Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3E346CD92511ED8E3E3E90F1222468.roa
File: 6A3E346CD92511ED8E3E3E90F1222468.roa (raw, json)
Hash identifier: f9WOcQZAfh+O2EWqRRFNKTwO6oSRSqU5dlsQNMQHmKg=
Subject key identifier: 49:75:55:17:E2:14:E3:23:94:0A:8A:A1:A0:FF:40:0B:A5:8E:4C:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3E346CD92511ED8E3E3E90F1222468.roa
Signing time: Wed 12 Apr 2023 11:30:24 +0000
ROA not before: Wed 12 Apr 2023 11:30:20 +0000
ROA not after: Mon 30 Dec 2024 11:30:20 +0000
asID: 328608
IP address blocks: 154.81.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7890 (0x1ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 11:30:20 2023 GMT
Not After : Dec 30 11:30:20 2024 GMT
Subject: CN=64369650-98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:6a:bb:bd:e0:54:23:c5:90:b9:ca:38:49:
99:a8:26:de:30:1b:a8:07:f3:dd:59:ef:c8:82:11:
e6:b1:b4:ea:c2:95:56:83:0f:6a:14:90:c6:84:95:
a5:12:06:39:fc:21:a4:af:5a:c1:34:96:97:38:b4:
8f:fc:3e:db:77:6b:d1:4e:5f:74:ca:09:f0:66:86:
84:fc:78:15:d5:e2:fb:72:20:8d:18:0c:15:8c:cf:
07:58:11:d9:ec:f2:d6:c5:a2:21:eb:c3:e7:80:18:
51:99:af:de:db:e5:7a:41:7a:a8:80:ce:d3:94:31:
4f:03:b8:8f:07:d9:96:9c:e7:0e:77:36:7c:e8:f7:
e7:04:d5:d3:6d:82:ab:12:68:78:99:85:5d:85:04:
79:f6:d7:85:c4:8b:c2:ec:35:77:84:4b:7d:01:0a:
70:7e:49:cf:09:1a:00:99:49:32:30:82:a2:e6:4a:
85:5b:23:f5:30:00:17:2d:2e:f7:6f:31:95:95:04:
26:79:3e:c9:80:03:23:dc:0b:87:85:2a:ee:35:f0:
d5:b5:eb:71:1f:25:05:4c:09:a2:50:b8:25:b5:7e:
7f:ba:02:31:a3:ec:c1:35:18:6e:ea:0e:62:7b:03:
9b:ef:a8:c9:41:8a:d0:a8:25:1f:08:91:b2:81:6e:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:55:17:E2:14:E3:23:94:0A:8A:A1:A0:FF:40:0B:A5:8E:4C:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3E346CD92511ED8E3E3E90F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:40:70:a4:5f:a1:91:92:cb:55:17:d8:c5:8e:68:49:49:08:
4b:67:1f:1c:a9:c6:0f:81:5e:c5:5c:8b:16:d6:7c:d7:ae:7a:
b9:b8:ab:f1:4d:79:38:61:16:44:64:14:bb:cf:24:43:41:cf:
80:12:d1:b9:66:f2:17:fb:1b:9a:7c:78:51:4d:aa:5f:f0:12:
d6:44:f2:18:21:13:a5:7e:c0:bb:f2:06:c3:f5:36:62:20:22:
81:84:d3:63:91:f0:56:e2:69:bc:da:7c:2a:27:c0:77:2b:2e:
d6:08:1b:c6:8c:c2:dd:12:a1:aa:73:81:a2:5f:e3:0f:19:01:
06:7a:26:23:71:77:94:e6:4a:09:5c:47:fa:96:b0:ac:98:b5:
23:47:23:9a:36:68:ca:73:1e:4f:a8:44:1f:01:68:b0:ca:01:
93:1c:b5:eb:2a:77:6d:6f:6c:52:59:93:da:5c:f2:73:cf:02:
77:60:b6:33:e5:cf:a4:97:02:7a:3e:cc:fe:d0:ec:7d:d6:18:
5a:0b:ca:cb:55:58:06:d2:c4:e1:89:fa:da:b4:53:bc:a2:fe:
2e:c7:ab:d7:58:17:56:0f:c1:55:2a:d0:22:25:5d:a9:4f:15:
ec:e0:5d:83:92:a8:9e:c4:33:f5:4b:28:48:f4:b1:2d:b7:d5:
3b:9d:04:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org