Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AD13FAA8DF11EF9898A072762E951A.roa
File: 61AD13FAA8DF11EF9898A072762E951A.roa (raw, json)
Hash identifier: W3CFUfCyjvm8r1Zx/tGuH0oVFukaI7Ak7HSUHgl+hgw=
Subject key identifier: 55:26:85:2B:B0:27:90:6D:86:C7:AE:B9:42:92:BA:77:9B:CF:2E:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01107F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AD13FAA8DF11EF9898A072762E951A.roa
Signing time: Fri 22 Nov 2024 14:38:04 +0000
ROA not before: Fri 22 Nov 2024 14:38:00 +0000
ROA not after: Tue 03 Dec 2024 14:38:00 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69759 (0x1107f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:38:00 2024 GMT
Not After : Dec 3 14:38:00 2024 GMT
Subject: CN=6740974c-df43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:d5:25:70:5b:a1:df:f7:e7:c8:91:d7:79:
74:57:31:ac:c8:08:a7:9b:71:1b:52:8d:2f:b9:74:
6b:e8:a1:0e:b9:83:ad:48:21:60:c0:e9:b6:27:ae:
af:e1:79:39:82:e8:24:06:2f:2b:0a:e6:1c:6a:39:
24:fd:9a:10:6e:f9:d2:4b:90:c6:e6:7e:cf:76:49:
ed:b2:82:06:ff:bc:d6:fc:01:9b:44:d9:9b:3d:21:
af:35:1c:b2:3a:ca:e8:90:6f:26:73:83:ab:9f:5a:
81:e0:8f:fe:94:b6:e9:d1:37:58:2b:6c:21:81:44:
7b:ad:c7:b1:50:7f:88:7d:2b:c6:27:8b:1a:79:b1:
65:8e:d9:79:7d:2f:a1:f6:9b:17:6e:90:35:d6:0d:
aa:ad:05:2d:c7:dd:36:b8:b7:dd:00:17:f4:e3:82:
c1:83:ea:74:eb:44:21:b2:f0:5a:fe:6d:c5:b3:76:
22:90:90:1e:36:4b:64:96:65:30:57:a3:55:96:00:
42:88:32:3f:04:fb:e5:5f:89:75:de:ea:18:9a:e7:
5b:64:4a:3c:88:58:31:ef:b5:f9:7e:ac:f0:11:5c:
d4:14:c1:f4:a1:a8:d0:a0:fd:cf:da:4a:c1:4b:e4:
9f:8c:1c:2c:c4:df:d9:2d:59:ad:94:86:bd:4f:2b:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:85:2B:B0:27:90:6D:86:C7:AE:B9:42:92:BA:77:9B:CF:2E:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AD13FAA8DF11EF9898A072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:90:e0:5e:1e:7b:40:69:5c:c0:1c:98:d7:ab:b1:18:90:b6:
59:f1:9a:7b:33:f9:cf:d5:f3:cb:e2:c8:9c:8c:a3:30:50:41:
50:11:42:b3:2f:b3:75:5e:c5:cc:17:cb:9d:d6:4f:9b:d5:48:
cc:f2:e1:0c:66:24:cc:c8:44:46:5b:1f:bf:35:9b:3e:e3:48:
da:21:4c:82:7d:02:e2:fc:e2:fb:3b:3e:51:fc:db:e9:be:41:
3b:8a:e5:84:4e:98:4b:24:17:83:be:47:87:ad:66:1c:eb:1c:
ac:5c:5e:25:88:2f:e9:5d:d7:a4:ed:12:9b:67:cb:35:60:bc:
70:62:89:94:fc:e0:8f:0e:05:31:aa:0a:6d:8e:9e:4f:ad:29:
29:8b:5e:98:e5:b3:1b:b8:44:00:47:87:2b:9d:29:d6:04:39:
0f:ed:98:e3:da:b7:45:8f:b4:25:d4:26:45:67:f1:63:66:da:
b8:20:ab:d0:2f:02:f4:1d:d4:0b:36:a7:d5:bb:f5:9c:37:97:
7c:87:d2:b9:a5:71:b9:69:c3:dc:c5:7e:22:99:fb:e0:65:b8:
fd:88:c5:b4:c7:0d:24:7c:b1:f1:ae:63:0b:43:62:b6:91:97:
8a:e6:a8:ee:4e:dd:e1:d0:a5:c2:7d:bc:97:87:16:17:0f:48:
89:a7:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:32 2024 by rpki-client on console-fra.rpki-client.org