Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244B05F4736411EFB9B266B1762E951A.roa
File: 244B05F4736411EFB9B266B1762E951A.roa (raw, json)
Hash identifier: ZjvFfRXhrEXrZhI26EHGjuVKkCUHx8WPaTQXuiOuN6w=
Subject key identifier: 55:86:A5:4B:20:23:BF:12:15:94:FF:21:E5:1E:9E:80:D3:6A:1A:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244B05F4736411EFB9B266B1762E951A.roa
Signing time: Sun 15 Sep 2024 13:12:21 +0000
ROA not before: Sun 15 Sep 2024 13:12:18 +0000
ROA not after: Sat 30 Nov 2024 13:12:18 +0000
asID: 142403
IP address blocks: 154.221.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61170 (0xeef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:12:18 2024 GMT
Not After : Nov 30 13:12:18 2024 GMT
Subject: CN=66e6dd35-552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:14:79:c0:12:08:29:f9:3c:14:c9:c7:2a:
c9:ce:01:7f:4b:6e:b8:c5:dd:d3:31:36:46:bd:74:
3b:86:d7:64:40:b5:8e:a5:1c:c6:76:b7:d3:70:95:
5d:17:30:fc:a1:cb:61:52:4d:b5:36:1d:27:70:a7:
7c:b1:8c:6b:f3:25:d3:63:3c:2f:0c:cf:80:71:16:
bb:41:2f:d6:55:1e:38:93:1a:46:81:f7:1d:e6:13:
92:ba:4d:43:1f:86:3a:e5:a5:9d:92:09:70:dc:66:
ac:8a:5d:b6:84:35:16:df:b0:cd:66:04:cc:b7:1f:
eb:f8:06:ef:a0:d1:45:d7:94:bc:4a:fd:93:60:c1:
66:70:af:18:d2:ab:84:3b:63:c2:9f:34:8f:36:d1:
e9:34:c1:b7:b7:e6:42:7a:1e:22:58:69:a7:82:4a:
f2:7e:3d:40:a9:76:ea:31:52:f4:d4:6c:0b:92:36:
e5:4d:69:b2:2b:c8:69:e2:99:7f:6d:db:fb:c0:50:
8c:d0:7b:b8:af:6e:31:5c:a8:e9:ff:ad:e4:41:4a:
92:74:72:b5:b8:ac:0f:73:79:bd:d6:6a:d2:b4:55:
db:a6:5e:8a:02:5b:38:3d:3a:4d:bf:d2:28:1b:94:
88:d2:40:8c:b2:36:fb:33:d7:b1:2d:bc:6d:42:68:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:86:A5:4B:20:23:BF:12:15:94:FF:21:E5:1E:9E:80:D3:6A:1A:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244B05F4736411EFB9B266B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.25.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3d:ec:bd:c1:a8:77:2b:e6:bf:85:46:cc:ba:d2:7e:22:c1:
7f:ea:b5:fe:1c:42:d3:c7:0c:8b:e7:73:f4:47:eb:de:2a:ec:
05:3d:e1:01:72:5c:3d:7e:e5:79:e9:84:d6:76:8f:cb:80:80:
83:c1:52:b7:0d:17:53:2b:d3:b6:8f:d3:3e:09:38:ea:3b:04:
d0:ed:85:ef:26:93:a1:88:af:70:a6:38:53:ca:41:4e:b4:24:
b5:44:3c:f5:c8:31:ab:7f:09:9d:a6:f2:04:e3:fe:85:2a:eb:
5a:f4:3b:82:40:e3:9f:68:78:7f:41:9a:ae:fe:c2:9c:5f:f9:
e1:da:85:95:4c:be:53:8c:a7:d9:5c:01:94:c9:88:11:f4:ab:
62:74:5f:7c:a2:cb:12:b3:d1:d5:e8:ec:2c:f0:c4:c5:ab:0f:
42:ca:51:50:ee:8a:3d:e5:cf:83:a2:6a:a4:46:7f:f3:de:c6:
0a:69:57:b4:cd:eb:1f:aa:d5:ab:e5:be:06:ee:33:85:5f:93:
02:85:15:7a:27:fc:f1:c7:43:c9:c2:05:98:a2:9b:19:19:31:
97:13:e7:60:33:b3:a8:fa:b8:f6:4e:9d:e3:4d:c8:bb:c0:b0:
21:95:04:78:d8:e1:85:dd:e8:26:51:86:71:e3:10:5a:62:9d:
57:81:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org