Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E19BFC9AB111EF889AE188762E951A.roa
File: 66E19BFC9AB111EF889AE188762E951A.roa (raw, json)
Hash identifier: xK6Gnb3C80aEZrds36Qbt/MCDMpHlsXnnuRw365pZ7o=
Subject key identifier: 93:4E:F5:D1:A5:B9:D9:46:86:4C:9A:B4:1E:1E:31:E6:2C:5A:CE:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E19BFC9AB111EF889AE188762E951A.roa
Signing time: Mon 04 Nov 2024 13:33:40 +0000
ROA not before: Mon 04 Nov 2024 13:33:36 +0000
ROA not after: Tue 03 Dec 2024 13:33:36 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67264 (0x106c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 13:33:36 2024 GMT
Not After : Dec 3 13:33:36 2024 GMT
Subject: CN=6728cd34-32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:44:08:80:b8:23:f4:f1:3c:6b:3d:cd:71:
6f:c5:1d:bd:41:dd:3e:c4:98:95:d0:14:4f:de:3e:
6d:50:8a:55:e1:cc:a0:92:f4:3e:fd:d0:b5:fd:b8:
18:f0:45:01:b8:ea:19:62:56:f6:f4:42:62:30:32:
ac:6b:ad:93:76:dc:6e:67:bb:70:30:4e:40:f9:f5:
40:50:57:e3:ee:db:9f:e2:ec:0e:db:6b:49:9b:76:
b9:1a:5b:69:f5:22:c8:be:0a:be:97:20:47:87:da:
16:29:83:fd:69:d0:9e:3d:2b:ad:cc:6c:a7:71:e0:
24:a2:19:97:78:91:cb:0e:3d:24:5e:58:a5:5f:4f:
b4:c2:57:bf:9c:a6:ce:a8:be:e7:ef:28:1a:06:32:
30:bb:a6:89:79:b8:55:28:63:45:41:a0:6f:61:35:
46:54:c7:d4:07:f5:c3:21:9b:50:5d:50:28:f2:c2:
f2:39:f6:6c:d7:88:1d:fa:1d:34:fe:2e:fd:7e:8b:
3e:ef:85:65:f7:48:8a:d6:7a:9d:5e:ab:a1:93:48:
09:5b:28:56:72:c1:78:46:fd:7f:bb:e0:46:05:b7:
3f:6f:7f:10:06:a7:4b:15:13:3d:ee:2e:44:cd:8f:
47:98:8f:e9:4d:4a:79:e6:fb:c0:26:06:a6:1a:06:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:F5:D1:A5:B9:D9:46:86:4C:9A:B4:1E:1E:31:E6:2C:5A:CE:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E19BFC9AB111EF889AE188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:79:58:7f:42:e7:0d:90:09:f4:50:5b:c7:74:b7:0e:7a:cd:
20:1e:f9:a3:63:14:7d:34:b8:ba:4c:81:de:c9:46:f0:55:cb:
11:da:0b:d9:aa:f4:b9:75:45:12:1e:63:8d:a5:41:63:98:56:
b6:2b:32:4a:21:70:f2:97:db:f3:83:63:f5:04:29:20:c1:bd:
c8:aa:53:09:0e:1b:78:86:3f:72:2b:af:ef:d4:29:67:7f:06:
29:b8:13:72:0e:c1:02:fb:74:69:3b:8a:e7:4f:f1:0f:ca:59:
c5:41:95:99:b7:74:06:ec:41:47:c8:86:9e:ea:78:70:7d:74:
2a:98:cc:6f:3e:f3:62:1b:38:40:19:79:3f:23:c4:83:2d:a2:
41:81:bb:77:ed:6e:f9:59:66:ce:78:47:53:c8:ab:8e:ad:68:
c7:ee:4b:0c:87:8f:18:cd:b2:81:18:ee:ab:c0:29:44:12:52:
44:f7:7c:2e:ed:63:3a:bb:01:f5:64:cc:2d:c1:5d:8f:09:2b:
42:7a:96:f9:77:78:bd:18:e6:98:5d:a5:d9:a3:9d:fb:fc:6c:
de:62:08:6b:38:45:33:a5:0a:c3:7b:ee:b2:c6:a0:47:c2:fd:
95:48:1e:2c:81:d5:d3:54:78:29:1d:02:66:4c:4e:47:3b:44:
8c:27:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org