:59:8d:a5:f6:a2:c4:b4:fa:
fb:3e:69:82:6a:86:78:2f:9a:0d:40:d3:e2:f9:8d:dd:34:32:
81:f6:8f:70:d4:ac:1e:00:00:d5:3e:c2:ea:9e:12:83:fe:64:
69:c7:9b:86:cd:de:fd:99:ac:ea:ce:42:5f:ba:ea:d3:d1:cc:
7b:ab:db:2d:c1:f6:a8:af:96:9b:7f:07:be:9a:87:52:b7:f1:
e9:50:ee:2e:c5:97:18:60:ec:5a:ab:a4:52:45:11:64:59:8e:
35:17:1e:dc:ee:8b:68:65:9c:13:12:a3:c5:7d:69:38:9c:ef:
da:fe:88:83:46:f7:41:d9:3c:f3:97:26:dd:af:c4:62:bc:3d:
07:dc:d5:4c:62:2a:2a:aa:03:f9:55:2b:86:c1:e8:66:9d:a1:
bd:b5:b2:68:46:6e:99:5c:25:b4:28:24:32:0b:c7:99:d6:9d:
7d:c0:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org