Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2004C4B6A0E211EFAA521984762E951A.roa
File: 2004C4B6A0E211EFAA521984762E951A.roa (raw, json)
Hash identifier: t8QkJ4oZjlfknokgu9Ua+/QsU1Ah161giiY5MbVXHqg=
Subject key identifier: 35:B2:7B:61:2A:C7:7C:44:24:D7:A5:D3:B2:87:18:AA:C9:D3:AA:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2004C4B6A0E211EFAA521984762E951A.roa
Signing time: Tue 12 Nov 2024 10:37:33 +0000
ROA not before: Tue 12 Nov 2024 10:37:29 +0000
ROA not after: Fri 22 Nov 2024 10:37:29 +0000
asID: 5065
IP address blocks: 154.95.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68682 (0x10c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:37:29 2024 GMT
Not After : Nov 22 10:37:29 2024 GMT
Subject: CN=67332fed-14c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:28:50:a2:9e:d8:6e:90:b4:a7:af:62:8d:
c8:ad:45:1e:b5:cd:79:50:8b:69:cb:84:98:ef:86:
b4:aa:66:37:b8:b3:22:d7:c4:a9:3e:00:73:89:a6:
26:29:d2:5f:c6:b1:5e:31:13:61:5e:f7:ce:1d:21:
05:4e:0c:06:fe:f9:7b:87:8d:0b:3a:6b:ed:dd:4d:
27:75:90:fb:b0:9b:92:a8:b5:8c:27:8a:40:1f:e6:
89:4e:f0:6c:de:a6:77:a5:e3:46:ad:9d:e4:fb:cf:
d1:55:46:76:90:68:b2:82:88:e7:9c:3c:f4:37:49:
30:74:92:e6:f9:66:31:e2:54:a6:a3:62:00:c3:6b:
53:a0:1c:6a:f5:ee:9d:da:c6:e5:d8:6d:e4:f4:01:
bd:8d:3b:a0:cc:3e:3c:86:48:02:1b:30:09:b4:5d:
c9:e9:72:12:2c:a2:b2:43:de:15:a5:75:f8:1a:41:
d2:f7:6a:0d:70:42:95:59:2f:2e:9b:77:8c:14:b2:
51:b9:d4:0a:e8:16:d5:86:80:18:2e:3c:6c:90:c5:
cd:a5:01:ce:97:be:8c:ba:6a:da:94:bc:87:45:2d:
a1:ab:26:0d:1a:22:f6:4a:b1:77:cb:8a:41:d4:f6:
75:b7:a2:f4:9c:14:06:3c:b6:ab:3b:85:57:8e:49:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:7B:61:2A:C7:7C:44:24:D7:A5:D3:B2:87:18:AA:C9:D3:AA:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2004C4B6A0E211EFAA521984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:60:24:cd:fe:2c:f1:21:13:45:65:c9:8e:33:6c:da:66:67:
ee:62:5b:01:11:ec:9f:e3:28:bb:6c:54:88:86:58:34:89:bf:
54:43:d4:aa:59:df:ee:43:c7:67:f9:5f:1b:db:84:6c:3e:36:
17:64:d5:3a:d9:ec:45:7f:84:01:6e:34:47:50:63:0a:08:1a:
a7:76:0d:e6:ef:eb:23:bb:98:be:d7:07:4a:5f:86:93:bb:fd:
68:11:93:e9:c8:82:16:f9:71:3e:36:f2:1d:d1:77:16:8a:2a:
94:78:50:80:dc:5d:dc:53:b2:fb:6e:2e:07:bd:e6:39:07:9c:
50:bb:68:52:30:cc:4b:e8:01:eb:c9:51:fe:f3:4d:3d:10:cd:
c5:38:0e:33:5a:76:36:1d:6b:f5:68:b1:e0:31:dd:33:1a:85:
64:9c:21:d9:0f:43:3b:19:57:4b:10:86:99:08:d6:95:9c:40:
f5:f0:62:10:21:64:55:10:30:18:03:36:df:eb:16:9f:c3:19:
54:c0:95:ef:89:7f:c3:78:61:8d:c4:22:56:fe:02:bb:9c:2f:
60:90:4b:48:d1:e5:da:48:3b:75:72:b0:4e:c5:87:ef:c1:ab:
c4:4d:92:0f:60:53:da:a2:5d:01:da:2b:19:39:8d:35:29:69:
17:8f:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:39 2024 by rpki-client on console-fra.rpki-client.org