Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E03E932A72511EFB4C8B995762E951A.roa
File: 6E03E932A72511EFB4C8B995762E951A.roa (raw, json)
Hash identifier: z6R5ywOuaHaeeVhuaJwyP0UXVI0Y9slqh8ouAxeS4Lo=
Subject key identifier: BC:03:CC:BC:E4:A1:CA:C3:BB:FB:90:5C:3F:7B:D0:3D:25:C3:F5:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E03E932A72511EFB4C8B995762E951A.roa
Signing time: Wed 20 Nov 2024 09:54:27 +0000
ROA not before: Wed 20 Nov 2024 09:54:24 +0000
ROA not after: Sun 15 Dec 2024 09:54:24 +0000
asID: 214472
IP address blocks: 154.82.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69501 (0x10f7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:54:24 2024 GMT
Not After : Dec 15 09:54:24 2024 GMT
Subject: CN=673db1d3-4065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:25:48:43:42:dc:33:06:fb:1f:7a:a4:66:
fa:5c:cd:ba:58:c8:a3:9a:a3:07:bd:3d:27:70:0b:
bd:0b:a1:80:d1:74:b9:6a:af:af:8f:e6:74:5b:b9:
4f:81:35:1f:ea:76:d3:b6:44:e7:1a:9a:84:3a:16:
97:45:c6:90:1f:06:27:be:f0:1b:60:36:f7:84:9d:
15:50:41:72:72:c5:b3:bf:82:92:e7:18:3d:2e:a8:
7a:de:23:34:09:af:37:80:8f:3d:a7:d8:76:15:3c:
05:24:f1:75:4a:3b:d9:c9:16:03:a8:94:7f:86:10:
72:7e:09:0f:12:89:9e:ff:58:73:05:ca:46:b9:3d:
be:f1:07:9f:34:6d:e3:31:71:b5:e5:a4:9c:03:dc:
6f:c2:ab:b6:75:92:74:64:30:23:5e:12:53:90:a7:
4e:ec:85:d9:49:a3:e4:fd:f6:46:ba:96:23:12:60:
a1:4b:13:b7:18:d4:82:01:1b:b3:ab:7e:15:ef:87:
6c:60:60:10:25:c0:90:6c:2f:71:65:93:79:12:6a:
eb:22:53:84:4f:37:05:89:c8:44:1f:9d:36:3d:a4:
60:0e:b9:fc:96:fc:12:19:01:ec:82:7e:8c:fe:db:
3e:58:21:96:ea:aa:03:77:0f:f6:90:a9:29:d6:b4:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:CC:BC:E4:A1:CA:C3:BB:FB:90:5C:3F:7B:D0:3D:25:C3:F5:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E03E932A72511EFB4C8B995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.16.0/24
Signature Algorithm: sha256WithRSAEncryption
64:32:78:32:78:5a:48:bf:e3:a0:74:a9:fe:6d:78:32:58:06:
39:6d:ff:e4:61:10:7d:56:cb:d8:7c:c1:12:b9:ba:45:9a:79:
88:17:e8:02:5c:23:36:2b:b2:21:22:31:71:13:92:78:71:73:
77:32:4b:c5:db:bb:fd:c1:1f:c9:66:97:ee:cc:79:eb:79:3c:
7c:2d:6e:5c:c0:78:0d:ed:81:61:ec:11:0d:ae:ef:01:50:7f:
fd:85:ac:5b:97:47:0a:49:41:d5:08:d8:7a:8d:a5:46:e7:45:
58:95:3c:fb:a5:b6:d4:a9:21:65:d6:41:e9:88:61:98:07:40:
c1:45:c9:e5:cf:82:37:ee:06:54:f1:ff:db:f5:8d:e4:02:01:
14:af:61:af:3d:a4:40:27:91:95:5e:5e:47:7b:98:37:07:12:
63:0b:bd:2a:07:ea:f3:66:35:74:7d:b8:fc:0c:20:09:47:dd:
ff:f4:63:db:46:5a:c0:07:f6:87:9a:02:bb:a4:7a:80:18:5b:
a3:07:35:58:a7:80:29:8d:52:92:c9:97:2a:fd:64:f5:4d:b5:
d8:87:38:7e:56:eb:1e:68:16:c1:fd:25:cf:f4:6b:d1:b7:91:
9b:99:58:f2:cc:1a:ab:90:06:49:ac:09:bc:35:10:b5:80:6e:
07:5f:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:16 2024 by rpki-client on console-ams.rpki-client.org