Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6601F68EB5911EEA9E6D4AD775412E6.roa
File: F6601F68EB5911EEA9E6D4AD775412E6.roa (raw, json)
Hash identifier: sMvbVQ93UlNlx9dzBLO9WV0fuZoYVzGZnCDbsS7ntmU=
Subject key identifier: 6F:75:56:A9:2B:7B:35:78:AE:62:D8:87:39:15:7E:33:C1:F9:06:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6601F68EB5911EEA9E6D4AD775412E6.roa
Signing time: Tue 26 Mar 2024 10:16:51 +0000
ROA not before: Tue 26 Mar 2024 10:16:48 +0000
ROA not after: Fri 03 May 2024 10:16:48 +0000
asID: 328608
IP address blocks: 154.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42670 (0xa6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 26 10:16:48 2024 GMT
Not After : May 3 10:16:48 2024 GMT
Subject: CN=6602a093-b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:16:91:8f:19:0f:73:60:38:b0:27:b8:82:
6d:21:bf:0d:ca:4b:1a:67:e6:ce:a6:2f:6b:0e:09:
3d:eb:a9:08:c1:bc:b2:71:52:c1:f5:66:1e:2c:43:
31:e9:cc:24:2b:ca:0b:cd:11:59:c2:d6:30:53:70:
77:c7:cc:0a:46:94:58:ce:9c:5d:be:e7:fe:94:a4:
33:e1:c9:91:03:a1:68:0c:41:e8:4f:f5:e6:87:0b:
c8:78:08:8c:2e:2a:ba:27:14:12:ea:fe:90:4a:10:
60:41:3d:ed:31:fe:78:eb:1c:68:d5:e3:ff:c9:6e:
8c:c1:a5:2e:c0:3f:90:18:8e:5f:09:d1:0c:8e:54:
f6:f7:61:c5:cd:cf:02:86:6a:b3:eb:7b:a0:e6:ae:
33:c5:44:90:80:99:86:3e:95:15:8d:c8:99:d3:01:
89:6b:ab:71:7e:b6:72:cd:c9:c4:b3:56:31:44:4d:
a0:6a:7b:4e:c6:a8:e2:5a:b8:3d:a5:22:4d:6c:51:
94:ca:77:75:28:f8:e9:f4:91:ac:c6:b7:30:b3:6a:
a0:83:3f:31:91:36:4b:a2:fc:24:c6:a5:a1:b0:40:
64:65:87:50:60:88:89:b3:a9:b0:9f:8e:c5:d4:ba:
4a:45:d3:7e:de:c4:99:39:3f:36:6a:0e:b9:a8:b8:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:56:A9:2B:7B:35:78:AE:62:D8:87:39:15:7E:33:C1:F9:06:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6601F68EB5911EEA9E6D4AD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d9:c1:98:1d:3b:9c:c0:a0:cd:ba:a2:13:da:f8:a1:b6:a4:
56:6f:14:bf:cb:e4:5f:1d:f5:3a:db:3e:97:96:cc:01:da:7d:
6d:83:56:06:cb:a5:a6:1a:c0:0d:76:19:3f:78:fc:84:41:c6:
fe:20:3f:42:cf:1e:b9:51:cb:c8:b1:5c:a9:49:96:9e:ed:e6:
b5:5d:52:64:d7:a0:67:09:34:ad:ea:13:1d:ce:ba:f4:73:13:
33:a7:98:73:76:50:59:6a:2f:85:96:75:e3:9b:d1:c3:d2:c6:
18:b1:58:92:0c:dd:9f:a3:f4:65:bc:a0:1e:95:51:30:b5:8f:
4b:d4:6f:fa:c1:30:81:a0:d7:bc:32:d0:a8:f3:3f:cf:ba:61:
99:fb:53:d5:7b:f9:53:b3:e6:14:60:5d:cb:48:73:7d:21:3d:
e8:b9:11:9a:56:6d:62:e5:5c:81:90:fe:c4:65:eb:7b:ff:0b:
38:33:6c:02:e1:10:e1:74:d9:a3:df:ec:9d:23:04:2e:c7:9a:
ce:a8:0a:22:76:07:61:69:54:0b:9f:6a:06:a2:63:76:b3:a6:
1c:9f:fc:f7:1e:c2:b0:e0:6a:11:1d:37:91:87:e8:79:5e:5a:
38:e1:2a:0d:6b:86:00:81:25:e1:f4:77:63:55:de:94:e1:d2:
6f:1c:a8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:25:09 2024 by rpki-client on console-ams.rpki-client.org