Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFC885274CF11EFA7669253762E951A.roa
File: 6BFC885274CF11EFA7669253762E951A.roa (raw, json)
Hash identifier: SIb5Ls7oin4DKuZMPnyIaYAnXBNuzTKyqZS+tU5MY2M=
Subject key identifier: B0:AA:9D:87:03:60:F2:C6:31:94:8E:C8:EC:1E:B7:7A:5F:70:DF:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F010
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFC885274CF11EFA7669253762E951A.roa
Signing time: Tue 17 Sep 2024 08:32:49 +0000
ROA not before: Tue 17 Sep 2024 08:32:46 +0000
ROA not after: Sat 30 Nov 2024 08:32:46 +0000
asID: 138152
IP address blocks: 154.94.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61456 (0xf010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:32:46 2024 GMT
Not After : Nov 30 08:32:46 2024 GMT
Subject: CN=66e93eb1-87f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:2f:e8:cf:1e:ef:96:f0:74:26:b8:2a:3e:
91:5f:4b:bb:96:2f:7f:99:91:14:0c:06:80:3d:c3:
ea:7f:1b:9f:97:6f:9f:31:f5:d3:8a:70:93:05:41:
36:df:a7:73:e6:8a:98:29:ae:43:78:1f:93:f4:d5:
06:fa:a4:c4:3e:7c:c6:68:48:c5:9f:3b:fb:cd:94:
4a:d1:92:ac:04:e2:1b:d3:84:3c:40:17:a4:a6:8e:
3c:05:3f:ec:fc:4b:57:a8:18:2c:57:07:42:91:65:
1a:8a:e6:61:b0:81:9f:a0:ca:a7:e4:86:cd:15:43:
4e:c8:e2:ab:dd:e2:ed:eb:8e:e6:cb:7e:11:93:8b:
b6:4e:d8:78:62:20:40:6f:b6:6d:1a:04:71:74:03:
af:5e:9c:ae:e9:d7:44:63:0d:12:50:7d:04:7b:d9:
b4:85:e5:f5:01:7e:31:63:db:55:71:3e:74:62:c4:
99:d5:9c:9c:aa:41:fc:04:11:c3:72:0d:f6:bd:ae:
ec:db:fa:78:c2:7d:62:b8:5a:c2:7f:f9:1f:78:69:
63:a6:f4:4d:70:67:b6:0e:99:8c:bc:03:a0:50:e5:
d3:fa:2e:5f:e9:9e:4c:90:c1:e8:b1:58:1e:21:58:
87:4a:79:03:de:1c:26:6d:f0:0b:30:8d:d2:9e:c4:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:9D:87:03:60:F2:C6:31:94:8E:C8:EC:1E:B7:7A:5F:70:DF:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BFC885274CF11EFA7669253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6e:da:60:34:65:58:3d:fd:82:82:51:77:35:b1:6f:52:34:
f6:d5:36:a1:5b:4d:22:aa:f3:d8:b6:f6:46:54:b1:a6:9c:4a:
af:72:da:a7:6e:80:51:83:0f:7f:dd:27:43:3b:c1:85:e5:35:
b3:fd:dd:54:ff:f9:d1:c3:d3:11:0c:5f:d2:0f:fb:4c:d5:05:
ca:6b:66:ca:92:1f:b7:97:29:95:64:86:12:34:4f:f2:79:de:
c1:94:18:db:1d:d0:71:55:98:5f:b2:3c:ee:c5:9c:41:53:bd:
1a:2d:a4:94:48:c2:71:f6:dd:b3:4a:d4:89:f6:82:6b:43:96:
a4:4c:8b:47:3d:42:af:a0:d5:92:c2:73:d1:b5:ea:89:b3:be:
b1:ca:e9:5a:b5:22:bb:3b:fe:c4:27:07:48:2e:80:21:73:79:
01:2b:b0:86:b2:6a:b0:0f:2a:bc:88:32:6d:ae:69:44:f1:2f:
3e:66:10:02:b3:1c:5d:b6:34:33:7f:4f:a4:ee:7b:55:20:b5:
d7:e3:f1:7f:af:98:dd:ab:71:cb:8b:73:2c:de:9b:e9:5b:7a:
43:c0:46:64:a9:f7:ac:f4:c3:4f:2d:fb:56:b5:fd:42:07:e0:
80:ec:50:04:4c:3c:2f:24:ee:cc:f2:3c:e8:d3:8a:31:53:d9:
7e:48:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org