Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E509E449F7D11EF973475BE762E951A.roa
File: 6E509E449F7D11EF973475BE762E951A.roa (raw, json)
Hash identifier: NoQHqY2idzhFhKFh9GeO6FxqJsqc3jQUA4pz8n0tyoA=
Subject key identifier: C3:0B:A2:87:75:F3:2D:DC:A1:78:10:47:D5:D2:25:54:B9:66:EA:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E509E449F7D11EF973475BE762E951A.roa
Signing time: Sun 10 Nov 2024 16:04:14 +0000
ROA not before: Sun 10 Nov 2024 16:04:11 +0000
ROA not after: Wed 04 Dec 2024 16:04:11 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68368 (0x10b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 16:04:11 2024 GMT
Not After : Dec 4 16:04:11 2024 GMT
Subject: CN=6730d97e-d8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:10:72:0e:41:6e:69:6d:0d:66:d2:3e:90:
e7:7f:17:d7:01:e0:b3:c0:41:c0:24:ad:df:45:7e:
35:ab:d6:f3:ba:e1:59:91:88:62:be:dd:9f:c4:e5:
05:eb:32:c7:a0:cb:9a:92:f5:2f:cc:8c:1b:fb:92:
68:39:4b:aa:18:69:34:d8:6b:18:c7:cc:f5:d9:cb:
62:13:16:b0:3b:61:ab:5b:14:71:11:c3:06:fa:07:
27:73:65:c6:46:15:43:ad:3b:71:fe:b1:69:d4:d6:
a6:a6:7f:89:89:10:30:c8:b1:f3:f9:8d:64:e9:ad:
84:fb:4d:be:35:0c:5b:09:71:33:32:b3:5c:ac:f7:
73:44:8f:28:fa:31:16:37:3e:13:05:58:01:04:4d:
5d:8e:8a:c6:6f:ec:ba:c8:87:18:07:91:e0:b9:c6:
b6:6f:45:78:ef:f8:ef:ab:2c:c4:73:03:bb:cd:d0:
1b:66:8a:62:9b:72:9b:ac:70:83:83:bd:11:45:54:
7e:f1:1d:7c:e0:1c:f6:d7:f3:ed:84:bd:6d:58:7c:
37:76:60:9e:99:1f:09:65:cb:dc:f5:64:02:77:4e:
d9:41:12:f5:f4:8d:b6:e4:e8:3b:4b:44:b5:d9:8e:
56:6b:a1:dd:ef:bb:2a:87:79:a6:5c:38:0b:4c:3d:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:A2:87:75:F3:2D:DC:A1:78:10:47:D5:D2:25:54:B9:66:EA:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E509E449F7D11EF973475BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b1:ae:5d:ec:8b:4e:91:b5:f1:96:f7:49:29:b0:fc:78:4f:
9a:66:85:45:e6:85:d6:21:a6:c1:4d:78:18:d5:81:d6:27:86:
c6:85:a2:de:f5:ea:3d:43:6d:ce:1b:e9:c0:6e:2d:0e:ef:a4:
47:96:5c:28:23:11:a4:04:27:a9:ab:eb:b8:b1:6d:56:88:83:
8f:3c:a0:46:b4:fb:fa:c6:0d:23:e9:ec:9e:0a:0b:fa:81:ff:
3f:67:db:85:3b:3a:e3:72:b1:ea:cc:c7:e9:cf:e7:c6:6b:26:
fc:af:d5:9c:a9:77:5f:10:a4:a9:8d:af:0c:b1:ca:c5:d8:3b:
bc:79:fa:76:b2:9d:92:24:7a:ce:c0:90:4f:33:7e:a3:c4:01:
cd:7c:39:10:a1:9b:28:fa:4c:8a:5a:02:79:e2:7e:34:64:11:
b5:68:5c:ef:e0:bb:2b:4c:01:11:22:54:68:39:35:a4:e3:a1:
11:ae:d3:f7:a9:14:86:6a:33:4c:40:f7:44:3b:d6:39:43:5e:
f2:cd:2a:4f:7f:fc:9a:c8:f0:fc:9b:90:fa:29:8a:74:2e:46:
f5:16:d4:a7:57:92:70:bb:ab:e8:c4:44:7b:d1:8d:95:4e:29:
3c:d8:43:11:1a:f8:ef:cb:38:23:a1:b3:23:d0:ba:85:4b:c0:
39:27:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:29 2024 by rpki-client on console-fra.rpki-client.org