Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8E31025EEC11EF84871D72762E951A.roa
File: 7F8E31025EEC11EF84871D72762E951A.roa (raw, json)
Hash identifier: AQfL5lQPzmNocZIAJXJqHTzj/6dn/ykAwlabyNMgHU8=
Subject key identifier: DF:91:D8:8D:DD:AD:7C:1C:FC:5E:E1:DD:C9:6F:49:1C:8F:3D:FD:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E1FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8E31025EEC11EF84871D72762E951A.roa
Signing time: Tue 20 Aug 2024 12:05:32 +0000
ROA not before: Tue 20 Aug 2024 12:05:27 +0000
ROA not after: Tue 27 May 2025 12:05:27 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57854 (0xe1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 12:05:27 2024 GMT
Not After : May 27 12:05:27 2025 GMT
Subject: CN=66c4868c-7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:81:95:b3:7b:fe:21:de:7f:65:41:a7:0c:
17:06:25:5e:75:db:9f:0e:f2:d4:e2:7b:25:16:3c:
02:3b:84:ca:8c:c5:d8:c7:5c:dc:dc:a1:0c:05:63:
9c:a9:4f:02:04:93:35:a4:b1:09:f8:54:d2:d1:1b:
32:3b:d2:5d:2e:7c:dd:7b:8b:b4:e2:1c:d5:c1:7f:
ca:c0:76:bc:13:f8:e3:51:9d:d6:f3:11:25:a2:d6:
7b:8c:03:3c:d0:f8:3e:ba:45:67:15:fe:0c:6a:cc:
cd:3f:81:bc:1a:fc:b0:54:6d:5c:c8:cf:e1:c5:8c:
d0:15:01:ff:c8:66:29:d3:7b:61:3a:85:d8:68:22:
13:cc:72:67:c4:6f:23:be:73:fb:a4:a5:e6:ae:6b:
be:7d:6e:19:68:dd:a8:54:68:43:2c:f9:d4:c6:79:
0a:65:f3:76:40:bc:46:2e:f0:bb:89:89:c5:6b:9d:
28:09:89:16:cb:89:fb:e0:74:6c:41:f1:c4:bd:28:
67:1c:b2:f4:a9:a7:f6:cf:a3:af:c5:aa:85:88:2f:
35:db:ce:1c:59:62:a0:75:fd:9f:98:2c:41:6d:18:
cc:4a:fb:5d:36:88:6b:16:6b:22:ba:96:9d:0a:c8:
68:da:1d:41:1d:e9:f2:a4:9c:79:0c:ac:e9:89:65:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:D8:8D:DD:AD:7C:1C:FC:5E:E1:DD:C9:6F:49:1C:8F:3D:FD:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8E31025EEC11EF84871D72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:6a:68:0a:6a:9a:4b:32:15:80:85:16:93:a1:b7:c6:e7:74:
38:07:de:49:bd:d1:c0:e9:f0:43:1b:96:6b:47:2e:ef:8f:6c:
4b:a0:c2:9d:41:06:e5:3a:6f:2f:96:eb:ba:94:b3:19:10:42:
03:a4:22:33:04:62:a9:0d:1a:22:13:af:3b:76:d0:ec:09:bd:
eb:59:28:04:a0:73:b5:3f:ec:b2:6c:19:24:1e:55:dd:4b:33:
5a:6b:0d:84:91:d2:5e:b8:c4:ce:a8:b8:d1:36:b2:6e:e3:27:
30:6a:34:67:34:5b:c3:57:d1:73:07:36:55:13:51:f6:40:eb:
f6:32:3c:91:c7:8c:08:c9:82:46:21:7e:a2:0c:06:35:15:2c:
7f:53:84:e6:88:5e:41:ab:28:5d:c3:40:ae:8c:b8:57:2c:15:
4c:bd:08:73:eb:45:c5:89:88:2a:07:bf:9c:b0:c0:9e:6a:79:
ef:5f:8b:83:b1:bb:b5:b8:18:d0:38:93:f0:96:5a:68:8f:ad:
0a:7f:2f:bf:44:32:e7:85:e0:72:70:0e:3f:a4:82:2c:72:77:
15:30:ec:7a:4f:c5:a6:24:c8:ac:fc:76:00:6b:e8:e8:92:92:
e0:6f:27:4a:9c:e6:9f:4e:a4:58:48:e0:e1:f3:1e:95:7b:a6:
c9:f4:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org