Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCCBBEEA44111EFA1A60B67762E951A.roa
File: 6BCCBBEEA44111EFA1A60B67762E951A.roa (raw, json)
Hash identifier: lkMI33U4namJ4d4G9WcDg9K7spbu1d737K17nZ6lq5I=
Subject key identifier: 12:98:71:2F:2E:3F:77:1A:F9:7C:A1:3F:B8:3C:48:72:17:34:CB:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCCBBEEA44111EFA1A60B67762E951A.roa
Signing time: Sat 16 Nov 2024 17:37:16 +0000
ROA not before: Sat 16 Nov 2024 17:37:13 +0000
ROA not after: Sat 04 Apr 2026 17:37:13 +0000
asID: 55967
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69059 (0x10dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:37:13 2024 GMT
Not After : Apr 4 17:37:13 2026 GMT
Subject: CN=6738d84c-d312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:30:32:e6:1c:3c:a0:42:39:95:bc:e0:47:
6c:8a:00:54:4b:fb:9a:fa:79:bf:b5:d3:3d:0f:b1:
ee:33:cc:03:92:dc:87:e3:58:92:48:b7:21:28:19:
03:49:d3:dc:d4:3c:f6:bd:11:13:3b:30:e6:49:1c:
14:6d:1e:fe:36:54:6c:04:65:31:94:96:4b:3a:b7:
07:6f:37:a0:c8:63:77:75:a2:cc:c3:62:25:df:e7:
86:22:94:10:28:cd:af:ad:28:fd:95:4f:6a:66:ca:
a1:38:e8:e0:af:f9:95:fd:7f:b0:c0:f1:78:a6:18:
ad:4b:44:82:46:ea:83:93:f6:54:64:23:a1:e1:a6:
62:cb:ed:94:46:30:13:ca:ed:d5:44:0b:96:2b:32:
57:16:38:d2:3a:25:bc:c3:8b:fd:6d:3e:9b:3b:b6:
00:41:27:c1:80:9a:73:f7:16:57:84:81:e0:ac:4b:
df:41:6d:a2:fa:a6:1b:d6:58:fb:f7:70:8d:94:14:
74:94:f3:34:38:14:7a:28:a4:85:1a:b9:09:69:42:
cb:67:68:f6:ee:73:73:fc:1e:50:fb:ec:55:17:10:
2f:2c:da:5b:e8:52:84:c1:04:29:a9:79:a6:d8:63:
41:0e:95:66:0d:8c:6b:37:b6:ec:94:3d:f7:35:06:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:71:2F:2E:3F:77:1A:F9:7C:A1:3F:B8:3C:48:72:17:34:CB:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCCBBEEA44111EFA1A60B67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:1a:6c:db:4e:cf:10:2b:dd:b2:64:87:a2:fb:1a:96:c1:81:
b2:bf:67:3d:e9:b2:f9:95:fa:f5:b5:54:28:7c:5b:e7:20:33:
ad:2e:d7:ac:17:03:43:31:ba:28:e1:2a:8e:01:f9:0b:65:5c:
d2:cf:1c:20:38:a6:56:bb:bc:89:5e:49:f8:06:1a:3e:f9:35:
46:d7:c2:4b:0a:ee:3c:16:30:f0:92:e6:d6:ba:ce:d7:62:ab:
b1:e9:64:f3:51:fe:2f:de:6f:93:a6:ff:7e:df:c8:91:b8:de:
7c:90:a5:de:28:26:66:a0:b5:a2:36:58:ae:e4:0d:d5:74:9f:
94:9d:46:56:6c:1e:8d:2a:a1:fa:e4:9e:a1:90:e0:cf:f5:1c:
76:5d:38:da:df:fe:11:1b:cd:f2:b8:0e:5e:c2:7c:3d:64:84:
46:a3:1e:2e:ca:b6:65:55:7a:a0:42:81:a2:c8:7a:bd:76:e9:
4a:1e:34:1a:10:2a:89:5d:b0:dc:92:03:b1:c5:85:69:e9:d9:
34:4a:77:eb:f2:6e:fd:08:ae:1d:1d:f0:7f:09:ca:82:5b:a7:
36:9b:32:1a:b3:09:2f:46:14:d7:38:f5:8c:78:a0:6b:8b:93:
fc:d6:27:1d:41:79:11:12:39:04:39:a8:9e:58:d9:f6:54:ac:
28:42:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:15 2024 by rpki-client on console-ams.rpki-client.org