Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A0FC40B5C11EF849D04FB007001B1.roa
File: 6C8A0FC40B5C11EF849D04FB007001B1.roa (raw, json)
Hash identifier: 0R63Slp87r/ilS1bzjW5B0i4fKsXXckVwM+CoIa2/8s=
Subject key identifier: 6F:0D:6A:23:D9:19:50:96:2C:55:F7:17:9C:28:DD:3C:64:E0:A6:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A0FC40B5C11EF849D04FB007001B1.roa
Signing time: Mon 06 May 2024 03:55:06 +0000
ROA not before: Mon 06 May 2024 03:55:02 +0000
ROA not after: Tue 11 Jun 2024 03:55:02 +0000
asID: 63139
IP address blocks: 154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46318 (0xb4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:55:02 2024 GMT
Not After : Jun 11 03:55:02 2024 GMT
Subject: CN=6638549a-e0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:ea:90:52:b1:0e:90:07:64:68:3d:46:b1:
89:a9:6e:bc:e1:34:8d:47:45:78:31:be:ac:fa:11:
0f:91:9e:0d:8c:7a:9f:ed:f1:4d:5a:b5:01:2f:7d:
17:4f:97:f9:7f:f5:aa:27:5b:a3:5f:5c:71:ed:fe:
c0:6f:33:af:b2:f0:f3:85:16:82:03:df:ce:d2:5a:
71:da:d9:db:16:65:6d:5f:7c:2e:d3:15:7f:63:57:
1e:71:35:7a:a2:7d:5b:0d:82:35:7e:46:7b:30:a8:
ca:1c:cb:7c:fe:b8:67:4f:76:be:22:c8:20:9c:2a:
08:c6:5d:f4:a0:da:03:f5:8a:8b:ff:0e:1c:cc:d4:
48:84:94:36:20:cd:6f:f0:58:f4:8f:e5:51:6d:83:
cd:46:88:a7:57:7d:3e:63:4b:11:cb:29:d6:e6:20:
c8:1e:10:c1:b2:d6:0b:29:6a:ca:af:b0:d0:80:f8:
14:59:a9:11:38:52:88:51:6f:9b:1c:12:a6:3d:fa:
93:e0:f9:66:90:b6:51:c7:30:b0:a7:01:20:e9:20:
b8:bb:79:d7:3d:9a:de:89:6b:ef:a4:f9:04:e9:35:
4e:67:f6:17:26:3b:55:71:25:03:04:cf:4b:bd:27:
03:6d:2d:fe:2f:95:47:bb:16:ce:e0:e3:5a:92:9b:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:6A:23:D9:19:50:96:2C:55:F7:17:9C:28:DD:3C:64:E0:A6:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A0FC40B5C11EF849D04FB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f9:4e:b0:ae:9d:99:ce:7b:4f:f4:55:07:cf:ff:71:d5:06:
36:70:fe:fd:30:77:7e:e6:f8:7d:b9:52:69:32:d9:a7:c7:21:
2a:d6:97:68:66:9f:8d:99:70:67:72:b9:cc:e0:f0:88:47:ca:
f7:b5:53:fd:4a:ca:2e:d2:33:28:9e:7e:22:0c:4e:c5:d6:fc:
09:b3:ee:03:e0:99:58:34:e7:78:86:39:7b:5d:b1:5d:57:64:
dc:64:5a:d1:54:e3:12:27:98:5b:ad:01:27:43:e3:7f:ef:97:
50:89:e8:66:81:c7:7f:ca:bd:83:78:bb:fc:ba:49:00:d3:ca:
57:6d:52:0f:49:5e:03:79:d2:79:0b:02:73:bd:fe:4a:b9:40:
b7:4f:84:61:8f:fd:85:24:41:7a:38:8d:6d:7b:b5:b5:c9:7b:
fa:3c:8e:81:3f:18:43:cd:4f:ea:a8:d7:ad:25:8d:08:dc:e5:
ae:d3:62:8d:2a:d7:7c:79:80:4c:67:5e:fa:6f:b2:45:ea:f7:
e3:6e:08:82:66:f3:f7:b3:ed:22:5f:5e:1b:b3:0f:4a:40:1f:
02:6e:2e:75:c6:c3:68:87:e1:c3:60:20:06:b9:a7:a1:9a:e1:
8a:ce:3e:d3:41:79:1f:2f:12:ee:e7:1c:87:53:10:36:eb:df:
34:36:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:24 2024 by rpki-client on console-ams.rpki-client.org