Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669BFD847F1011EFA4C1C759762E951A.roa
File: 669BFD847F1011EFA4C1C759762E951A.roa (raw, json)
Hash identifier: U1wko8sXwsnRWO3oeCMlQQKK1S+kMWtzMa6zHsBeBaM=
Subject key identifier: BB:A9:C3:AF:03:B1:3A:34:0A:3B:39:31:C6:81:A1:91:F9:94:44:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669BFD847F1011EFA4C1C759762E951A.roa
Signing time: Mon 30 Sep 2024 09:43:09 +0000
ROA not before: Mon 30 Sep 2024 09:43:05 +0000
ROA not after: Sat 30 Nov 2024 09:43:05 +0000
asID: 138915
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62914 (0xf5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:43:05 2024 GMT
Not After : Nov 30 09:43:05 2024 GMT
Subject: CN=66fa72ad-ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:85:d3:1e:dd:a7:89:83:4e:be:94:c1:26:
82:7a:42:09:81:76:b7:e7:49:83:e7:16:39:ca:e0:
ae:11:b5:dd:d9:e2:a0:86:b6:f0:ab:49:7c:3c:4b:
82:fc:28:f4:20:f2:81:2b:d3:fd:99:31:0e:92:b0:
2c:15:f6:c8:53:b3:32:c8:29:cc:ed:75:f7:0d:f1:
b7:45:b7:a4:4f:46:05:ae:e8:32:af:9a:49:9d:11:
e9:d1:dc:c8:9a:4b:b1:15:6a:d2:79:0d:e2:6c:a9:
fd:64:ad:64:a9:ff:9d:80:ad:cf:94:9d:73:36:97:
ab:8f:c8:3a:eb:50:a2:a3:23:16:ff:f2:2b:f2:4f:
44:fd:9b:89:83:9d:0c:59:a5:6d:61:d9:cd:9f:81:
46:15:1f:d5:aa:a5:de:5a:2b:fc:14:35:ab:38:ca:
29:1a:4c:5b:39:f8:f2:21:6d:8c:f1:8f:45:06:71:
af:1f:4d:d5:d2:46:78:87:27:a7:bb:ac:c6:92:ac:
1f:2b:e7:e8:f9:91:59:94:2c:db:6e:16:9c:8e:01:
c6:6a:e4:93:91:6e:d1:c8:70:db:e3:b1:23:13:ad:
77:ea:c4:f6:5d:c5:34:09:73:cb:61:38:bc:cd:1f:
6c:46:f4:d7:9d:27:46:c7:d6:cd:10:17:6d:63:43:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:C3:AF:03:B1:3A:34:0A:3B:39:31:C6:81:A1:91:F9:94:44:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669BFD847F1011EFA4C1C759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f6:ce:e1:6a:67:3a:54:7d:d1:73:87:6e:d6:04:0b:c0:49:
1d:6b:3b:fb:ff:6b:2b:72:81:bd:0c:2b:13:b3:22:33:22:91:
bc:29:93:ce:36:72:fe:e2:ad:d8:e2:9c:e6:d3:67:fa:54:a9:
08:4f:84:73:70:74:c1:dc:a3:c3:10:a6:7e:74:b3:26:a1:33:
25:c4:db:da:69:f4:47:f2:90:44:8e:ef:75:5c:75:53:87:0d:
71:46:92:f7:c7:3a:f6:c0:59:6d:ad:f1:6d:a4:ed:b9:3d:f4:
ce:6f:3f:7c:1e:24:dc:35:fc:63:40:c5:4c:ef:5f:ff:5c:c0:
80:1f:6c:e6:4c:b4:00:93:37:af:f8:db:f6:9b:a4:d1:e7:7b:
bd:b0:5e:32:2b:fe:a6:b4:2a:89:dd:9e:cf:81:8e:60:69:0d:
09:87:f5:7a:25:53:b1:09:66:01:fc:0a:b3:c6:a5:a2:37:1a:
a0:44:5f:57:7f:a3:92:c7:cb:9e:ec:99:e2:5e:b5:07:78:c7:
e0:de:26:c8:f4:7b:c7:6d:15:83:86:10:0b:66:cb:d7:18:d7:
3e:0f:5e:fb:03:61:c5:92:9d:c0:ae:39:0c:f8:9d:5d:64:04:
60:cd:12:38:41:07:3e:03:21:0e:8d:a2:38:4e:f3:64:14:30:
11:53:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:33 2024 by rpki-client on console-fra.rpki-client.org