Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5376C2A9AF11EFBCF6108F762E951A.roa
File: 6A5376C2A9AF11EFBCF6108F762E951A.roa (raw, json)
Hash identifier: i6xM9Ej6eo9myibE11M/wHV7VERirlSyXlc+5Y0nOH8=
Subject key identifier: 70:87:98:C7:43:44:BE:10:15:60:B1:90:45:41:28:72:E1:7E:66:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01119A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5376C2A9AF11EFBCF6108F762E951A.roa
Signing time: Sat 23 Nov 2024 15:27:14 +0000
ROA not before: Sat 23 Nov 2024 15:27:10 +0000
ROA not after: Thu 26 Dec 2024 15:27:10 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70042 (0x1119a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:27:10 2024 GMT
Not After : Dec 26 15:27:10 2024 GMT
Subject: CN=6741f452-e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:b2:80:02:72:6b:f2:de:2d:50:b0:b5:e9:
a6:60:5b:38:29:28:94:22:f9:f6:27:1a:e3:76:42:
18:c0:fe:25:02:8d:ae:87:78:6f:3e:ea:cf:5b:37:
0a:83:21:a8:a8:b4:f8:98:37:bd:71:08:ac:74:48:
5b:ae:fd:85:93:d5:fb:70:e9:59:fb:d8:c1:c5:30:
cf:39:d1:a4:73:67:45:57:21:07:c1:5e:42:25:5f:
19:cc:3f:29:40:57:6f:05:24:ec:d5:12:a6:18:db:
83:ed:30:7a:d4:b0:af:2b:24:e3:dd:53:20:31:ea:
f3:09:83:3d:da:94:89:ac:85:d9:e3:18:b4:1a:fc:
b4:97:36:38:83:d7:cf:ed:19:50:8d:11:22:9b:d2:
94:e8:e2:29:c5:c0:45:62:68:61:48:6f:f2:14:11:
6d:86:58:80:93:20:d3:e8:a6:33:83:2a:22:b3:3a:
85:63:4c:6a:25:0b:31:50:93:77:e8:6f:9c:9b:70:
91:e5:d5:47:9a:ea:4e:c6:24:18:4d:72:e7:3a:d3:
45:f3:13:7c:48:fe:ef:8f:97:6b:d7:a6:2f:16:bb:
8e:ec:cc:4d:4a:f4:98:d6:dc:a9:6e:e9:b9:47:a6:
17:f9:d7:ae:54:a2:ab:e9:66:1e:05:22:f2:86:f7:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:98:C7:43:44:BE:10:15:60:B1:90:45:41:28:72:E1:7E:66:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5376C2A9AF11EFBCF6108F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:51:7b:ed:f3:f2:94:8e:f6:9b:be:b8:f7:3d:e6:5a:8f:60:
28:6b:42:21:a8:9b:f4:68:55:cf:7e:83:55:86:91:df:56:26:
ac:6a:90:26:8f:61:89:99:2b:97:dd:e6:c4:d8:d7:00:1b:66:
a1:85:55:1a:34:02:2f:b3:b7:e9:f6:d9:b8:7a:6b:32:f8:ca:
35:84:72:35:0b:76:dc:66:f6:93:82:71:fd:be:79:98:d1:4f:
f5:b8:fe:22:40:a4:20:37:43:0d:a2:0d:23:51:a4:17:b4:40:
79:27:66:6c:ff:2b:af:d0:7d:15:73:32:c7:37:34:c3:b3:a6:
0a:41:dc:a7:b6:d2:bb:26:bc:17:28:34:eb:fa:e1:f4:00:63:
2c:67:92:7a:20:93:9f:37:3e:8a:d8:05:ee:c5:35:b8:5f:df:
85:98:7f:65:65:48:46:56:e0:b6:aa:01:7d:b2:d6:85:d9:17:
c2:d7:df:43:73:84:6b:4d:20:bb:51:b2:1d:72:8b:08:41:46:
10:30:fe:ef:81:da:2b:57:72:9e:67:b4:94:95:4c:ec:6e:9a:
85:6c:e3:93:ca:95:2a:02:0e:96:6a:3a:06:52:df:76:71:c3:
2b:fc:d4:dd:10:02:7e:c5:9d:c6:bb:06:f7:21:97:88:d4:9c:
3b:5d:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:15 2024 by rpki-client on console-ams.rpki-client.org