Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CDA249A9411EFAD3E9852762E951A.roa
File: 043CDA249A9411EFAD3E9852762E951A.roa (raw, json)
Hash identifier: B/xKZ/KD4DlFlCKdFXseCU24/CKc9OO+ZA3lt+dXVZ8=
Subject key identifier: 06:D7:3E:AC:75:DE:26:9D:24:29:98:54:98:D5:24:48:78:6D:DF:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01068E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CDA249A9411EFAD3E9852762E951A.roa
Signing time: Mon 04 Nov 2024 10:03:19 +0000
ROA not before: Mon 04 Nov 2024 10:03:15 +0000
ROA not after: Mon 25 Nov 2024 10:03:15 +0000
asID: 44559
IP address blocks: 154.94.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67214 (0x1068e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 10:03:15 2024 GMT
Not After : Nov 25 10:03:15 2024 GMT
Subject: CN=67289be7-de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:5f:67:ef:aa:5f:4a:25:db:de:63:4f:86:
da:6b:4e:75:f0:2e:c5:cc:ca:9c:1b:a8:f3:26:b8:
92:04:8d:88:54:e8:cd:ea:38:43:14:58:2d:26:b3:
9d:86:73:bd:3f:05:db:b4:f7:5d:ce:26:d9:73:cc:
a1:e4:90:19:06:79:de:84:9c:88:a1:b0:b7:1e:8c:
32:42:f8:86:2a:8d:87:74:d9:3d:b8:4b:ad:e8:2b:
9b:03:0f:3f:7e:0f:08:6d:52:d7:02:7d:ce:96:f6:
de:4e:5e:51:39:4b:54:4f:f7:be:fe:62:22:9c:19:
11:58:81:cd:4a:0f:c8:79:39:01:64:7b:d7:a4:4f:
de:1d:5b:f2:2f:e2:18:16:91:87:32:d5:e2:2c:78:
10:38:3b:33:e0:9b:0c:53:41:43:63:a4:9b:ec:29:
5b:66:ea:71:70:6f:70:2f:1e:ab:c9:ed:7e:0c:dd:
74:00:16:59:83:6b:e4:b0:3b:67:db:cb:b2:38:d3:
a7:43:13:03:b1:91:81:8e:02:4d:17:7f:2d:ea:af:
fe:d5:35:3b:de:ec:d2:87:67:69:9e:fa:4d:d1:81:
db:8d:8e:44:64:af:df:b8:14:23:56:fc:21:e6:be:
21:21:50:6b:fc:a8:a4:06:ce:49:84:bb:c8:a1:78:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:3E:AC:75:DE:26:9D:24:29:98:54:98:D5:24:48:78:6D:DF:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CDA249A9411EFAD3E9852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:55:c1:4f:5e:94:65:55:dc:d4:b1:11:0f:9e:2d:28:39:f5:
b2:9c:ee:e7:15:6b:34:df:b0:4c:77:ef:25:fb:4c:23:96:0a:
93:29:2c:42:a5:7b:09:e0:81:8e:c2:9d:ac:35:67:c4:9e:01:
4f:af:2c:44:c8:53:a2:7d:97:b7:36:46:8a:88:41:c1:fd:f2:
74:c7:62:dd:03:67:6e:0a:4c:78:9c:61:bf:bf:fe:fe:f2:66:
2a:3b:a1:c7:e3:aa:27:aa:54:8c:ce:69:e2:ad:75:4f:b2:0c:
6a:79:2e:9b:84:d0:d6:7f:21:a3:08:b2:1a:1a:ce:d0:2c:78:
ed:fb:70:61:02:ff:3c:de:79:5b:50:65:71:9d:95:59:d4:ca:
70:8c:99:cc:4d:fc:aa:c8:38:70:28:8c:72:89:39:2a:27:a9:
d2:9e:ee:67:fe:c9:13:08:57:0d:b2:5b:e5:3a:c2:87:6a:da:
5c:d8:bb:61:3f:1e:bb:76:01:4a:a2:76:4e:4c:6c:ce:3a:1b:
c5:c5:ce:00:5b:19:c1:69:40:b0:6f:0a:56:b2:fe:91:5d:94:
6e:4f:1a:da:d4:5b:2f:7c:2f:7d:ea:d1:bc:3f:0c:df:3c:17:
0b:d5:bf:9a:1c:33:6b:0c:ef:11:77:0c:50:33:71:8c:e5:bc:
ce:3e:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org