Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD3FE6A8DD11EF9E10D065762E951A.roa
File: 61DD3FE6A8DD11EF9E10D065762E951A.roa (raw, json)
Hash identifier: kTfr3xhvBPmiPUfM8J5Nl7WPzcKKA67QQNFoMp7xGBk=
Subject key identifier: 9D:47:55:6A:95:C5:76:BD:62:29:0E:5B:5F:FA:37:95:58:94:C7:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011067
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD3FE6A8DD11EF9E10D065762E951A.roa
Signing time: Fri 22 Nov 2024 14:23:46 +0000
ROA not before: Fri 22 Nov 2024 14:23:42 +0000
ROA not after: Mon 09 Dec 2024 14:23:42 +0000
asID: 5065
IP address blocks: 154.206.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69735 (0x11067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:23:42 2024 GMT
Not After : Dec 9 14:23:42 2024 GMT
Subject: CN=674093f1-6772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:2c:25:af:9d:95:4d:3a:fb:03:cb:15:7e:
e8:7c:1a:91:bc:f6:6f:98:f5:3a:bd:2a:64:60:74:
63:01:eb:3e:e4:7e:93:d3:7d:80:30:6d:c1:f5:75:
73:7b:10:6f:77:0e:6f:03:64:b6:13:0b:f0:f9:a9:
ca:a2:07:02:ef:87:fc:a4:88:e3:e2:be:23:11:54:
08:88:45:66:9b:28:c9:d9:04:f0:2e:fc:99:af:42:
76:42:8a:94:16:a9:fa:2f:18:e6:a0:21:68:68:22:
51:e1:53:0e:54:e8:3c:d8:65:6c:a3:99:7b:c5:c2:
ec:d8:29:47:f1:9e:60:06:81:12:d0:42:13:6b:31:
0c:fe:98:61:5f:2f:c1:55:1b:f7:31:b2:12:f3:fb:
73:59:ca:44:8f:c0:a0:0e:da:11:2b:c8:c4:44:55:
fa:c3:4b:85:21:e7:b8:51:76:d5:2a:08:d8:ff:ea:
ef:d0:07:04:fe:e7:61:9f:22:3e:9b:6b:54:65:d9:
50:35:23:1b:8c:c3:98:44:da:7f:10:02:4e:a9:2b:
c8:38:8f:c7:b3:9e:34:b5:1c:eb:55:83:5b:cb:86:
27:48:46:12:06:f3:e2:07:c4:b0:1f:b7:f5:f1:6d:
65:79:8e:84:17:54:f0:68:18:b2:e3:17:a7:e6:e3:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:55:6A:95:C5:76:BD:62:29:0E:5B:5F:FA:37:95:58:94:C7:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DD3FE6A8DD11EF9E10D065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.43.0/24
Signature Algorithm: sha256WithRSAEncryption
49:eb:93:85:1b:db:e7:c1:60:56:f1:2e:77:44:57:06:0f:c7:
d3:16:74:57:30:e0:4d:d1:1f:08:fd:97:97:82:e3:5a:82:0d:
8d:f7:12:ab:7b:5e:cc:c2:70:fc:9a:95:30:ad:ed:2c:a4:fc:
38:ae:f4:11:74:d9:01:a2:11:41:ef:ef:44:db:d2:93:5f:d1:
0b:2f:f1:9a:96:18:39:fa:44:06:c3:b6:34:34:02:70:8a:31:
bf:06:a3:26:ae:81:95:f7:b9:05:47:01:04:65:0e:b5:37:c8:
cb:b6:e0:d8:ea:be:e9:c3:10:fd:74:68:23:a6:30:2f:a0:3c:
0f:4b:7d:d2:35:52:03:ef:2a:32:56:38:10:9f:8d:99:ce:1c:
89:62:0d:9d:70:7a:03:06:da:6a:68:a1:1d:6e:e5:12:c4:f7:
f3:84:4b:a5:c2:0b:8c:b9:4d:0f:7a:aa:39:1f:22:e3:35:27:
c0:e9:9b:b8:4e:17:d5:5b:18:27:12:f9:d6:32:5e:79:4a:9f:
e3:7b:8c:88:a5:6d:e5:9e:e9:40:36:e4:27:b7:44:72:2a:a3:
af:11:ba:a1:b0:97:f5:14:cb:3c:83:02:80:c3:64:e0:fd:6c:
60:a7:b8:71:78:89:79:4f:38:d1:6d:51:3f:4b:bd:66:c7:27:
fa:39:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:32 2024 by rpki-client on console-fra.rpki-client.org