Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F04E2B729F7E11EFAFE71E49762E951A.roa
File: F04E2B729F7E11EFAFE71E49762E951A.roa (raw, json)
Hash identifier: RFGVPmE0GM8wKStFK30uZVaMeXiysUDoCakkB3agHbw=
Subject key identifier: 1E:38:ED:6B:AF:5A:84:5D:3F:E0:1C:8D:49:A1:BE:0F:5F:9D:2C:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F04E2B729F7E11EFAFE71E49762E951A.roa
Signing time: Sun 10 Nov 2024 16:15:02 +0000
ROA not before: Sun 10 Nov 2024 16:14:58 +0000
ROA not after: Fri 17 Oct 2025 16:14:58 +0000
asID: 152450
IP address blocks: 154.205.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68374 (0x10b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 16:14:58 2024 GMT
Not After : Oct 17 16:14:58 2025 GMT
Subject: CN=6730dc06-9ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:15:5d:c7:d0:58:1b:49:b7:82:4f:72:6b:7c:
85:90:9e:0a:6e:ba:c4:11:b0:a8:7e:78:7d:47:ea:
c7:8d:b5:de:77:b3:de:59:77:34:f3:e4:10:fa:5d:
05:77:5d:15:41:eb:c6:a4:d8:a7:33:a2:dc:4d:21:
14:cd:9d:dd:df:ab:17:fd:5f:74:6b:29:de:d8:fb:
9a:4a:42:73:20:65:3f:1d:f1:2b:b5:85:71:27:3e:
4e:e0:d9:f1:e1:20:7f:49:d5:b0:52:19:ad:e0:af:
eb:dc:22:bc:e5:6c:26:27:aa:6d:b7:69:83:f0:47:
58:09:3c:cd:7f:d4:3c:94:34:93:9e:5c:db:34:ee:
be:e9:78:c7:f3:c8:f8:41:40:f5:0a:9a:85:cc:f0:
ae:96:49:2d:32:ed:dd:4c:bd:05:0c:c4:2f:84:87:
c0:07:f0:20:15:b9:1d:d5:33:2c:19:b7:6e:4f:c8:
20:04:76:99:79:c0:12:9d:bd:2b:02:c2:63:9f:75:
a5:cf:76:eb:d2:dd:82:e8:eb:fe:03:fc:82:c9:de:
a4:50:0b:1b:f8:af:d3:ca:8f:20:aa:71:4a:fa:96:
39:02:98:f5:4a:30:61:e3:28:f3:e5:96:a1:2a:e8:
ea:aa:c0:01:82:95:73:a2:7e:02:ab:8e:55:00:ff:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:ED:6B:AF:5A:84:5D:3F:E0:1C:8D:49:A1:BE:0F:5F:9D:2C:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F04E2B729F7E11EFAFE71E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:69:75:ae:d2:cf:fa:d8:62:6a:35:db:f9:df:2b:58:2a:1e:
9a:8d:6b:a0:b3:32:3e:9f:09:20:e0:87:c2:77:3e:24:22:d0:
bb:82:a5:a4:38:bc:5f:bb:22:16:1e:85:ed:fb:ee:7e:65:2b:
1c:bb:ea:3f:4e:64:98:9d:54:65:08:aa:2d:05:32:03:20:61:
ad:50:b9:c9:73:17:3e:dd:f8:82:5a:2c:fd:7b:7f:8c:5f:0d:
63:02:0c:94:31:21:a0:38:cd:95:49:4e:de:2f:a4:ec:32:03:
2a:fc:73:81:ee:03:eb:9b:d3:b2:f2:66:07:42:02:5c:f1:4a:
9a:e0:f4:1b:ab:9a:46:8d:f9:33:30:57:df:3f:2c:be:19:fb:
c7:55:fa:fa:9c:52:69:99:88:59:a9:34:3c:4e:7b:91:5d:c7:
f8:9f:ce:39:88:70:5f:3f:c4:86:2b:85:81:0e:61:7c:f1:09:
17:a6:49:75:d9:58:f1:a7:5c:23:09:04:ba:28:90:c6:6d:ba:
53:aa:79:98:71:6c:b6:cd:46:44:7a:b2:e2:8d:55:29:a2:41:
cb:83:69:25:db:37:c0:53:c9:a1:9b:c2:62:e7:ae:90:e6:5e:
72:16:91:d2:2b:ff:5a:bd:46:eb:06:98:58:24:7a:3e:d7:35:
5a:6e:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:58 2024 by rpki-client on console-ams.rpki-client.org