Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60AF1FE736811EF9E10F54C762E951A.roa
File: F60AF1FE736811EF9E10F54C762E951A.roa (raw, json)
Hash identifier: losyZFG2cuDTgKbY/EFOHrkiLuhRUSGyRG1j9yYE9Hg=
Subject key identifier: BE:B3:8E:EE:68:0C:E7:7F:66:1E:FC:BA:0C:2C:D2:6F:1B:E5:0E:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60AF1FE736811EF9E10F54C762E951A.roa
Signing time: Sun 15 Sep 2024 13:46:51 +0000
ROA not before: Sun 15 Sep 2024 13:46:46 +0000
ROA not after: Sat 30 Nov 2024 13:46:46 +0000
asID: 142403
IP address blocks: 154.92.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61234 (0xef32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:46:46 2024 GMT
Not After : Nov 30 13:46:46 2024 GMT
Subject: CN=66e6e54b-87bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:2b:d4:f7:0b:01:a5:72:8a:39:19:61:67:
39:59:dc:fb:67:13:49:ef:e0:68:f0:30:a5:bd:01:
73:a3:48:75:e9:3b:ac:74:7a:3c:bf:bd:3f:15:9a:
1a:35:5d:2d:e1:fd:ae:58:4a:bc:0a:67:3b:8e:aa:
4c:db:7b:8b:a7:25:f1:5b:3e:c0:26:c3:e2:3e:c1:
52:23:b1:b0:3e:5b:5a:0b:d3:d0:9d:1b:7a:6d:0a:
44:00:f4:6f:85:5a:78:a9:7e:6a:90:3c:e7:f2:09:
41:38:83:dc:4c:b4:74:80:34:c7:86:ad:51:7b:0f:
3d:7f:61:33:6b:ce:90:32:2e:43:41:29:1d:28:d8:
eb:0a:e2:37:be:a7:08:ea:aa:74:0f:95:ba:88:ff:
1c:1d:20:c2:8e:91:12:d3:34:e8:80:92:64:67:5c:
f9:14:16:e2:a6:31:a6:74:67:6e:22:7b:60:a2:3f:
3e:cb:73:e6:fe:6f:e0:53:7e:3a:1c:c0:ca:67:7b:
b7:ef:54:c6:c2:7a:1b:64:2a:4c:32:f9:57:ab:b0:
5d:81:a0:06:97:db:b5:5a:82:83:10:eb:03:57:9e:
de:28:2b:bd:15:51:cf:2b:4f:c4:f1:be:96:7a:55:
36:4a:6c:30:b3:15:60:1b:08:52:27:82:fe:b2:2b:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:8E:EE:68:0C:E7:7F:66:1E:FC:BA:0C:2C:D2:6F:1B:E5:0E:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60AF1FE736811EF9E10F54C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:89:0b:1a:28:51:3c:f3:36:ae:d1:76:63:06:79:3f:ad:a1:
32:8c:be:8b:dc:1c:f4:83:90:a3:a3:7f:66:a5:ac:96:4c:5d:
78:87:e8:9a:e6:db:ed:f3:6c:a2:ef:eb:83:e3:ea:31:ed:ce:
8c:1c:55:86:e1:79:d5:6d:80:6d:62:1d:0e:f1:23:71:88:8d:
5c:f5:b1:21:a5:f2:95:28:4a:ef:f2:9b:aa:90:fd:47:9a:1b:
f0:69:99:6c:e8:1d:a6:60:49:87:fd:b7:75:ff:17:e8:89:bc:
83:e2:44:e1:6c:78:79:3f:71:26:38:a8:34:1c:9d:48:19:b6:
24:9a:a3:6d:3f:b3:9e:20:55:18:57:63:b7:b6:01:19:6d:22:
e2:1d:15:ce:9e:73:04:42:bd:e7:e2:eb:02:9d:33:9e:4a:d8:
e0:d1:95:36:37:54:96:20:a4:36:eb:5f:82:56:26:f6:c2:a1:
eb:05:e0:63:89:15:24:9f:06:36:7a:93:23:70:d7:a9:01:90:
4e:c2:1c:f4:ea:42:f6:25:90:43:54:de:49:d3:ee:6e:f2:7f:
99:0b:e9:12:ce:62:bc:56:2f:02:cd:61:66:ab:5c:f1:8f:e9:
23:df:21:d7:b8:33:b3:fc:13:3b:54:19:02:c3:d8:3a:02:5e:
c5:29:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:35 2024 by rpki-client on console-ams.rpki-client.org