Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA661AA73A11EFAD2B4495762E951A.roa
File: 07FA661AA73A11EFAD2B4495762E951A.roa (raw, json)
Hash identifier: tV2niLKz2onLJHq9DKRqM4+XxYFjtXOokdmKCf0PtTM=
Subject key identifier: 2F:1F:CB:53:60:5B:14:44:1C:52:F6:12:11:4C:58:4F:9D:2E:FD:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA661AA73A11EFAD2B4495762E951A.roa
Signing time: Wed 20 Nov 2024 12:21:56 +0000
ROA not before: Wed 20 Nov 2024 12:21:52 +0000
ROA not after: Fri 29 Nov 2024 12:21:52 +0000
asID: 5065
IP address blocks: 154.81.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69527 (0x10f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:21:52 2024 GMT
Not After : Nov 29 12:21:52 2024 GMT
Subject: CN=673dd463-b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:6b:e1:61:a8:66:7d:7c:eb:45:43:b2:ac:
bb:bd:27:29:aa:cf:0e:d4:9c:18:6c:a3:ef:f6:2c:
48:49:3b:44:4b:d9:65:12:41:6c:94:2b:b0:46:f0:
85:8d:6b:e2:07:d9:20:6c:61:27:e3:8d:1b:ea:08:
73:d2:c1:26:da:5b:15:7d:35:e0:a8:69:c9:d8:14:
79:de:97:9f:55:10:56:b9:43:73:dc:6b:e1:74:df:
c8:ee:19:4e:cf:76:2c:6f:b8:2a:71:29:85:93:39:
41:fc:fa:b1:28:14:e0:46:2e:6c:02:70:d4:19:51:
52:63:5a:8d:3c:9a:1e:dd:b3:85:4f:68:3f:80:76:
9d:75:c0:06:ef:e2:5b:b1:0f:31:6a:fa:ae:08:72:
cd:64:dc:d3:73:1f:11:a6:2c:81:b6:42:d0:9b:87:
6a:a7:d8:f2:d4:96:2b:01:00:8d:36:7a:8e:a1:e2:
66:74:86:02:31:7c:a8:a1:30:c3:ab:eb:25:cf:3a:
bf:9a:8c:8c:28:6e:e0:bc:bd:8f:83:89:1e:3b:ae:
f5:89:4f:90:a8:5f:0c:87:b3:71:79:4d:97:73:a7:
d6:54:38:b8:69:48:6c:c1:53:a4:13:3d:ca:10:72:
2f:eb:00:9c:05:a5:63:6a:79:48:db:12:28:8f:71:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:CB:53:60:5B:14:44:1C:52:F6:12:11:4C:58:4F:9D:2E:FD:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA661AA73A11EFAD2B4495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:37:5b:91:45:40:62:f5:27:81:f1:a7:62:95:4b:42:45:a8:
e4:61:5b:1b:4e:f8:96:4a:15:a6:eb:a0:00:75:21:83:88:e0:
f2:b4:35:c9:7c:9f:4f:97:a4:b6:a2:22:d4:fd:0f:a8:72:13:
7d:b3:e0:3b:44:f2:99:5d:d3:2a:28:e0:ca:31:bf:26:0f:54:
e9:a2:0c:10:01:ec:06:3b:c5:28:f2:75:f4:5f:e1:a7:85:c4:
b8:bc:09:35:28:c1:58:4c:16:ab:9e:69:fc:36:65:a2:d8:97:
a1:d4:c4:1a:19:b4:23:c4:1f:f6:fe:cb:10:0e:b8:79:3c:b3:
52:1f:79:69:9e:85:1a:2d:69:2d:8f:8a:62:a8:85:7b:1b:00:
b2:26:95:4e:e6:12:2f:75:ba:90:7b:84:78:1b:5f:23:33:1e:
70:23:5c:a4:20:aa:40:0a:c1:c0:fa:bf:71:99:ca:d1:0d:a3:
03:70:d0:23:01:2c:02:4f:7b:79:56:b5:cf:62:4c:d0:50:da:
31:25:a2:96:cc:ac:2f:24:62:95:41:c3:fd:47:ce:54:46:aa:
2c:fb:20:a7:56:d6:ee:b0:4e:9f:1f:3b:31:52:41:ca:74:1c:
be:02:11:60:f5:b3:f7:d1:7a:3f:a5:6c:eb:8b:43:94:c0:61:
cc:83:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org