Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06520C0A74CC11EFA8F207BE762E951A.roa
File: 06520C0A74CC11EFA8F207BE762E951A.roa (raw, json)
Hash identifier: uzfIBgwPvXJkQSK/y4MxF8YeGJJjr4oUYoukMN0cVSE=
Subject key identifier: 7E:3E:8C:56:87:84:8E:8A:B4:F1:32:27:98:45:63:9B:7F:28:91:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06520C0A74CC11EFA8F207BE762E951A.roa
Signing time: Tue 17 Sep 2024 08:08:30 +0000
ROA not before: Tue 17 Sep 2024 08:08:27 +0000
ROA not after: Sat 30 Nov 2024 08:08:27 +0000
asID: 142403
IP address blocks: 154.221.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61414 (0xefe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:08:27 2024 GMT
Not After : Nov 30 08:08:27 2024 GMT
Subject: CN=66e938fe-1d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:97:e9:46:09:23:72:33:23:ef:22:84:02:
4c:56:fc:7f:17:98:d4:be:44:43:e4:7d:8a:9b:ec:
31:22:81:30:33:29:0d:e9:7a:c0:3a:0a:28:52:c0:
62:56:5e:88:e4:51:19:01:b8:e5:29:1c:fc:ab:32:
35:e9:fd:8b:68:58:0b:46:c5:37:6b:3c:30:d6:51:
68:15:ec:b3:76:05:46:42:f1:0e:44:ab:c8:6c:43:
d4:f3:66:22:ef:1f:cd:7d:19:43:9c:77:92:d0:d3:
36:3f:c8:1e:b2:48:20:a2:6a:e2:7a:4f:cf:ee:ff:
22:8b:b2:ec:9a:75:07:ff:b0:20:14:1c:8e:fd:f9:
8c:aa:0a:dc:5e:64:70:56:0e:9d:6c:4c:aa:b6:fd:
e5:f1:21:13:0f:09:94:f4:c7:a3:c1:e4:dd:b7:a1:
f4:1c:a6:f9:7e:d9:86:00:f4:14:6c:0f:05:f9:09:
3f:ec:d5:a9:5b:f1:a0:99:79:95:91:f0:f9:e0:1c:
6b:7a:d6:65:d0:09:dc:3e:d5:16:8b:65:27:30:da:
34:43:2e:74:65:7f:90:a0:7a:7a:d1:40:7e:5e:a4:
84:fd:b1:d7:66:d2:ba:b7:92:93:de:f2:76:f9:0b:
10:5c:de:37:30:74:78:4c:3c:b7:e2:2e:27:4c:31:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:8C:56:87:84:8E:8A:B4:F1:32:27:98:45:63:9B:7F:28:91:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06520C0A74CC11EFA8F207BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:16:26:8c:c0:76:22:b9:82:17:41:fe:78:d0:17:61:19:67:
5f:95:8c:e5:57:98:13:e8:c2:29:bc:e0:83:ba:4d:e4:6f:5f:
0b:fd:41:50:a7:ce:ee:e1:bc:fe:63:c4:eb:4e:72:24:3c:e2:
c7:23:de:e2:ce:73:1a:1c:32:a1:d3:a2:b8:29:d3:32:f4:e7:
b7:1f:5a:08:69:42:89:0e:7b:09:92:9f:bb:2e:5d:2a:b6:8b:
46:ab:de:04:92:ed:82:ea:75:d1:d5:7b:45:da:d8:49:9b:d5:
02:49:92:41:1c:d5:ee:67:2f:e5:88:0b:f1:c2:5f:d7:3f:af:
5c:7c:7e:37:66:90:61:67:db:0a:6a:c9:8f:c5:66:a8:0c:22:
30:c9:77:d6:f2:be:45:0b:69:77:f4:0a:79:70:80:8d:68:1b:
3f:00:3a:d3:f7:85:04:12:a7:b0:18:3b:83:dc:2e:ba:34:ef:
d4:95:f6:74:2b:fa:50:87:e2:93:15:ab:22:0b:10:31:f7:f4:
0c:f6:74:8e:21:03:6b:ef:67:8a:d3:6b:b0:a8:da:39:4e:e3:
e3:4b:6a:4a:1b:75:d1:69:db:94:3e:0a:69:ee:cd:e4:d2:bf:
af:56:85:e3:f9:73:e4:98:a8:a2:51:59:c9:04:4a:66:b4:ec:
09:3d:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:58 2024 by rpki-client on console-fra.rpki-client.org