Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D4859F6800B11EF8C5EFD7C762E951A.roa
File: 6D4859F6800B11EF8C5EFD7C762E951A.roa (raw, json)
Hash identifier: gvCECUqGlvuE07cO3S7dV56EAJcMFMZ89flfoxGAmPw=
Subject key identifier: A5:91:2F:20:F0:CE:4B:14:2A:26:62:CD:36:5D:35:EE:7B:43:49:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F6B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D4859F6800B11EF8C5EFD7C762E951A.roa
Signing time: Tue 01 Oct 2024 15:40:04 +0000
ROA not before: Tue 01 Oct 2024 15:40:00 +0000
ROA not after: Mon 09 Dec 2024 15:40:00 +0000
asID: 25818
IP address blocks: 154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63155 (0xf6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 15:40:00 2024 GMT
Not After : Dec 9 15:40:00 2024 GMT
Subject: CN=66fc17d4-3222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:7f:0a:ee:bc:9a:2b:a4:a0:60:87:d7:21:
43:4e:68:28:84:5b:b8:e6:f8:32:bf:5e:7f:67:97:
14:82:0c:b4:8e:aa:ab:99:65:7a:dd:39:06:02:f3:
e1:8d:a0:73:5b:54:e7:26:ef:40:8f:47:f7:b2:f0:
01:93:41:d0:7b:72:f4:7b:b8:c9:aa:44:0e:8b:c7:
dc:05:64:64:9b:64:99:92:d8:13:4e:e0:14:45:f0:
7f:53:e1:29:a1:f7:0f:95:dd:41:11:4f:b5:f1:00:
b1:11:11:3d:d9:dd:9f:8c:9b:0c:b8:9e:f4:2a:8b:
97:ae:aa:64:7c:63:a8:d3:d6:06:38:0c:df:47:97:
64:5b:3d:95:85:d2:84:eb:69:e9:02:b8:af:00:05:
a2:1f:ca:7d:62:ca:66:8d:d3:09:76:a4:30:69:cb:
b3:22:0f:78:e3:68:10:08:a3:bb:a4:17:d1:72:55:
93:d2:55:d2:0f:f7:b4:c7:78:aa:d8:a1:63:82:3c:
59:73:ad:6f:09:5c:8f:c7:ed:80:20:da:1d:42:b7:
09:d7:59:03:f2:2a:d4:88:3a:b3:e3:c8:9c:9d:fc:
71:2d:b7:b9:3a:47:9f:fe:27:76:15:8b:ef:36:79:
7a:71:d9:f3:42:58:a3:77:cf:3a:c0:50:7e:85:d4:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:2F:20:F0:CE:4B:14:2A:26:62:CD:36:5D:35:EE:7B:43:49:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D4859F6800B11EF8C5EFD7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:79:fa:d0:85:e0:2e:09:4a:a5:9f:c5:08:f0:48:3a:1b:a7:
ba:6e:a0:a4:59:9e:7f:05:e7:f6:48:36:94:7e:fa:46:b0:b4:
87:ff:70:f2:5d:ef:8b:5f:6b:29:0b:1a:68:38:45:36:63:33:
d2:1a:57:64:5e:e6:17:2a:53:c4:10:a8:0a:88:fc:99:20:76:
b8:e9:12:05:5f:9e:71:42:29:2f:8f:73:d0:8d:d9:fc:f9:21:
92:33:f5:3b:8c:5a:a8:1f:89:09:77:4f:bb:6d:ab:1f:35:8c:
03:24:60:f7:7b:95:76:56:cd:73:d7:0b:2f:ba:bc:02:90:c3:
e5:c2:1c:fd:bb:ad:66:3c:41:68:41:99:8c:b9:65:87:25:c2:
fb:00:2b:5f:77:12:de:1f:cc:ed:45:12:97:d2:e3:c9:c8:5c:
ff:86:0b:62:5e:3d:a9:ba:f6:51:56:0f:e5:85:66:a2:f5:b5:
96:85:b2:f6:d3:a6:49:ae:b4:a2:08:21:41:07:1a:15:6f:a4:
de:69:7b:00:32:18:87:93:08:7b:b3:1d:20:61:75:05:75:d4:
75:36:f3:77:86:a2:fa:62:90:a3:3c:95:dd:d7:39:a5:1a:f5:
92:94:f2:a5:c2:6d:27:ab:b7:ab:d9:a8:4d:40:49:83:96:53:
66:a0:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:16 2024 by rpki-client on console-ams.rpki-client.org