Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C779B10AEC711EEBA4E0256775412E6.roa
File: 6C779B10AEC711EEBA4E0256775412E6.roa (raw, json)
Hash identifier: RatOW/kzK4Gdt3WNJ3bKmenweoQTqVndKI57VboKAQ0=
Subject key identifier: 44:9A:72:6B:BB:56:F2:76:E7:B9:E5:41:73:0E:B0:B6:2F:5F:55:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C779B10AEC711EEBA4E0256775412E6.roa
Signing time: Tue 09 Jan 2024 08:16:44 +0000
ROA not before: Tue 09 Jan 2024 08:16:40 +0000
ROA not after: Sat 11 Jan 2025 08:16:40 +0000
asID: 138995
IP address blocks: 154.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29403 (0x72db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 9 08:16:40 2024 GMT
Not After : Jan 11 08:16:40 2025 GMT
Subject: CN=659d00ec-113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:83:e3:89:8e:46:c6:7d:f1:32:37:04:c3:
41:64:8f:d2:c4:fa:b8:09:75:52:1f:55:b2:a6:40:
d1:01:47:41:3a:95:64:08:4c:0a:e7:e3:66:58:1e:
57:b6:8b:5b:3d:d7:c1:7e:b6:4b:a5:c6:99:b0:b4:
18:ee:a4:b2:9a:f1:b5:cf:5a:5b:23:e5:a0:3c:4b:
53:e0:3a:8f:20:0c:f6:8f:87:39:c0:18:94:07:a7:
4b:5c:62:56:a5:bb:81:49:bf:47:cb:f1:7d:71:58:
b7:c3:32:65:95:88:ab:81:b6:0e:e4:0c:86:e5:57:
ef:e4:65:b1:a4:c5:54:c7:f7:36:a0:c1:83:e8:8a:
57:b2:fb:02:6e:1a:ee:a0:53:d1:77:72:24:cc:6e:
60:0d:35:fd:8b:5b:dd:91:05:c7:45:00:f4:71:62:
61:66:57:46:ac:72:ea:2b:cc:ad:00:54:b4:16:2c:
9f:87:10:ff:07:50:2c:46:57:74:02:d6:21:49:36:
9c:3d:bf:f4:3f:e4:48:63:bf:d0:03:76:a0:9a:fa:
03:c5:a3:d4:cf:94:0a:3f:f6:42:5a:5e:9a:d6:7f:
17:a3:3a:e1:21:67:8f:07:ff:ad:b8:a6:e1:0d:31:
e1:d0:1f:49:26:e4:4b:a5:bc:d9:33:ee:bc:7c:95:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:72:6B:BB:56:F2:76:E7:B9:E5:41:73:0E:B0:B6:2F:5F:55:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C779B10AEC711EEBA4E0256775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0c:a4:74:f8:02:2f:17:47:4e:36:a5:54:66:60:3a:84:bd:
23:77:23:cf:89:23:5e:36:1b:38:1f:39:7e:47:3d:55:00:d7:
22:46:dc:b5:23:bd:3b:df:f3:12:c7:7b:70:e9:bd:89:a4:bc:
7e:59:26:80:95:1d:19:11:47:83:82:88:96:21:d4:77:be:f6:
57:dd:74:87:9f:01:c6:ff:55:91:e7:0d:a6:e3:ca:1c:b0:31:
95:fa:35:77:e8:f3:b5:b2:94:c2:be:63:69:c0:3b:5e:bc:84:
8a:d5:9d:93:a7:49:3a:e0:65:2f:63:dc:d2:c0:d2:9c:1f:42:
4b:7d:e5:ec:3f:42:7c:99:b4:12:c8:78:aa:44:95:1d:c6:0a:
65:23:25:78:bc:56:fc:39:9e:da:56:5a:2e:ea:7c:2a:c1:cc:
b0:c8:48:ac:12:50:8f:ff:fd:41:62:ec:a5:5e:40:af:01:22:
96:5c:8d:7e:e6:86:02:f4:e9:9d:81:3f:aa:64:9e:ad:e2:3d:
97:3d:58:89:b5:8d:39:e9:7f:50:0c:7b:17:a5:72:00:7d:df:
0b:b7:b5:3d:93:dc:5a:2c:3f:bb:82:6d:fa:1c:27:f5:04:e8:
95:89:4b:50:58:40:83:69:bd:be:04:56:5d:ea:c2:16:05:4c:
c3:e8:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org