Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAED8F0A64911EFBCB982B1762E951A.roa
File: 6AAED8F0A64911EFBCB982B1762E951A.roa (raw, json)
Hash identifier: fVJ30xpBPEcWxPttXpeKVAv0m3oy5pC3Bf7LcXfQj6I=
Subject key identifier: 4E:4E:D1:DF:D7:FE:86:36:E1:3D:91:B6:4F:2D:76:0B:E4:2E:E1:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAED8F0A64911EFBCB982B1762E951A.roa
Signing time: Tue 19 Nov 2024 07:39:32 +0000
ROA not before: Tue 19 Nov 2024 07:39:29 +0000
ROA not after: Wed 04 Dec 2024 07:39:29 +0000
asID: 57456
IP address blocks: 154.213.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69362 (0x10ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:39:29 2024 GMT
Not After : Dec 4 07:39:29 2024 GMT
Subject: CN=673c40b4-feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:06:bd:3a:57:a0:ba:2b:48:5c:17:16:4d:e2:
e5:2b:1b:c7:e9:11:07:a6:fe:c1:54:ce:15:61:50:
86:a7:2d:bb:49:8c:9e:31:d7:3b:af:45:e6:35:ed:
b6:fa:4b:e0:ef:35:25:b8:d7:ff:bf:1b:48:14:78:
e0:58:9f:d6:e6:74:59:8f:d7:b6:cb:d7:79:df:a4:
31:c6:42:99:ba:ca:1b:56:76:72:0f:11:b2:52:ea:
a6:18:04:62:d3:fe:0c:38:da:0d:f1:0a:58:0f:b1:
58:66:d0:77:ad:f3:89:0f:05:3b:93:d8:ed:21:15:
77:ee:01:dd:04:a7:1c:f0:0f:b6:6e:32:9f:e3:a9:
8e:89:d4:c5:f0:4e:6e:2a:a4:5a:10:3b:e4:66:92:
7c:fb:4d:05:4f:51:bf:f0:b5:09:5e:39:cb:f6:77:
a2:ce:c1:b4:3b:11:2a:ac:20:df:29:b5:b7:8a:4e:
16:41:ba:5c:d4:ef:12:39:32:8d:a9:7b:3e:d0:a8:
5d:4d:f6:e9:5b:d5:d4:82:4c:1b:7f:ce:5c:75:fd:
0b:b8:1a:b6:65:5d:8e:73:67:9b:a5:97:c5:62:d4:
fc:26:86:4d:83:78:ea:e7:f2:f2:f2:0e:d1:f7:ef:
c7:fa:bd:62:4c:f0:aa:7d:f1:c6:a3:45:12:91:d1:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:D1:DF:D7:FE:86:36:E1:3D:91:B6:4F:2D:76:0B:E4:2E:E1:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AAED8F0A64911EFBCB982B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.166.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:31:ea:06:ea:43:f4:35:ef:fe:fc:56:97:43:44:a7:ba:c6:
91:e7:9e:e3:cb:04:ea:2b:82:7a:23:13:98:ab:46:71:da:1b:
23:97:cd:0d:21:45:a8:38:de:87:c3:98:69:3f:ab:e3:b9:de:
7b:dd:37:1a:87:7a:d2:a4:9c:0c:f7:89:5e:90:6b:fe:48:95:
2c:df:ad:5d:89:d2:f7:30:2d:f2:ac:12:40:88:da:ba:36:50:
49:e0:45:83:34:73:71:fe:e8:fb:7e:34:eb:04:d0:50:50:63:
35:5d:d4:34:8a:c5:cc:4e:8b:4c:7f:f7:df:be:5b:bc:0e:0b:
b0:4e:ea:d5:85:42:80:32:5c:b7:06:11:41:78:fd:12:3c:29:
28:56:74:da:c5:32:3b:c7:e3:df:93:c0:27:86:aa:11:b7:dd:
b3:b5:08:0e:4b:75:6e:f6:01:07:4f:fd:76:b5:77:1a:d4:e2:
ed:5e:2b:da:e5:f3:89:73:a7:c3:b3:a1:9e:9c:67:16:07:21:
6d:1c:31:3c:af:68:86:03:ac:83:9c:be:58:84:e2:1a:29:7e:
9c:a2:63:e0:53:aa:28:5c:0a:dd:d2:9d:92:e3:6d:aa:88:56:
80:12:95:c7:0b:ed:0f:38:b8:c5:f9:3e:cd:f0:31:5b:63:71:
e5:25:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:33 2024 by rpki-client on console-fra.rpki-client.org