Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E2ED2DC911D11EF90028FA8762E951A.roa
File: 6E2ED2DC911D11EF90028FA8762E951A.roa (raw, json)
Hash identifier: uE++PGHA4A6uhC9eDf/e9hiKEwQC7kNDmF72eorOMFI=
Subject key identifier: 2A:10:83:4F:F6:47:20:BE:95:73:93:06:94:DD:B1:19:EC:C3:BA:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E2ED2DC911D11EF90028FA8762E951A.roa
Signing time: Wed 23 Oct 2024 09:01:46 +0000
ROA not before: Wed 23 Oct 2024 09:01:42 +0000
ROA not after: Mon 25 Nov 2024 09:01:42 +0000
asID: 135983
IP address blocks: 154.200.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65756 (0x100dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:01:42 2024 GMT
Not After : Nov 25 09:01:42 2024 GMT
Subject: CN=6718bb7a-b4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:3f:00:21:88:c6:8d:0f:b8:a6:0e:29:8b:
db:5c:7c:09:b4:6e:08:d0:d9:a0:f4:4f:f4:d8:9f:
c6:c5:f6:f4:1e:70:7c:ec:08:99:2f:84:a8:0f:e2:
d6:dd:2f:47:4a:ec:28:35:74:56:be:65:f8:b8:8a:
16:41:47:3f:07:0c:83:e5:60:09:c3:af:78:95:f0:
57:cb:1d:2b:23:43:3c:d5:cc:ba:d7:90:fe:8b:b1:
74:10:bb:1e:75:56:7e:db:a6:86:d4:97:b5:2b:fd:
0c:2f:08:67:c8:ce:a8:1c:71:ca:98:0f:66:1b:4b:
a6:32:ca:93:8e:a6:4c:58:55:5b:35:0a:62:03:86:
27:c7:1f:8a:35:31:50:45:e8:f0:e3:c0:08:6f:b3:
64:68:16:36:55:da:43:e2:a2:0a:3d:6e:a4:4f:8f:
34:0b:14:d5:02:b2:2b:25:be:35:0d:db:90:4d:4a:
c6:f6:ac:ce:a3:3c:78:eb:28:0f:0c:5d:2f:6f:72:
ac:82:d0:e6:d3:b4:42:0a:5c:eb:6c:93:07:19:54:
f3:b6:2a:9e:ba:6d:90:72:38:99:6f:aa:65:af:1d:
01:81:18:6d:73:5f:22:31:a2:39:0e:94:29:ae:e7:
bd:18:1b:4f:3f:96:9d:55:19:47:a3:f6:71:6a:a8:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:83:4F:F6:47:20:BE:95:73:93:06:94:DD:B1:19:EC:C3:BA:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E2ED2DC911D11EF90028FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
Signature Algorithm: sha256WithRSAEncryption
59:fe:e3:c8:87:a3:be:eb:a6:f0:df:df:a7:df:f0:89:6b:eb:
ef:1b:59:fa:8c:be:01:89:68:7f:51:9c:93:f4:97:7e:c7:99:
5f:7d:6d:1c:d5:47:d1:ef:f7:c3:a8:35:e4:23:92:0b:1a:95:
82:4e:3c:5e:ad:c8:12:47:75:10:ab:e7:c3:55:68:71:48:dc:
9f:19:3e:92:d8:8e:90:7e:bb:09:15:45:53:b2:14:38:86:ad:
ed:8a:57:5b:bf:d3:9b:84:1d:97:1b:f7:b7:74:fd:5a:d4:a0:
2f:29:2c:70:fb:3e:b0:0b:3a:e6:9d:ce:1f:28:67:62:22:02:
5e:d4:85:2b:98:a3:98:01:3d:62:6a:45:ea:09:f5:48:62:c8:
3b:e5:bc:5d:64:9a:3e:71:05:1e:7a:a9:0e:6c:98:48:54:92:
91:0f:08:db:93:b8:3c:22:f2:9a:e9:82:98:ee:ca:ee:90:11:
ea:9a:da:31:ab:4a:fe:79:cd:62:0a:f1:e6:a6:0e:2b:e9:54:
dc:8f:31:ec:43:b7:c3:3a:cd:a1:b1:7d:bb:66:32:a8:04:a0:
1a:a1:f2:26:52:32:7b:cd:6c:f5:a9:d2:76:d2:61:b7:95:10:
07:49:f8:6c:20:03:da:90:bd:88:3f:c4:f1:2f:c6:fa:f0:a0:
e9:12:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:47:56 2024 by rpki-client on console-ams.rpki-client.org