Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA314E495D911EFAF92067C762E951A.roa
File: 6CA314E495D911EFAF92067C762E951A.roa (raw, json)
Hash identifier: BpFtU9xPpnu+tRR/vf9IrBW8SrXIiD6K5s3HCjNRpBU=
Subject key identifier: 0D:6D:DF:D6:81:0B:3D:20:60:CC:7D:C8:A2:00:A4:D1:4E:B5:94:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA314E495D911EFAF92067C762E951A.roa
Signing time: Tue 29 Oct 2024 09:37:34 +0000
ROA not before: Tue 29 Oct 2024 09:37:30 +0000
ROA not after: Tue 30 Sep 2025 09:37:30 +0000
asID: 139805
IP address blocks: 154.210.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66438 (0x10386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:37:30 2024 GMT
Not After : Sep 30 09:37:30 2025 GMT
Subject: CN=6720acdd-75b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:be:5e:96:ef:14:67:82:bd:43:21:fa:dd:
27:96:c7:9b:59:25:12:e4:6c:69:55:32:f4:1f:5a:
3d:12:41:2f:8b:07:ab:c5:64:a6:9f:da:49:03:c3:
8a:99:90:b8:37:c7:40:ce:9c:f9:2a:c6:18:50:99:
d1:6d:89:7e:cf:28:85:aa:ad:91:fc:15:17:1a:ab:
03:9a:54:43:85:cd:80:7c:8d:9a:22:13:50:81:41:
e9:8d:03:ec:c2:24:9d:f9:29:6c:01:c6:38:fd:0d:
37:87:2f:87:9e:3d:48:bb:65:b0:33:e5:4c:39:ae:
ec:2f:df:30:39:ab:f4:bf:a2:be:8b:26:6c:3c:9f:
da:77:1a:d2:bd:2e:25:c1:11:dc:31:d3:e4:5b:80:
47:b8:c5:33:dd:8e:ce:be:83:5c:59:09:26:0a:f4:
4f:0e:df:e8:e4:a9:80:e9:de:5f:09:c6:5b:4f:29:
21:49:f5:b2:16:8e:78:67:f7:9a:89:98:eb:cc:38:
f3:fb:03:3c:76:82:a6:77:df:a6:c6:a0:74:1f:18:
72:bf:8c:60:55:69:54:86:60:11:85:a1:5b:ae:eb:
12:a9:89:fa:aa:84:c9:aa:84:da:25:c0:3b:da:ef:
3b:2a:50:f5:b6:46:04:55:81:f6:08:1d:7c:08:28:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:DF:D6:81:0B:3D:20:60:CC:7D:C8:A2:00:A4:D1:4E:B5:94:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA314E495D911EFAF92067C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.1.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fe:43:c5:93:f0:f9:28:42:6e:60:2d:6f:4c:1c:2b:75:88:
fc:32:a4:98:60:dd:9a:bc:f6:ef:11:e7:2a:a8:e5:b2:15:56:
b6:f2:70:8d:df:96:0c:5b:d7:fc:ff:3a:5c:de:94:bc:96:06:
36:83:ef:72:3b:13:52:39:c4:ac:5f:02:d3:ba:6e:a4:1d:fe:
d1:49:cc:e1:4c:ff:f0:fb:05:30:be:c5:4a:02:0e:ab:e3:64:
33:ab:b5:c8:69:08:ad:11:8d:90:16:b1:91:c7:c4:b6:d7:e5:
36:51:63:92:bb:8f:c4:1b:b8:75:65:3d:70:12:bd:4d:41:4c:
81:ee:dc:ab:6d:81:9c:cc:ab:e9:6c:33:c2:0d:7b:61:22:38:
23:b8:a8:74:e0:6f:4f:5c:cd:66:d9:db:2e:2b:45:00:cc:42:
37:17:ed:76:86:51:47:2d:71:65:0c:90:c0:2d:a4:b5:f2:a6:
42:e4:5a:ee:76:e9:5b:fb:a0:ae:93:85:95:a7:97:f4:be:3d:
31:63:fa:b6:7c:bb:11:68:f4:95:fc:2c:de:69:44:67:4f:8f:
c0:4c:e3:5d:0a:d7:d3:04:1f:3e:79:09:94:c6:94:ce:41:a6:
0e:29:97:b4:cd:32:d9:e4:4a:ec:ff:d6:05:b9:49:93:24:07:
5f:ff:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org