Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6EC86873FD11EFA96A53AB762E951A.roa
File: 6C6EC86873FD11EFA96A53AB762E951A.roa (raw, json)
Hash identifier: FnUt5ZsQy80hWG/WXh4j7smVBQ5lQBOdEm7vT/B1FAA=
Subject key identifier: 91:8C:BC:F9:A9:39:B3:82:DB:3F:6E:A9:BD:A5:7B:9F:90:16:36:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6EC86873FD11EFA96A53AB762E951A.roa
Signing time: Mon 16 Sep 2024 07:29:36 +0000
ROA not before: Mon 16 Sep 2024 07:29:32 +0000
ROA not after: Sat 30 Nov 2024 07:29:32 +0000
asID: 138152
IP address blocks: 154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61313 (0xef81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:29:32 2024 GMT
Not After : Nov 30 07:29:32 2024 GMT
Subject: CN=66e7de5f-9a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:5b:2b:1b:e3:92:82:b2:fe:a2:bd:d8:aa:
17:88:10:d8:60:13:0e:c9:58:22:1d:60:ec:02:56:
e0:86:a0:e9:64:43:5e:7b:8e:6d:4a:14:bb:63:e3:
dd:11:ae:51:86:2d:07:7e:b8:85:9c:ff:05:fa:b4:
36:9a:79:ff:a0:6e:b6:74:6b:65:0f:c9:1f:37:75:
41:23:ef:42:88:b1:7d:55:ab:98:21:61:78:b4:68:
e0:db:bb:cd:3d:20:09:39:9b:21:d0:bf:1a:cb:f7:
d3:2c:28:17:04:d8:34:66:05:cf:43:71:40:4a:c4:
87:55:61:85:43:36:56:95:8c:a1:38:04:bb:5a:32:
0d:f3:2b:15:5d:22:20:b4:4c:03:01:ea:1f:a9:89:
7e:67:c7:09:38:98:da:d1:17:3d:25:bd:46:8b:bf:
e6:20:ed:9d:f6:15:ea:f2:f3:0f:97:e8:a8:ec:56:
7b:4b:44:02:f4:c9:82:59:01:45:38:83:70:54:08:
be:ef:eb:ea:cb:1d:a2:58:b9:44:1d:2b:61:b2:49:
51:8e:57:65:fa:8d:b5:3f:d5:dc:22:f0:5d:07:cc:
24:f0:a7:38:1e:56:dd:18:91:7b:e6:08:b3:2a:e2:
b2:07:6f:48:35:18:b4:bf:07:38:ed:d9:a9:da:92:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:BC:F9:A9:39:B3:82:DB:3F:6E:A9:BD:A5:7B:9F:90:16:36:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6EC86873FD11EFA96A53AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b3:c1:df:9d:4a:ab:e9:de:50:70:49:d5:5f:db:cb:e3:e3:
88:c2:d7:55:75:e3:0a:6d:86:85:5a:8c:85:73:cb:1c:fa:57:
4f:56:24:1d:d3:77:4f:59:28:2e:9a:1f:bf:6b:f1:ef:30:16:
e9:4a:49:1f:d0:49:b0:58:c4:86:c7:c4:0e:1d:c5:cd:ba:7c:
44:40:34:d3:74:08:9c:86:2e:c7:c8:bc:ef:3b:5f:66:ff:dd:
d7:59:e3:53:0c:5b:dc:c1:a6:40:4c:21:45:88:34:4e:3e:d6:
0c:01:b3:63:39:11:9d:f1:a8:38:94:d4:6f:93:ce:68:25:a0:
c9:d4:5f:48:c6:11:6a:d9:3d:90:0a:0e:d1:99:6d:50:cb:95:
d1:5f:c1:55:9b:12:0e:35:16:c7:2a:9a:d0:18:27:27:4a:4b:
9a:5e:92:f1:fd:fe:74:62:e7:7e:4f:d0:3e:d8:25:67:ce:28:
3a:99:1b:00:8c:dd:79:52:40:f0:cc:76:6e:68:97:b5:0e:ed:
1a:80:38:e7:35:25:af:91:22:bb:dc:69:4e:0e:71:85:bf:28:
1b:32:6f:7f:4c:7e:15:03:4a:f1:58:53:14:f4:b1:71:d7:5c:
8c:57:b6:22:12:72:49:23:f5:65:7e:e7:cb:52:1c:1e:08:aa:
8f:b8:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org