Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55FD008D3611EF8EDD3492762E951A.roa
File: 6B55FD008D3611EF8EDD3492762E951A.roa (raw, json)
Hash identifier: rM1YlroUfVl5TqmN2cQTTJ3Tv/kTrsqZboiayROzOXU=
Subject key identifier: 5C:81:34:57:09:FB:8B:9E:14:63:C5:8A:9A:17:9C:A9:19:D9:58:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55FD008D3611EF8EDD3492762E951A.roa
Signing time: Fri 18 Oct 2024 09:50:34 +0000
ROA not before: Fri 18 Oct 2024 09:50:31 +0000
ROA not after: Sat 04 Jan 2025 09:50:31 +0000
asID: 139471
IP address blocks: 154.213.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65481 (0xffc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 09:50:31 2024 GMT
Not After : Jan 4 09:50:31 2025 GMT
Subject: CN=67122f6a-8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:65:75:9c:ad:21:02:4d:db:be:d6:c0:b6:
c9:90:ab:ab:07:10:e2:2e:23:dc:57:d4:df:b6:6b:
2d:cb:4e:e8:a5:91:62:0a:57:89:e4:70:0e:94:a4:
a0:d1:5c:ca:15:eb:99:6d:31:43:0d:54:24:b0:de:
50:b3:85:fd:49:e4:bc:59:85:dd:c0:5d:f2:78:5a:
ac:26:64:8a:73:67:50:33:0b:0b:0f:c7:2b:ba:ad:
82:5d:25:50:4b:c4:f5:9c:77:25:96:c7:ec:c2:f3:
c4:7c:3b:8b:d1:1d:e7:f6:1d:73:e0:a0:8d:67:e3:
9d:2a:52:c5:4e:6d:62:43:0d:50:21:85:ef:8d:46:
cd:32:a2:f9:80:6f:0e:ed:0e:b2:77:09:55:ec:ad:
6d:37:6d:c6:ae:bf:c0:96:fb:7b:03:f0:84:b2:da:
f7:0b:11:2b:80:66:c9:3e:d4:91:7a:24:90:a7:e7:
36:0f:53:9e:1b:e3:39:79:34:1b:26:db:13:bd:7d:
df:cf:d4:f7:a1:e2:3b:f8:96:e3:75:d1:51:2b:a0:
09:8e:0b:c4:19:b9:35:7a:b3:90:28:12:e7:59:02:
78:c0:59:42:16:6d:dd:c6:00:68:19:fd:6c:3b:bc:
7b:5d:42:1f:8d:34:a6:50:9c:1e:83:d0:c8:b3:8c:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:34:57:09:FB:8B:9E:14:63:C5:8A:9A:17:9C:A9:19:D9:58:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55FD008D3611EF8EDD3492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.20.0/22
Signature Algorithm: sha256WithRSAEncryption
23:06:0c:20:d0:39:86:82:6f:7c:b4:7b:23:c9:89:10:6b:d2:
83:e2:ed:36:45:99:14:c5:ad:0a:42:69:a0:1a:67:bd:89:64:
b0:7a:40:c5:57:65:c0:32:05:2f:5d:e8:af:c3:6b:fa:33:19:
01:5b:f3:bb:71:0e:e8:57:21:10:12:6e:b7:06:0f:8d:8f:ce:
60:27:77:d4:39:58:19:e9:1e:51:38:81:1b:b6:2b:16:c5:9e:
e1:9d:67:ad:24:64:e7:f4:3d:b2:36:40:d5:e6:2d:b8:16:03:
22:14:4b:c8:27:53:bb:56:7c:7c:8c:5c:91:bd:02:9e:a1:c6:
74:48:96:43:35:09:06:f9:ec:ac:17:bd:26:f1:3f:a7:12:37:
ad:72:01:fd:9e:9f:56:0b:a1:4d:49:dc:78:ec:81:d9:7a:cd:
bf:a8:72:b9:48:44:a1:bf:54:e9:94:c6:7b:ef:50:c8:0a:d6:
34:a1:26:77:c8:c3:49:16:b0:f2:fd:38:2a:5f:e6:25:4b:7e:
af:83:39:e4:bf:35:e3:38:4d:5a:2c:01:d9:cf:7b:16:6e:6b:
64:ca:59:45:7f:32:a3:8b:a9:e3:ee:42:a6:ba:b7:03:17:51:
12:ec:cf:af:ad:22:9d:ff:2f:af:c5:34:8d:cb:11:cb:02:a9:
e8:38:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:26 2024 by rpki-client on console-ams.rpki-client.org