Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349A0974A9C311EFB069FC8A762E951A.roa
File: 349A0974A9C311EFB069FC8A762E951A.roa (raw, json)
Hash identifier: /lOp5nnTwTd9tQz6b5Fq1dOKWLu4qS9/gd1u6FKK+9U=
Subject key identifier: 20:3A:DA:1C:1E:FE:21:28:F1:58:25:6B:18:01:47:7C:2A:2E:8F:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349A0974A9C311EFB069FC8A762E951A.roa
Signing time: Sat 23 Nov 2024 17:48:54 +0000
ROA not before: Sat 23 Nov 2024 17:48:50 +0000
ROA not after: Mon 09 Dec 2024 17:48:50 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70090 (0x111ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:48:50 2024 GMT
Not After : Dec 9 17:48:50 2024 GMT
Subject: CN=67421586-a430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:7c:e9:b2:b3:4b:7d:29:48:87:f6:a4:0c:
d9:aa:93:b4:6c:ae:43:fd:d5:5e:22:7b:66:1d:9c:
e9:02:f5:c0:89:a4:20:fb:a0:38:93:f9:8e:8a:09:
b0:39:51:6d:a4:e2:af:3b:b3:76:c7:a8:84:c9:34:
f7:f9:89:ba:ba:1e:23:1a:b7:6d:6b:d4:04:fc:2d:
78:c8:a8:1b:af:96:3d:38:81:f5:fc:48:af:45:c9:
65:01:b8:37:59:bd:f1:69:55:e7:a8:75:d4:bc:0d:
70:a3:89:1b:1a:43:59:d3:3e:19:dc:a5:ca:7b:c5:
50:e7:8c:4b:93:da:1a:38:b2:e4:f3:d6:d7:00:5b:
89:99:27:5f:bb:d6:34:bf:90:6f:5a:70:27:4c:52:
7c:6a:4a:24:5a:0e:44:e5:65:2d:74:63:9c:8c:3d:
fa:6d:fc:71:e3:dd:60:cd:22:33:7c:7a:e8:0f:42:
c6:3e:16:41:8d:24:a7:88:8c:79:67:3d:30:d3:69:
14:6a:66:2f:a8:99:98:d1:58:75:3c:b5:0f:7e:d2:
fe:9b:d3:96:7f:a4:23:ba:22:da:38:50:45:50:da:
82:fc:53:9b:c5:c1:6c:ac:a7:2a:3c:70:15:ca:7e:
64:7f:08:7f:9c:23:26:e8:cb:f6:5b:ab:6d:bc:da:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:DA:1C:1E:FE:21:28:F1:58:25:6B:18:01:47:7C:2A:2E:8F:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349A0974A9C311EFB069FC8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
70:cd:66:d8:18:b1:42:20:02:bd:35:e4:46:df:7d:ee:dd:69:
53:06:54:b3:a6:18:6d:0a:52:b3:11:5e:c9:08:2f:fe:2b:8c:
96:8a:ee:b0:90:76:63:6e:b1:d9:13:65:55:86:db:d5:3f:a6:
19:a7:b3:5c:8c:33:b6:1d:5e:c7:ad:b4:2c:a8:74:21:fa:d2:
e1:46:46:04:8e:f6:5e:29:51:57:00:b7:0c:ae:53:cc:24:5b:
f3:d6:2d:d8:6f:ad:32:ec:8c:59:7e:f4:b3:a6:89:e2:93:60:
5b:83:2b:38:87:47:41:f4:e1:2e:c3:c3:3f:e2:eb:f3:e3:64:
f3:83:a7:d4:1a:d0:ff:e8:6d:ca:49:bb:7f:64:2e:bb:b6:34:
c9:f0:7c:2c:c1:22:ff:ca:2e:3b:ca:9f:a6:27:81:31:25:b7:
5b:20:11:1f:db:32:46:05:31:1b:4d:fb:a1:f0:02:75:80:c0:
15:27:ab:f8:32:69:e1:1c:46:ea:30:76:1f:a5:21:3b:db:9f:
49:66:ac:4d:bc:9a:05:d6:9e:06:4d:c9:33:a0:c8:bb:56:0f:
31:fe:bc:b2:a8:d6:5d:c3:60:f6:b9:0e:13:89:79:6b:30:2c:
09:99:f2:80:8b:ab:1d:6f:67:75:3d:48:78:19:09:4f:2f:ff:
a4:1d:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:26 2024 by rpki-client on console-fra.rpki-client.org