Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C7CDA4A92111EF81B98F8C762E951A.roa
File: 69C7CDA4A92111EF81B98F8C762E951A.roa (raw, json)
Hash identifier: Ggptffo6aQHBvubzpnBpMlS2nGlRYmawf5MbUea01ks=
Subject key identifier: 4E:4D:D9:7B:DB:B3:33:A1:C7:1C:09:2B:09:D8:67:40:6F:F9:A4:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01116B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C7CDA4A92111EF81B98F8C762E951A.roa
Signing time: Fri 22 Nov 2024 22:30:45 +0000
ROA not before: Fri 22 Nov 2024 22:30:41 +0000
ROA not after: Tue 03 Dec 2024 22:30:41 +0000
asID: 62240
IP address blocks: 154.196.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69995 (0x1116b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:30:41 2024 GMT
Not After : Dec 3 22:30:41 2024 GMT
Subject: CN=67410614-bbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:69:b0:75:e0:c8:7e:c8:cf:90:f0:7a:58:
1b:5c:0c:b3:9b:07:81:98:ae:56:7f:57:2a:aa:bf:
62:ab:b9:c2:ad:37:d6:8d:54:39:aa:70:49:53:45:
84:53:2b:b2:29:68:2f:d9:7b:4c:66:08:37:01:d8:
70:ca:49:80:16:7a:b5:55:fb:0a:59:52:d1:df:3b:
41:9a:af:a4:86:a6:00:40:12:b3:23:45:e9:8c:e5:
ad:5b:37:37:75:5d:86:ab:d4:9d:88:cf:1f:2c:0c:
c2:88:c6:ef:ce:c6:ee:3d:17:83:79:e2:3c:f8:a2:
9e:cc:cc:d0:c0:43:7f:9f:87:fc:00:ff:d9:79:04:
c8:bc:71:07:cc:44:9d:d0:a0:4a:9b:a5:ec:5a:9d:
89:8b:6a:c5:a4:96:7e:2e:1b:e1:13:30:a0:c5:e8:
21:d4:31:4e:45:8b:7d:aa:2f:fb:38:bf:e4:3d:4f:
e9:13:ec:b0:f8:96:21:e5:fc:3f:f4:c7:84:7b:88:
a7:95:bd:36:7d:c4:12:27:64:7f:2e:6a:a5:f5:c3:
31:d9:e2:b2:b9:73:0b:47:a9:b3:2b:d2:0c:8b:fe:
6f:55:e0:0e:4c:ec:06:4f:58:83:3a:4f:af:48:2d:
af:e1:af:22:08:02:7d:a6:4a:be:2a:d7:17:d9:6b:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4D:D9:7B:DB:B3:33:A1:C7:1C:09:2B:09:D8:67:40:6F:F9:A4:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C7CDA4A92111EF81B98F8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:89:09:c2:29:cc:3b:b0:ba:68:d6:4d:d6:8c:d1:aa:d0:0d:
fe:9a:53:90:d9:c3:38:91:86:8c:93:5f:b2:7a:69:1a:ad:3c:
c6:84:7e:b9:75:a3:fa:1b:60:a1:91:c8:bc:f7:ef:9d:7b:d7:
8f:38:88:44:be:20:f4:6a:5b:5d:ac:e2:15:31:db:41:98:94:
13:59:e4:b7:95:ea:30:4f:99:47:1d:5b:ab:63:a1:7b:4e:09:
e9:ac:05:3d:33:e0:f8:e5:91:c6:85:7f:ba:4b:09:a3:8d:90:
4e:59:47:3e:57:d1:75:be:3e:0b:fd:7e:f5:e9:3f:81:42:11:
a1:c2:70:9a:e5:61:fd:84:43:5c:c1:34:c1:39:4f:f5:7b:e9:
c6:ce:4f:32:20:6d:a1:e2:79:3b:7f:16:68:6b:b4:12:c6:52:
7f:e7:11:04:31:e0:9f:8d:c3:47:27:62:ad:42:56:bb:c4:14:
53:18:35:e4:73:21:16:ff:fc:e4:76:64:9a:7a:80:68:29:a3:
d9:ac:a4:e1:9c:6a:f1:7d:fa:ae:cf:ad:78:51:42:29:91:02:
1d:60:89:3c:30:df:ca:c8:66:e1:ef:4e:b4:e5:e7:40:2d:95:
3f:e8:29:1e:e5:0d:bb:1b:ac:5e:9c:81:ab:99:3b:39:54:9f:
bd:6d:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:15 2024 by rpki-client on console-ams.rpki-client.org