Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CCCB8C950E11EF8B9B0D7A762E951A.roa
File: 00CCCB8C950E11EF8B9B0D7A762E951A.roa (raw, json)
Hash identifier: eUSECbODVv9XJX7RjTuXjiUoz/V6e99OaQKnaiSzOgw=
Subject key identifier: 1E:DE:55:34:48:AB:25:DF:21:34:1B:94:DE:18:07:8F:7F:7E:1B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CCCB8C950E11EF8B9B0D7A762E951A.roa
Signing time: Mon 28 Oct 2024 09:21:25 +0000
ROA not before: Mon 28 Oct 2024 09:21:21 +0000
ROA not after: Wed 27 Nov 2024 09:21:21 +0000
asID: 44559
IP address blocks: 154.205.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66219 (0x102ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:21:21 2024 GMT
Not After : Nov 27 09:21:21 2024 GMT
Subject: CN=671f5795-8d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:52:6b:31:f6:d9:d7:95:18:4c:41:55:ff:
c2:6d:44:e9:99:84:2d:6b:5b:ec:c9:68:28:c0:cc:
96:ab:b3:8e:f3:f1:c6:bf:45:f2:fc:4d:d3:c6:c8:
65:aa:7d:20:7f:cb:59:c7:7c:ec:bc:a1:dd:dc:01:
1d:86:5a:33:0e:79:f0:a1:08:84:78:81:28:44:97:
a0:f3:52:a8:47:14:99:d7:f5:dd:a9:5f:2c:64:54:
4a:9b:2c:ad:19:70:3e:b0:0b:26:cd:48:b8:f5:8f:
38:a9:25:19:23:c6:36:0e:e0:aa:10:eb:46:37:84:
64:51:13:64:f2:fb:c5:42:9c:7f:33:74:b6:f5:3c:
f2:d6:df:7c:31:da:5d:cb:ca:46:85:bd:e9:9d:1f:
78:f9:4c:6e:8f:f5:08:ad:49:2f:13:2b:63:bd:64:
4c:b4:68:ee:ab:f4:49:c6:c8:ad:65:e6:15:a5:6c:
ac:ef:5c:e2:f9:b8:56:c7:12:ee:83:0b:dc:a6:80:
6c:15:02:88:a9:23:64:ef:d4:b4:9e:54:e5:1e:ea:
88:f0:74:66:27:6e:2e:c8:fa:c6:e0:60:f7:c6:52:
a1:cc:a4:39:fa:68:10:0a:43:c6:7b:35:ee:d7:bc:
d3:88:ea:0c:af:15:d8:94:65:eb:06:b6:e4:2b:e5:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:55:34:48:AB:25:DF:21:34:1B:94:DE:18:07:8F:7F:7E:1B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CCCB8C950E11EF8B9B0D7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.240.0/21
Signature Algorithm: sha256WithRSAEncryption
46:1f:5e:57:fa:2f:ab:89:4f:a0:99:2e:d8:0a:d7:68:eb:52:
c8:42:85:a6:f2:ab:2d:72:b4:9f:58:35:d3:ec:22:6b:00:6d:
04:cd:cd:10:a0:61:81:f6:20:b5:12:f6:07:02:98:53:f5:9e:
da:f0:f1:06:79:f2:d7:8a:47:df:fc:e6:ea:aa:6d:5f:86:92:
a2:7b:76:1a:a2:2b:b3:92:ed:eb:6c:0b:c8:2c:fa:2f:a4:58:
85:59:45:77:71:01:d1:a5:3d:d1:5d:9f:78:fc:03:ba:16:48:
25:5f:9c:52:cb:47:68:01:3e:1d:69:e9:22:d8:fd:5d:af:f3:
30:4f:e7:07:6d:45:9a:cf:90:18:29:d4:8e:a1:de:d0:5b:13:
a6:5b:c5:e3:2b:e5:d7:08:60:fb:d8:47:fd:5f:a2:d6:04:b4:
9f:3c:74:5e:46:ee:e8:8e:72:41:97:69:53:6a:f0:31:d7:57:
35:a0:9d:73:48:c1:07:53:fb:da:6f:36:47:04:18:ea:1b:fc:
9d:ae:5b:55:5c:79:7e:3c:98:70:70:75:dd:68:f3:0b:ed:08:
c4:60:96:ac:10:92:c9:ce:44:49:cf:c2:1a:c0:b6:30:d3:0c:
87:bb:51:69:29:10:2c:aa:c0:7a:8e:3e:81:31:e3:69:b4:53:
b8:75:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:26 2024 by rpki-client on console-fra.rpki-client.org