Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/270D00A627CB11EF88B166E77CDC24C2.roa
File: 270D00A627CB11EF88B166E77CDC24C2.roa (raw, json)
Hash identifier: 7nHoxEFkpChfDa1wIqZOzaC7pHeIzlb3Ta+NDwbmxZk=
Subject key identifier: 66:5E:37:E9:28:2D:FE:9D:A2:AF:2A:82:ED:D3:F2:CC:44:E1:FE:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/270D00A627CB11EF88B166E77CDC24C2.roa
Signing time: Tue 11 Jun 2024 08:18:16 +0000
ROA not before: Tue 11 Jun 2024 08:18:13 +0000
ROA not after: Sun 15 Jun 2025 08:18:13 +0000
asID: 134687
IP address blocks: 154.197.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49582 (0xc1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:18:13 2024 GMT
Not After : Jun 15 08:18:13 2025 GMT
Subject: CN=66680848-43e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:0e:c1:a1:94:1e:43:c4:1f:f6:5a:73:be:
96:40:b2:1d:18:8e:35:d8:b0:16:dd:dd:a2:ad:a3:
76:b2:f9:b3:a0:8a:28:69:54:f2:0a:47:df:71:a3:
c6:90:93:b6:85:cc:aa:cd:85:5e:3c:ae:25:6d:c3:
28:a5:d9:01:ad:20:2d:18:3e:eb:42:ec:15:89:de:
e8:4f:8d:c3:53:b5:6d:2c:ec:09:64:b0:e6:79:28:
a8:e1:0f:c7:61:91:c3:ea:21:1f:a9:89:d4:c3:53:
c1:51:02:f0:c9:05:0d:57:dc:b6:f5:18:e7:92:fd:
0e:13:25:b0:85:37:28:6f:47:ab:8f:bd:8c:7f:0e:
30:f8:2e:de:f1:32:25:55:10:13:34:a1:fd:d3:91:
4f:29:09:3e:75:3e:6d:28:a5:a5:47:43:a2:df:6f:
b7:4d:cf:98:0a:ce:c6:58:e2:56:8c:67:37:8f:03:
22:36:98:0f:c4:8f:0e:fa:e2:9e:92:d4:6c:2c:93:
19:80:c8:a5:bc:fb:d7:bc:ea:2c:8f:2f:36:82:a6:
92:91:6b:25:c1:ef:9c:2a:e9:39:bb:ab:4d:cb:9a:
be:f3:c5:f6:84:83:3d:f2:85:9a:bd:35:7f:02:51:
cc:60:0d:54:a6:81:10:21:47:f5:0e:ff:4b:ca:7a:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:37:E9:28:2D:FE:9D:A2:AF:2A:82:ED:D3:F2:CC:44:E1:FE:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/270D00A627CB11EF88B166E77CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ce:65:ed:a5:2d:e6:70:8d:36:4b:e3:cc:a5:3c:ca:7c:6e:
64:6a:8d:95:12:b2:7f:97:52:13:f1:5e:e5:1b:d8:f3:52:e8:
d0:25:f0:6a:17:7f:7b:e3:a0:c4:cd:51:c8:35:3f:ef:6e:b0:
43:b5:d5:60:50:2b:60:c1:d9:d0:b9:35:75:38:88:14:64:d1:
f7:a4:c5:06:e0:f5:40:a6:fb:36:53:e2:3a:f8:ac:66:86:49:
70:1e:81:cc:a0:45:21:2b:60:8b:95:bc:c0:2b:be:e8:ab:6d:
6d:f1:87:15:5f:9e:9a:cf:33:20:74:1a:01:49:2b:f9:47:8f:
c9:73:78:32:a4:a4:26:12:ba:a1:53:f8:de:01:0a:73:0a:11:
ad:4e:ac:f5:02:10:fb:be:66:49:e4:33:9a:ad:17:4d:3b:64:
ba:36:df:3c:2b:a3:fc:06:8f:51:04:2a:14:28:ef:02:16:41:
6a:f3:ad:18:5b:2e:23:90:f3:4d:96:3b:d1:08:f9:5f:b5:52:
b3:98:cd:84:e0:21:5a:50:fe:6d:73:46:76:2a:d3:3f:d4:b9:
e3:a5:3f:9a:23:63:38:55:98:89:12:75:5b:0f:d4:86:6d:31:
b3:93:d5:95:67:72:0b:db:3c:a0:f1:b0:20:8a:82:d9:78:9c:
9c:37:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org