Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3C2414677311EFAE709076762E951A.roa
File: 6F3C2414677311EFAE709076762E951A.roa (raw, json)
Hash identifier: VYLb+tCDi6q/iBRlgqw2G+9rmasRuOC8At5+/MlaIqs=
Subject key identifier: FD:AD:AC:67:1A:0E:7C:ED:75:CA:9F:58:4C:A4:AE:1D:88:2D:45:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E835
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3C2414677311EFAE709076762E951A.roa
Signing time: Sat 31 Aug 2024 08:31:36 +0000
ROA not before: Sat 31 Aug 2024 08:31:32 +0000
ROA not after: Tue 21 Jan 2025 08:31:32 +0000
asID: 63199
IP address blocks: 154.207.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59445 (0xe835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 08:31:32 2024 GMT
Not After : Jan 21 08:31:32 2025 GMT
Subject: CN=66d2d4e8-7991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:95:5e:64:58:60:20:a6:56:29:52:88:0c:
42:93:6d:34:5d:3c:e7:82:2f:ec:26:dd:d0:d7:7d:
5b:a1:9f:88:32:4c:c0:d2:f0:37:40:07:26:58:3e:
fd:3e:eb:70:55:2d:23:75:b4:68:f1:d4:dc:1f:c3:
b3:f5:92:a9:4d:61:4a:2f:71:6a:ae:f7:e1:b2:51:
71:f4:27:13:a5:a4:23:74:be:bd:9f:70:f5:a1:86:
d8:59:b5:36:60:e1:ac:23:81:79:60:f0:7e:92:a5:
b8:b7:ad:51:ec:6f:1c:c7:b6:d0:39:77:72:b2:2f:
94:14:8f:9e:fa:5e:a3:34:0a:24:18:b0:6a:32:1c:
91:b2:1d:e5:9b:72:6b:1c:48:c4:c1:3b:f0:e4:59:
c1:80:e9:10:29:94:e2:07:b7:eb:75:41:e9:d8:6c:
b1:aa:ef:73:f6:e0:7b:53:02:4a:d3:ba:8d:aa:c5:
c0:88:54:e4:0c:92:79:5d:43:85:22:9c:54:0b:16:
c3:87:22:eb:70:bd:a1:f2:63:23:23:ef:32:76:28:
ca:66:80:02:ab:40:d5:ce:bb:2a:03:f8:1a:ae:cb:
6e:89:6d:22:6b:d9:d2:0c:07:c7:4f:b3:cf:55:d4:
96:e9:3c:4c:ef:ba:94:ce:3b:d7:4e:d5:d1:5b:11:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AD:AC:67:1A:0E:7C:ED:75:CA:9F:58:4C:A4:AE:1D:88:2D:45:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3C2414677311EFAE709076762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.108.0/22
Signature Algorithm: sha256WithRSAEncryption
74:42:10:68:db:59:06:0c:3c:3a:86:3c:fb:5b:27:a9:7d:6f:
cb:7c:ee:87:b2:89:18:3b:c2:a6:4e:4f:aa:5e:7b:5a:f1:94:
54:c9:e0:1a:5f:e7:86:8f:0a:c7:0c:b1:94:64:cf:ba:f8:bc:
b9:e0:96:fc:db:d0:e8:95:8d:c8:3b:cd:75:2c:83:bd:74:67:
33:9f:29:8e:a8:2b:da:f9:a8:44:9d:0d:b0:e4:17:1c:9f:b0:
e0:cf:62:f2:ba:fa:2c:2b:81:68:2d:3a:b3:8e:15:9a:fa:a4:
c9:44:c4:bb:da:a0:7f:ac:c7:98:1c:c4:19:07:62:34:77:76:
ac:92:28:cc:c6:54:9d:6c:d9:81:70:07:d6:5b:d0:dc:a7:76:
f9:f4:57:f8:52:b6:c3:e2:bd:a5:14:f2:49:1b:17:3a:3c:53:
bd:6d:18:32:34:72:4d:ea:32:8a:48:f3:aa:67:a7:f5:fb:2a:
98:f2:14:15:23:46:36:f1:10:c6:b0:6a:28:42:e0:ce:c4:98:
bd:eb:d4:be:9c:e6:00:36:c6:6c:04:28:48:0d:69:b7:67:69:
d7:30:48:b5:ae:0a:0b:71:5d:7a:2b:6b:e3:a5:e2:d1:20:3f:
a1:94:ae:c9:33:c1:5f:7d:af:f9:92:e2:d5:06:c9:b9:27:7c:
2c:62:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org