Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E07852092B511EF8A210DB1762E951A.roa
File: 7E07852092B511EF8A210DB1762E951A.roa (raw, json)
Hash identifier: 4TqJe/ix7WJuzdD5cCSOl655WDn1kEu4PwHE/RGEDUc=
Subject key identifier: CA:FF:25:EC:28:9B:8C:96:E9:DA:5E:29:4B:7A:22:C9:E0:42:54:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E07852092B511EF8A210DB1762E951A.roa
Signing time: Fri 25 Oct 2024 09:42:47 +0000
ROA not before: Fri 25 Oct 2024 09:42:44 +0000
ROA not after: Sun 01 Dec 2024 09:42:44 +0000
asID: 202656
IP address blocks: 154.222.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66038 (0x101f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:42:44 2024 GMT
Not After : Dec 1 09:42:44 2024 GMT
Subject: CN=671b6817-0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:cd:3e:ed:cd:4e:58:cb:81:0e:da:52:6d:
df:60:c9:d6:3c:fa:28:31:fe:72:05:0e:39:ef:c2:
24:01:e9:a1:97:f3:0b:d3:a7:19:09:08:94:77:67:
31:0a:e4:12:3a:e6:d1:79:1a:c9:d1:d2:25:8a:d2:
fb:42:3e:5c:cb:09:d4:84:3f:1f:bc:f3:71:cd:4f:
0b:a5:c4:52:e7:d4:99:37:4d:8d:cb:03:29:ce:3d:
2e:57:02:be:fd:70:42:97:49:74:f3:3c:70:b5:3c:
28:13:ca:26:5b:52:79:f6:79:28:42:09:30:0c:00:
9d:f8:d7:19:d2:6c:bd:e1:f5:f1:2c:9d:cf:b5:56:
13:5a:10:70:c5:75:27:2b:bb:89:06:3d:16:20:7f:
79:06:ff:f6:a2:16:a0:73:59:02:04:9c:d2:c0:c7:
dc:53:86:f1:8a:b9:50:bb:67:fe:07:36:ad:c6:07:
a0:9a:40:38:85:1f:db:9b:ec:09:26:8f:7d:bb:09:
7e:e2:a0:55:08:5f:0a:4e:49:9e:24:4c:a5:6f:a2:
e5:a4:21:d7:72:e1:95:2b:01:73:35:bc:14:0f:18:
61:3f:1e:e0:b0:3a:6c:49:e6:d4:c1:3e:46:98:3a:
05:ae:57:2f:09:08:0b:33:ba:9e:9a:62:d3:26:cb:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:25:EC:28:9B:8C:96:E9:DA:5E:29:4B:7A:22:C9:E0:42:54:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E07852092B511EF8A210DB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d8:30:76:67:76:ee:af:d1:14:d2:25:85:d7:e8:58:7d:5d:
7c:d0:24:0b:0b:f3:54:a8:e7:aa:59:d6:58:45:56:eb:7b:a6:
22:3f:01:a9:e4:54:1a:69:10:d4:46:83:e9:07:1d:53:51:6f:
be:7f:81:77:fa:bf:75:dc:69:93:f6:62:72:35:af:77:20:21:
f4:44:cc:a4:71:f4:08:89:93:11:b5:a5:4d:05:03:87:6b:ec:
a9:60:99:48:65:82:a6:0f:88:3f:98:eb:05:87:26:c0:d7:4a:
d8:05:16:d2:6a:a8:0c:27:23:c8:8a:09:e9:7e:b9:83:7a:90:
33:3f:45:02:f9:3b:96:72:4b:5d:cc:56:11:5f:c1:f7:0d:3c:
db:6c:10:00:7f:85:b3:ef:3d:06:25:3f:a8:14:e2:95:c1:da:
13:6a:dd:85:01:b7:82:cb:8d:66:58:e3:2f:5b:e1:b0:35:74:
cf:13:73:b2:82:db:3f:4d:ad:e9:6e:79:78:97:fb:c9:29:56:
08:db:87:3c:a1:34:63:c1:26:8a:8c:61:cc:60:c9:2f:8f:92:
0b:21:2b:b8:1d:b5:01:bf:85:e2:7a:0d:90:e7:2f:96:eb:74:
d4:bf:cd:22:fc:28:0c:14:53:8e:87:4d:de:90:88:7d:fc:24:
12:b6:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org