Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB638CA736611EFB1D347BF762E951A.roa
File: 9EB638CA736611EFB1D347BF762E951A.roa (raw, json)
Hash identifier: hgV34iF2ZNZhvL500vD6FEt/DQUELcJxwpwr/jYSAy4=
Subject key identifier: 2B:DE:B1:04:A8:F1:AE:77:F9:0F:35:65:9F:92:63:79:C6:E6:B6:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB638CA736611EFB1D347BF762E951A.roa
Signing time: Sun 15 Sep 2024 13:30:06 +0000
ROA not before: Sun 15 Sep 2024 13:30:02 +0000
ROA not after: Sat 30 Nov 2024 13:30:02 +0000
asID: 136970
IP address blocks: 154.197.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61204 (0xef14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:30:02 2024 GMT
Not After : Nov 30 13:30:02 2024 GMT
Subject: CN=66e6e15e-bc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:e9:6c:5a:96:8b:b9:8b:bd:99:26:a3:d7:
d4:25:da:25:d0:ee:24:2e:64:8f:85:2f:3d:bc:95:
7e:bb:d6:76:9e:72:e6:b6:96:48:4e:58:a8:50:09:
6b:a7:f7:fe:8b:3a:68:89:6b:bf:4f:c0:d3:70:a9:
ba:8a:6d:68:d8:cd:96:29:9f:4b:89:56:38:78:c2:
cc:0c:c2:d9:31:56:80:b9:01:21:e5:19:d3:7a:30:
70:4d:37:dd:40:48:5e:b0:9a:3a:ae:d1:cf:13:81:
f7:62:bd:dd:62:3e:d7:e9:0c:23:d4:79:88:df:66:
17:6b:5c:c7:1b:d5:69:4e:26:0f:3c:99:4d:c5:4f:
80:30:ac:0a:eb:d5:04:f2:e3:0e:c3:d5:bc:8b:21:
78:76:b3:5c:2e:a6:6a:e7:38:52:55:71:c0:b6:91:
22:96:8e:74:2b:c8:98:cb:35:4b:68:55:a5:d5:97:
72:bd:81:67:99:2a:a2:d1:31:c7:53:a7:61:40:e1:
63:53:8f:19:f3:62:f4:5b:72:8c:3a:41:0f:04:86:
44:a8:3a:9a:b8:7d:9a:7a:36:20:2c:b0:e6:8c:52:
56:c4:ba:80:dd:5e:29:f9:3e:03:51:d5:10:fc:d7:
91:16:4b:d1:b7:64:6e:bc:8d:c1:f6:31:ca:30:5c:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:B1:04:A8:F1:AE:77:F9:0F:35:65:9F:92:63:79:C6:E6:B6:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB638CA736611EFB1D347BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.6.0/24
Signature Algorithm: sha256WithRSAEncryption
72:70:28:0f:b8:c7:3e:4a:e1:2c:42:fa:f0:6e:0f:51:fd:1d:
37:ec:d2:f7:f3:e7:8f:7c:f2:b6:1f:60:3d:62:5a:4c:5a:f6:
79:55:7f:bc:55:51:17:1e:c4:7d:b7:7c:b5:43:23:d5:b9:05:
74:0e:4a:64:a5:33:25:a1:70:09:11:8e:ee:ce:ba:57:22:a7:
24:a6:02:03:2a:c3:70:da:1f:18:bd:e0:6b:d3:13:4b:fb:fc:
4a:3b:15:18:8c:63:c2:fe:b7:7a:a9:55:d4:d3:59:a6:50:1d:
6b:c8:e4:12:83:77:36:c0:b0:b9:9c:85:4d:11:0b:a9:e6:02:
c1:1d:ea:97:bc:f8:79:7e:22:ed:5f:4f:2e:f8:e1:03:3e:bc:
82:2b:0a:7f:92:6f:4e:20:c7:f3:4f:25:3d:28:51:39:db:a4:
6b:f4:ba:be:95:5f:aa:db:e3:00:c6:7f:64:9e:b7:f5:40:dc:
f0:10:d5:ff:b4:9e:47:0b:a9:b0:78:2c:ca:8e:af:83:a8:9b:
29:01:27:78:a8:4d:fd:d9:10:70:d6:8b:df:c7:5b:ca:1d:ff:
8c:33:57:7e:e8:75:c4:87:36:67:83:6b:9a:58:97:bf:b4:68:
7f:f0:81:49:70:1d:bc:36:90:51:06:71:23:df:51:d0:93:63:
40:b7:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org