Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699E658A0E9A11EF8499E166017001B1.roa
File: 699E658A0E9A11EF8499E166017001B1.roa (raw, json)
Hash identifier: GHN+E1A62k1Idexb6X+ezcaL9IULT2a7GOZwtJk1YGc=
Subject key identifier: 13:B0:BD:C0:09:80:DF:AC:5A:6D:66:0B:2A:88:C8:5D:A7:A5:B8:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699E658A0E9A11EF8499E166017001B1.roa
Signing time: Fri 10 May 2024 06:56:23 +0000
ROA not before: Fri 10 May 2024 06:56:20 +0000
ROA not after: Wed 09 May 2029 06:56:20 +0000
asID: 27947
IP address blocks: 154.198.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46646 (0xb636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 06:56:20 2024 GMT
Not After : May 9 06:56:20 2029 GMT
Subject: CN=663dc517-cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:c1:d9:b7:eb:18:e4:2a:e8:49:05:7d:7e:
ae:92:e4:55:dd:44:84:62:b7:d6:9c:cd:dd:d5:9d:
07:05:f1:c0:01:35:7a:19:a8:ad:61:45:a1:7d:c9:
71:64:36:b2:f1:f0:4b:a5:bc:91:a2:6f:8e:73:13:
f0:0a:12:e9:99:21:e7:19:f2:86:01:77:0d:d7:61:
94:c2:35:d9:d2:e5:29:64:d2:91:31:c7:a0:35:2b:
b8:6c:37:9b:9d:d8:06:ec:44:12:eb:aa:01:63:90:
2a:0b:94:84:0d:06:a4:62:5a:2d:e1:a8:76:8e:b7:
01:55:07:ef:8f:57:43:a1:a4:f9:bf:9f:79:e9:5b:
5d:26:9a:22:0a:59:c6:e3:1a:6a:8a:b0:28:b3:39:
1e:d5:9b:e4:6a:29:cb:d2:f4:b1:0d:31:4b:5a:1d:
01:6a:ef:3e:df:1a:b0:ba:64:96:6f:51:a9:44:b1:
34:47:d4:e7:33:ea:69:9e:3d:cd:d6:e6:7c:1f:e8:
e2:17:04:82:fe:b5:61:19:53:bb:d2:42:65:a0:b3:
6d:c5:01:e0:f9:bd:bd:87:20:b5:be:22:68:ca:27:
6c:2f:70:22:ce:5f:65:c4:59:de:6f:a2:70:ea:4d:
9f:a7:78:bb:17:f0:86:6d:eb:93:1b:48:08:60:8b:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:BD:C0:09:80:DF:AC:5A:6D:66:0B:2A:88:C8:5D:A7:A5:B8:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699E658A0E9A11EF8499E166017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.172.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:c2:58:09:39:2e:8e:17:e1:db:c6:c3:36:ab:c6:9d:59:91:
f3:c3:c2:23:ed:c2:c9:62:9a:cd:99:6a:69:3e:62:89:60:9c:
8a:fa:5f:e5:a3:83:32:32:2d:a8:4a:1d:75:84:00:78:ee:9e:
45:49:81:e6:ec:fd:94:9b:5a:dd:08:59:f2:1c:11:c0:3a:7d:
97:c6:6d:b2:5a:a4:44:83:14:8a:56:7b:df:15:b6:0f:10:b4:
00:77:0a:38:f3:ef:79:28:87:0a:51:36:7d:d3:0f:4f:9a:02:
7a:22:54:54:91:75:af:ec:be:11:4d:20:79:9e:d7:df:39:ca:
00:04:89:e1:c1:80:97:65:99:5e:00:eb:ff:16:ed:f6:89:48:
83:a4:08:7b:3c:c7:28:e5:bb:fc:db:35:16:87:0c:12:75:7f:
06:09:ad:11:42:39:8a:2c:17:37:f4:52:18:33:30:84:97:cc:
1b:c8:c4:e1:ba:9e:df:e1:5c:bf:86:8c:60:89:24:23:a2:22:
d2:c4:13:48:c0:17:bf:1b:b2:ca:56:0d:9d:58:61:78:eb:c5:
e3:da:10:12:8c:fb:92:a6:81:dd:48:b3:4f:89:d2:fa:b7:ed:
83:f8:79:61:8c:82:44:f3:f4:6a:a3:8f:ab:26:3c:8d:cb:b0:
ed:77:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:04 2024 by rpki-client on console-fra.rpki-client.org