Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F1EDDC692E211EF96CF154A762E951A.roa
File: 4F1EDDC692E211EF96CF154A762E951A.roa (raw, json)
Hash identifier: aOuaY2Vp8nagMWrkpG7hphqG1VUuaAXEnA1ZZFA02E0=
Subject key identifier: 6F:95:DA:BD:88:5B:4A:C8:6A:C2:42:8F:6B:C1:0B:4B:95:AB:C4:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01025C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F1EDDC692E211EF96CF154A762E951A.roa
Signing time: Fri 25 Oct 2024 15:03:36 +0000
ROA not before: Fri 25 Oct 2024 15:03:32 +0000
ROA not after: Sun 01 Dec 2024 15:03:32 +0000
asID: 49505
IP address blocks: 154.209.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66140 (0x1025c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 15:03:32 2024 GMT
Not After : Dec 1 15:03:32 2024 GMT
Subject: CN=671bb348-ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:17:82:f2:95:1c:b7:16:3d:09:90:e6:44:
ff:b4:41:8f:6c:9f:06:ce:97:e1:d5:8d:06:23:46:
d5:36:2b:23:0a:b7:ba:00:bd:e6:7c:3c:f3:93:5b:
92:d8:04:3f:c7:c4:8e:62:0e:91:58:fc:4d:a1:8e:
cf:11:d1:13:34:18:e0:06:3f:ca:78:2e:bc:49:3a:
0e:8d:07:77:b4:64:4a:00:71:94:0e:a2:e6:9a:b4:
4d:d4:0c:77:9a:e4:ec:f3:e5:eb:19:83:6b:c6:42:
3d:c1:2d:4f:c7:ce:eb:54:a2:be:db:51:60:e0:50:
ea:4c:03:ec:7b:e3:89:96:d0:50:cc:9f:a6:3f:7c:
53:13:bb:81:62:b9:92:28:10:d7:79:10:7c:66:3a:
78:a3:f3:ec:1a:27:b0:8a:d8:cb:59:45:38:db:fe:
3d:07:60:be:f8:e3:78:49:a0:9a:42:5c:53:00:18:
d8:33:92:98:ad:21:e7:93:2e:bd:cd:ab:db:bf:8c:
16:b9:45:3c:35:41:94:69:18:ef:6a:4b:4c:43:0c:
2a:01:33:15:38:7a:07:06:53:e2:39:6b:8e:34:b2:
c1:3f:0b:91:44:90:4e:dc:26:18:13:16:85:40:7e:
c2:0b:ba:8e:e9:c1:aa:fb:6d:fa:7a:4e:e5:56:f3:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:DA:BD:88:5B:4A:C8:6A:C2:42:8F:6B:C1:0B:4B:95:AB:C4:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F1EDDC692E211EF96CF154A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.222.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:64:f6:00:d5:86:aa:db:52:d7:ad:19:65:a1:8d:bc:49:c9:
14:70:3f:8f:56:94:d1:03:50:04:55:df:34:77:d1:ed:38:95:
45:27:1d:de:0f:63:b5:d3:47:d8:77:21:6d:cf:39:42:9f:04:
b5:49:2b:57:5a:e4:3a:df:f8:fc:40:1f:be:a4:de:dd:10:b8:
44:50:65:25:89:14:0c:3f:70:14:47:5f:1a:8e:ea:2e:ca:91:
15:5a:cf:e1:9a:8d:89:8e:db:d7:e0:34:14:52:5c:84:81:d3:
be:f0:f9:19:ba:2f:64:eb:ef:a2:ce:01:ac:30:82:b3:92:9a:
da:7d:f3:22:87:a0:f6:4a:90:0c:6b:7a:2b:22:e3:86:0c:43:
3d:3a:0c:ab:55:a5:02:8e:d5:17:05:31:7e:20:64:cb:78:0b:
b2:f2:0b:91:e6:16:e5:08:64:65:b6:0c:fe:15:56:c3:3a:03:
67:f1:23:4d:62:f1:fc:9a:49:b0:e1:ab:e7:27:cb:62:ae:63:
7f:65:24:56:14:52:9f:48:02:8f:1c:c9:09:90:d0:5d:e9:d5:
97:02:41:df:3f:02:9c:57:03:25:a3:c1:b5:cd:3c:43:98:d3:
c4:4c:f6:0e:70:eb:6b:48:67:8f:b4:fa:f8:0a:f8:a0:fc:ef:
a3:6e:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:29 2024 by rpki-client on console-fra.rpki-client.org