Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/661316E474CB11EF97E8C0B9762E951A.roa
File: 661316E474CB11EF97E8C0B9762E951A.roa (raw, json)
Hash identifier: YmSGPTozkE0aiqOB+iFnLbhdYYxrACxVLLRn1g4S05w=
Subject key identifier: 5D:B1:98:56:A9:F9:73:86:ED:A7:39:78:32:7E:8E:B7:6A:DA:FE:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/661316E474CB11EF97E8C0B9762E951A.roa
Signing time: Tue 17 Sep 2024 08:04:01 +0000
ROA not before: Tue 17 Sep 2024 08:03:58 +0000
ROA not after: Sat 30 Nov 2024 08:03:58 +0000
asID: 142403
IP address blocks: 154.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61406 (0xefde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:03:58 2024 GMT
Not After : Nov 30 08:03:58 2024 GMT
Subject: CN=66e937f1-0ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:29:36:e2:f8:e2:bd:e7:95:43:82:00:3a:
5d:cf:a4:9c:3c:74:a6:e4:97:8a:3c:8a:e8:fd:3e:
1c:bd:9b:1f:fd:dc:31:9a:53:c4:2c:dc:d6:75:3e:
33:7c:31:d8:a3:8d:35:f6:05:d8:f9:31:26:66:7d:
41:56:98:59:70:16:07:1b:74:d1:c0:a7:d7:91:fd:
cd:34:6c:f1:a4:df:77:e5:b5:01:d8:fc:16:e9:98:
8c:81:61:e4:d3:ad:1a:ba:0b:03:f6:c5:b8:1f:de:
06:e5:4d:db:e3:13:09:02:0a:6c:6b:cf:c4:d6:36:
27:21:c9:22:d5:f1:41:32:b8:fe:b0:66:06:93:4f:
7b:f0:34:05:b0:da:fb:de:da:2a:8d:6c:fa:7b:4c:
c9:71:f4:ec:d9:15:66:27:62:ff:f1:ee:79:a8:60:
30:a1:80:b3:6c:19:41:d7:c4:83:c3:12:6e:9d:13:
a8:d3:e3:ce:96:78:d4:b0:27:26:48:32:b0:d9:a4:
0d:01:cb:0f:a2:b7:6f:c4:7b:63:4e:69:7a:e0:0f:
c5:5e:c5:9c:fa:ef:e6:a5:9b:74:03:d1:e5:7f:6a:
31:7e:3d:48:0d:4e:67:3b:0f:cc:85:db:e1:1d:6e:
a3:ed:5b:52:66:ba:a4:d5:e1:13:ce:c1:24:be:b2:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:98:56:A9:F9:73:86:ED:A7:39:78:32:7E:8E:B7:6A:DA:FE:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/661316E474CB11EF97E8C0B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:90:b3:16:41:0c:aa:bf:a6:46:20:97:ab:19:1e:66:ba:2f:
e2:cf:43:aa:21:00:07:9a:06:ee:f1:1a:0a:1a:ea:59:62:cd:
91:13:3c:68:00:99:2c:24:ee:df:62:58:77:ff:f1:30:5c:26:
90:fb:f9:7a:77:3b:01:99:75:25:2a:ed:89:6a:8f:d6:fd:05:
54:44:d0:2c:7f:44:ae:03:ae:ad:5b:52:a5:12:76:b3:2c:bd:
8e:95:a7:91:19:20:73:e5:8c:2c:ec:43:7c:f5:f6:33:92:84:
16:50:8a:da:53:13:84:76:be:f8:64:38:4a:05:44:b3:92:5c:
24:b4:31:fb:37:8f:eb:37:1c:ed:fb:4d:74:7b:fd:1f:8f:a8:
32:e5:36:3b:b5:f3:b0:82:14:6d:35:fa:16:20:6d:da:75:0b:
dd:d3:85:eb:5d:82:87:61:27:f1:74:cf:b1:08:c2:ae:a5:3c:
c0:7b:71:a4:09:dc:12:23:44:0f:81:83:96:08:60:87:f7:cc:
87:f8:d3:b4:f9:6f:d6:04:ab:eb:c3:b3:74:51:a3:bc:c8:6f:
d5:78:0e:75:0a:3d:1a:fb:1a:f8:63:e0:7d:4a:ef:4d:83:07:
d8:76:f5:70:b9:63:62:c0:42:7a:96:2f:81:8a:49:63:a6:db:
06:3a:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org