Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C79A950239D11EF8E4E38E97CDC24C2.roa
File: 6C79A950239D11EF8E4E38E97CDC24C2.roa (raw, json)
Hash identifier: EOvyFaqI7V42Eq1K1xf8BXK26q1qAiA8n4jstTU1hjo=
Subject key identifier: CA:7C:09:2E:58:86:87:EE:81:67:39:9A:C1:93:52:26:2C:C6:AF:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C05E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C79A950239D11EF8E4E38E97CDC24C2.roa
Signing time: Thu 06 Jun 2024 00:40:51 +0000
ROA not before: Thu 06 Jun 2024 00:00:47 +0000
ROA not after: Tue 06 May 2025 00:00:47 +0000
asID: 63199
IP address blocks: 154.204.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49246 (0xc05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 00:00:47 2024 GMT
Not After : May 6 00:00:47 2025 GMT
Subject: CN=66610593-aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:84:06:36:c5:b2:94:83:c4:69:58:a7:28:
33:e4:f7:84:7f:19:d4:8d:57:08:ae:18:03:b9:01:
6b:49:86:20:03:3f:77:54:30:ed:c9:27:26:5c:bf:
53:7d:73:2f:c0:3c:ae:5c:a2:03:7d:61:54:e6:af:
6c:67:22:83:5e:cc:8f:7d:a9:cc:fa:fd:55:7d:6a:
df:9f:39:a1:e9:95:43:10:be:70:dc:c8:a6:21:a9:
ab:2a:3c:05:bb:7b:6c:1c:9c:91:94:a0:57:a4:78:
d3:22:ba:e9:a9:4e:c9:1b:9a:bb:f5:8c:c8:50:c1:
11:40:99:1b:de:25:ae:49:4f:52:ac:8c:0b:bc:35:
9b:25:17:2d:91:e1:f3:4c:f9:cf:a4:d7:1e:e4:8a:
35:7f:b9:31:c3:6a:d6:1d:90:2f:a0:10:39:63:52:
9d:36:ec:17:68:81:51:ac:d5:5e:d0:ea:23:e0:64:
25:9f:d7:da:ff:41:41:94:98:4a:59:cd:6f:c9:dc:
7f:21:84:cd:c6:10:9e:0d:b0:eb:bd:94:ef:39:d5:
e1:e1:b4:e2:0e:8e:f0:da:5a:78:c9:2b:0a:0b:bf:
9b:e1:b5:2d:5c:57:fc:53:59:13:52:57:9c:f8:43:
0c:25:1f:1c:a7:1b:00:11:4d:05:81:b7:d6:60:5e:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:09:2E:58:86:87:EE:81:67:39:9A:C1:93:52:26:2C:C6:AF:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C79A950239D11EF8E4E38E97CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.36.0/24
Signature Algorithm: sha256WithRSAEncryption
51:22:86:93:e2:87:e8:d0:72:70:cd:9b:14:99:f3:02:ef:5d:
54:e8:ed:d6:2a:25:8b:22:c6:25:b5:6d:c4:07:1a:85:1f:14:
3d:3d:ff:8b:5b:27:5b:69:ea:09:98:24:4a:2b:6f:cc:c0:f2:
11:d4:7a:0e:4c:33:b5:f3:f9:c6:e7:b0:dd:9c:8e:12:1d:a1:
7b:9c:aa:22:5b:ff:86:26:47:dd:12:90:f7:80:48:ec:28:0f:
39:bf:a9:7e:5b:d8:d8:5f:0e:af:e9:79:91:de:1c:e2:83:f7:
10:31:d6:88:48:df:d4:f6:12:82:c2:cc:e6:10:ae:06:b4:01:
ba:0b:43:df:93:5a:b5:56:d3:0b:2c:3d:4b:d9:2f:1f:75:da:
0f:60:40:56:3b:a3:24:67:be:5f:7c:f1:21:ef:d3:dd:a7:69:
a7:2d:2f:ae:83:6c:dd:68:c7:0d:06:41:7d:6f:d4:b4:3b:c5:
c9:8f:9d:3d:5b:71:1d:9d:6a:d6:82:55:61:8c:94:2a:b7:0c:
57:49:df:52:19:dc:73:84:29:8c:9d:c8:7d:32:cd:79:43:4e:
88:c5:fb:6c:ce:2e:86:7c:22:a9:2b:33:a0:ef:a6:22:31:ba:
c9:c1:2d:71:62:02:51:11:89:4f:bd:f1:22:bb:ef:05:20:67:
75:19:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org