Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B67184808FC11EEB498BF3B4AD9E6FC.roa
File: 6B67184808FC11EEB498BF3B4AD9E6FC.roa (raw, json)
Hash identifier: EShKTTM9Jlln3ock/giUBMFH8YQ3qgu4Ug0o7MWJ4co=
Subject key identifier: 39:3E:6D:7B:C8:9F:07:F5:55:83:E2:DC:8A:6B:21:95:07:D2:6C:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2A52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B67184808FC11EEB498BF3B4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:37:52 +0000
ROA not before: Mon 12 Jun 2023 08:37:49 +0000
ROA not after: Fri 06 Sep 2024 08:37:49 +0000
asID: 131618
IP address blocks: 154.222.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10834 (0x2a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 08:37:49 2023 GMT
Not After : Sep 6 08:37:49 2024 GMT
Subject: CN=6486d960-17cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:68:02:01:40:72:38:1a:a9:44:fb:bf:2b:
e4:ed:fd:81:a8:39:f5:a8:1e:88:ec:63:05:92:fe:
27:fe:54:a6:5e:77:74:30:ae:ef:e8:ba:da:be:8b:
0f:5e:a0:08:a2:02:41:08:a1:f1:5b:f7:cb:4e:12:
fd:eb:44:e0:27:75:5f:5a:eb:cd:96:8b:ca:50:b6:
f5:82:6d:b8:9a:8b:d5:b4:7c:e1:32:32:bd:7e:63:
98:34:d8:ef:90:21:d3:47:e4:e5:e1:35:6e:62:e0:
83:b3:54:06:c4:0b:2b:3e:f7:cd:c6:98:ba:af:0a:
13:ef:17:fd:59:2d:f7:ca:52:bc:9c:c6:8f:d6:d2:
61:e5:b6:ba:22:0f:ff:af:d8:4b:57:eb:ad:56:8f:
c5:9d:3c:e2:25:3c:a5:79:84:17:60:97:e0:05:d1:
9f:ea:85:0e:e9:d7:69:a3:7e:b9:88:7e:60:48:d8:
b1:97:9c:9f:4a:b8:d8:08:3c:cb:70:b9:10:f6:a8:
12:5f:ba:f6:ae:6b:f3:e2:45:59:0a:57:d7:15:d9:
66:98:a9:92:6a:03:f9:ec:bb:a9:6e:40:fa:f2:05:
ed:e6:7f:da:ea:0c:fb:e2:de:31:8c:4b:76:70:55:
7a:85:b2:2d:a2:d3:d5:3a:8f:b0:38:c8:66:d1:1f:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:6D:7B:C8:9F:07:F5:55:83:E2:DC:8A:6B:21:95:07:D2:6C:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B67184808FC11EEB498BF3B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c0:24:27:3b:cb:ce:f3:91:8b:46:68:3b:9d:63:99:5c:5c:
4b:14:7a:60:f9:76:cc:29:0a:0f:45:20:8f:ec:2f:f1:64:51:
38:a6:8b:b1:b1:e3:46:6a:25:7b:1c:40:6b:19:f9:8b:aa:4e:
7c:88:5a:9a:cf:4d:07:79:7f:66:b8:8b:a8:61:7e:e5:2f:dc:
65:87:17:99:94:5b:f0:10:69:9f:a7:f7:32:b2:b1:4d:8c:28:
a8:05:e4:bc:27:84:bb:ea:dd:ec:f3:e3:30:e2:c9:48:97:ad:
11:2a:74:ef:c3:7e:f8:3e:e7:d9:5b:1c:36:8b:77:43:b4:16:
f3:6d:3f:6f:8f:7d:8c:7a:e4:a4:ea:2a:3d:40:f6:b2:59:d0:
a6:c2:3f:81:52:bf:43:05:34:e7:ad:6b:13:d6:b3:60:14:ad:
d6:a2:1a:bb:66:62:54:50:a3:06:36:a0:cb:3e:60:87:9f:c3:
95:54:41:0b:f0:72:57:35:d9:81:12:ec:61:00:60:bb:9f:a5:
0f:6c:b5:54:fe:cc:6b:c4:9e:ac:eb:49:ee:d7:82:42:be:f2:
0a:ce:80:2a:4f:8f:b9:03:3c:ca:57:7e:ce:f4:c1:1e:26:53:
ed:ee:69:09:af:6c:75:56:ad:19:80:33:a1:b6:1f:31:7f:11:
8e:d3:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org