Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAA42C64A5111EFAECA06AA762E951A.roa
File: 6AAA42C64A5111EFAECA06AA762E951A.roa (raw, json)
Hash identifier: cg2eG4KHU6+56JewbVMbd5KaIHV9qVJXTrh5Lz0/niI=
Subject key identifier: 6D:4A:F2:4C:4B:9B:C9:A5:A3:EA:D0:4E:26:D3:F1:C4:9C:45:E2:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D69A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAA42C64A5111EFAECA06AA762E951A.roa
Signing time: Thu 25 Jul 2024 06:45:01 +0000
ROA not before: Thu 25 Jul 2024 06:44:58 +0000
ROA not after: Sun 23 Feb 2025 06:44:58 +0000
asID: 152920
IP address blocks: 154.208.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 07:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54938 (0xd69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 06:44:58 2024 GMT
Not After : Feb 23 06:44:58 2025 GMT
Subject: CN=66a1f46d-2b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:d0:42:a0:c3:af:9f:4e:22:42:69:de:32:
6c:eb:31:49:ec:a4:76:fc:23:31:d1:73:85:b6:c9:
8e:6e:f0:6d:b6:f7:4a:91:2c:0d:d1:46:aa:c5:df:
44:ce:af:13:49:5b:c9:8b:95:3c:34:55:71:e5:d0:
df:e0:38:ba:c2:85:e0:3a:98:6a:ee:3f:ec:75:eb:
44:3f:04:02:d5:23:76:d4:74:02:7e:9e:3f:07:cc:
29:b8:59:25:f9:51:e6:c0:35:51:3a:63:ca:86:ce:
25:80:51:bb:bc:c3:d8:0f:4c:71:21:89:5d:83:fa:
13:1d:e8:4a:8a:3c:df:6c:a7:96:92:4a:8b:a2:49:
1f:e9:3a:7f:1d:a2:03:b2:08:13:b7:b2:87:ae:92:
e4:51:57:3a:03:66:21:da:a1:2d:7a:48:34:d0:e8:
81:0d:99:e8:11:98:22:19:49:8d:c3:f2:9e:63:ac:
91:c0:ce:6f:e4:2d:0c:24:eb:93:2f:ff:38:db:b0:
37:6b:96:b4:31:61:f7:09:3c:42:4b:fd:10:66:67:
9b:35:ac:f0:0e:50:45:c2:ee:67:e0:68:6f:11:7b:
f7:e8:47:ff:a2:a6:83:f6:3c:06:4f:a5:8d:22:a0:
45:af:53:e3:53:ac:95:02:69:b1:aa:15:6a:e4:73:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4A:F2:4C:4B:9B:C9:A5:A3:EA:D0:4E:26:D3:F1:C4:9C:45:E2:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAA42C64A5111EFAECA06AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.140.0/22
Signature Algorithm: sha256WithRSAEncryption
09:89:38:c6:4d:78:ae:ef:50:21:ae:cc:d4:71:b7:82:c1:a9:
c7:fd:c6:54:dd:ac:a3:72:22:62:49:37:96:ff:0a:80:b6:b7:
57:8d:82:29:e1:52:fb:f1:10:e0:dc:c1:ab:bd:1f:22:c8:eb:
e2:64:6b:83:9c:4a:e6:be:69:00:dd:b8:53:cf:05:e4:e3:2a:
70:96:2c:1d:f7:e9:87:62:87:8d:c8:f2:11:37:6d:78:5c:fd:
a2:ea:e2:a7:5e:d7:f5:fb:dd:23:ca:29:4c:47:61:21:1d:a2:
2d:09:6b:79:dc:05:07:2d:34:b6:cd:0f:f2:60:50:2c:81:cd:
14:ad:42:f5:67:e2:e4:2a:4d:f9:7b:aa:3d:c3:15:d4:9a:ff:
5d:98:25:02:69:4a:8d:eb:5c:44:6d:6b:c7:85:8b:9f:eb:7e:
f8:0d:5a:d2:05:b9:7d:d7:79:4f:bf:69:bc:b1:a4:52:cf:51:
69:af:4b:b7:65:e1:85:3d:25:36:b5:a9:e2:4c:7a:e7:78:5c:
ef:fe:09:4b:be:36:2e:0a:0c:7d:d0:94:77:d6:f5:83:16:be:
b3:94:9b:d4:91:1e:d4:3e:ce:fb:a1:64:fd:a4:27:85:93:be:
92:0b:4d:1a:d8:d1:4e:b9:16:fb:31:3b:db:66:26:01:27:20:
4c:ea:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 08:46:40 2024 by rpki-client on console-fra.rpki-client.org