Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1F27606AA111EF88AE6F6E762E951A.roa
File: 4D1F27606AA111EF88AE6F6E762E951A.roa (raw, json)
Hash identifier: +pi5qv/AE2+5tDCRkAn4bhrKqTcy8b1HTuTa4dLfh9o=
Subject key identifier: 35:4B:FF:68:58:72:19:AF:DE:1E:F2:AA:3F:86:D3:39:BE:A5:69:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1F27606AA111EF88AE6F6E762E951A.roa
Signing time: Wed 04 Sep 2024 09:37:29 +0000
ROA not before: Wed 04 Sep 2024 09:37:25 +0000
ROA not after: Thu 24 Apr 2025 09:37:25 +0000
asID: 63888
IP address blocks: 154.207.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59947 (0xea2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:37:25 2024 GMT
Not After : Apr 24 09:37:25 2025 GMT
Subject: CN=66d82a59-ceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:de:7a:f3:40:0d:e7:e2:0e:93:bc:63:c1:
ad:23:30:76:b8:bb:95:09:f7:13:36:39:f0:19:71:
e5:e0:71:ef:7e:63:93:cb:b1:f5:91:31:e8:c4:9e:
1e:66:33:2f:cd:b8:fb:71:d3:51:32:7a:77:41:65:
bf:3b:d0:b7:70:66:9c:17:cf:d1:56:69:f2:fa:78:
16:6c:de:7e:ff:31:8d:1c:02:33:5b:ca:cf:ff:a3:
f8:fd:ad:62:e2:30:77:2e:bb:6d:27:5c:bc:12:e8:
cb:20:2b:ea:f0:23:0f:ad:35:ad:c4:df:dc:93:2c:
6a:c7:4f:c8:80:bb:d9:37:d4:bb:93:fd:16:b8:44:
06:f8:9b:0a:2b:5e:24:5a:b8:eb:a0:86:53:c8:b7:
c5:ce:b9:8a:33:9f:1b:20:1b:dd:73:18:df:30:65:
4e:68:93:ab:85:be:42:45:92:6c:ab:05:81:19:f3:
32:04:f0:51:63:6a:f5:55:88:8e:33:85:45:a0:aa:
9d:53:d2:f7:2e:e3:c2:df:b1:0f:d9:50:5f:5d:c0:
d9:01:7d:94:8f:4a:4d:79:79:c3:a4:e3:b5:40:d5:
a5:ec:2e:70:9f:d2:ac:6d:aa:be:72:4a:f0:a0:91:
12:98:77:67:fb:e1:2a:b3:75:a3:65:3b:c7:1f:14:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:FF:68:58:72:19:AF:DE:1E:F2:AA:3F:86:D3:39:BE:A5:69:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1F27606AA111EF88AE6F6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.80.0/22
Signature Algorithm: sha256WithRSAEncryption
98:47:3a:b5:a2:6b:75:70:a9:30:a9:39:97:cc:fc:75:88:d7:
21:8f:15:61:b1:b0:ca:6f:54:a4:36:9f:b4:99:b7:eb:7f:e6:
b4:fc:4c:3d:10:14:b9:50:d7:56:27:00:5a:8b:ec:d8:77:11:
ce:76:f2:a5:b1:49:4a:c3:d6:cd:08:5e:8e:75:85:31:07:8f:
40:72:8c:b4:b3:d3:da:3b:f8:a5:7d:cb:ac:00:32:c7:2b:ae:
75:1a:e9:e1:7d:8d:eb:2e:88:4c:37:5d:cf:1b:fc:79:d0:d1:
dc:d6:aa:82:05:28:82:49:0f:c2:bc:1d:20:41:b6:d5:34:5d:
69:60:c0:cf:ea:de:1c:c7:c8:4f:93:cd:45:67:e8:fc:27:44:
e7:25:a7:1d:be:06:e8:11:37:46:a5:3d:50:dd:cf:ee:c4:fb:
2d:f5:df:cf:92:78:a1:e5:6e:de:80:62:f6:fe:c0:1c:a4:20:
c6:6d:0c:28:74:9d:86:23:c7:a8:ac:cc:ce:d1:ab:f7:67:e2:
0c:f8:bd:bc:33:c2:04:38:9d:3b:b4:30:85:da:df:2b:4e:62:
b2:2d:69:02:72:27:d6:27:c5:fd:1c:ff:4b:82:a9:d5:ba:90:
24:e0:38:9d:4d:0c:d5:bf:dd:d9:77:07:9f:1c:8b:99:b7:8f:
c7:c4:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org