Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD238E2A9AD11EF95920884762E951A.roa
File: 6FD238E2A9AD11EF95920884762E951A.roa (raw, json)
Hash identifier: 0i/h1L2M2RuYezVs/HZVo++hmqPfUNCOk1hfPIGBm8A=
Subject key identifier: 36:11:DD:65:85:CF:B6:42:48:8C:59:B2:D5:6C:B6:5B:DE:04:07:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011184
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD238E2A9AD11EF95920884762E951A.roa
Signing time: Sat 23 Nov 2024 15:13:04 +0000
ROA not before: Sat 23 Nov 2024 15:13:01 +0000
ROA not after: Wed 25 Dec 2024 15:13:01 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70020 (0x11184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:13:01 2024 GMT
Not After : Dec 25 15:13:01 2024 GMT
Subject: CN=6741f100-29a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:a2:28:78:67:7c:34:6e:1d:69:83:a0:59:
d6:8f:91:a8:49:12:bf:13:dd:ed:04:4e:71:3e:75:
71:2f:42:fa:b0:8e:30:49:09:bf:51:63:f9:dd:1b:
b7:35:ca:54:1a:b6:c0:21:82:63:88:ce:52:e0:ef:
4c:eb:8e:91:93:a0:a3:83:69:b4:c8:9c:f7:99:f2:
d8:72:69:69:8c:b3:73:7f:4c:e1:a1:20:ed:ba:bb:
04:97:15:0c:85:1e:2b:28:03:0d:b9:bf:40:08:ed:
a0:92:70:08:f2:8f:8d:45:6a:7f:c6:1a:c8:9a:7b:
23:4f:e7:b0:14:f4:e7:5c:16:bb:24:1a:a3:a9:cb:
91:66:75:bb:12:6e:d2:56:9e:23:ad:55:f2:35:9c:
22:58:7a:3f:99:ed:6b:53:71:8d:82:43:b3:7a:a9:
96:30:80:9b:15:19:33:19:6e:31:56:6b:b0:f2:31:
dc:6b:ae:d7:69:55:27:02:c9:1e:3b:84:eb:e0:7f:
75:34:c5:1c:02:7f:48:25:92:c8:77:51:3e:c3:cb:
18:b9:1b:33:40:a9:76:b8:d1:7f:20:43:3e:d3:a0:
b1:ae:b7:56:d3:37:1c:d7:d7:7e:18:ab:58:b0:b8:
1a:a7:51:dc:f1:45:5f:6b:e4:96:30:60:c7:31:7c:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:DD:65:85:CF:B6:42:48:8C:59:B2:D5:6C:B6:5B:DE:04:07:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD238E2A9AD11EF95920884762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b2:d1:96:f1:31:45:ed:32:1d:2e:19:2e:95:ad:41:a6:99:
4b:42:d1:8f:bd:df:df:f3:f6:4a:52:08:a5:8f:2e:44:de:51:
3f:ac:a0:82:3f:74:76:21:66:a1:4b:2a:5f:b4:a4:21:59:d0:
17:e0:86:11:6b:f9:6b:e2:f3:af:83:69:9b:b8:0d:72:03:0b:
9f:77:7a:c7:83:09:a9:83:3f:e1:bf:db:4f:e5:ba:8a:b2:78:
fa:8b:0c:1f:a3:59:c6:42:ce:c7:a9:ba:b9:6c:55:ee:e0:29:
f4:cb:5c:ed:c0:91:5b:06:74:b3:91:72:34:5a:21:8f:6b:0e:
ca:d0:3c:80:2d:68:93:47:c4:7c:62:56:cd:d2:a4:e7:69:4a:
37:1a:c4:9c:3c:b6:3f:3f:09:d0:44:8b:24:fa:70:5b:f4:f9:
75:cd:52:34:17:5c:45:d0:9b:8a:b3:27:5e:08:25:d6:31:42:
9d:d6:c2:e3:e8:9c:79:72:91:7c:58:ae:69:c3:d8:17:19:b3:
ad:fb:6f:2b:c3:d7:bd:35:1a:b9:c4:8c:7a:6d:23:0c:01:7d:
dd:fb:7d:83:4b:1c:6b:76:db:cb:31:48:8d:73:6f:ef:f1:62:
90:24:b1:e4:38:c7:2d:35:b0:2e:0d:dd:7b:ae:23:82:54:72:
b4:4c:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:16 2024 by rpki-client on console-ams.rpki-client.org