Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869EF27E985D11EFA7F60159762E951A.roa
File: 869EF27E985D11EFA7F60159762E951A.roa (raw, json)
Hash identifier: I0bX8lJx48akXg4dCONbIVBlxM6OoA6ieSRZmQyhFtU=
Subject key identifier: 11:04:67:05:2A:4B:5E:6E:93:EF:E4:0D:0A:B1:CF:27:69:B1:81:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869EF27E985D11EFA7F60159762E951A.roa
Signing time: Fri 01 Nov 2024 14:28:13 +0000
ROA not before: Fri 01 Nov 2024 14:28:09 +0000
ROA not after: Tue 03 Dec 2024 14:28:09 +0000
asID: 203020
IP address blocks: 154.208.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66757 (0x104c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:28:09 2024 GMT
Not After : Dec 3 14:28:09 2024 GMT
Subject: CN=6724e57d-abca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:c6:e3:0d:bb:c2:6f:33:d1:f4:93:fa:d4:
34:df:d5:db:b4:8f:e8:6e:2d:7d:1b:e7:9f:19:a2:
ea:9d:2a:3b:06:3c:a5:49:1c:bd:3c:90:8e:87:52:
ad:d9:08:a9:3d:15:90:3b:cb:15:12:3e:9f:f5:f4:
f2:69:d3:6c:c7:43:72:b0:57:2d:c0:a8:91:a5:ba:
e4:75:ef:df:2d:03:e7:ae:f0:9f:d4:c7:61:33:1a:
2b:b7:f9:02:a0:46:ef:d0:dd:9b:93:47:97:4a:7b:
7d:01:22:c3:35:4e:b8:88:3b:8d:37:94:e1:b7:88:
56:63:a3:81:da:7b:1a:40:6e:86:24:98:27:53:4b:
3e:fb:86:09:b4:c0:9e:72:1f:dd:8c:ef:f2:0c:c9:
50:17:4c:cf:d5:dd:58:95:06:d8:c1:f4:73:37:1c:
22:c8:4c:1e:af:03:ca:bf:d6:73:0a:77:b4:cd:54:
d8:a8:ad:47:3b:f0:ba:70:37:f5:d4:00:06:d7:a3:
0f:8e:04:9a:5c:55:49:63:11:f1:66:3a:17:43:d6:
ea:b0:f3:70:ca:c8:39:10:81:e8:ab:a3:d4:db:d3:
68:06:f5:c3:5e:59:b8:86:95:26:68:21:5e:22:f0:
06:b1:c5:ac:9b:fb:fc:ca:43:b7:f9:f8:f2:c9:68:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:04:67:05:2A:4B:5E:6E:93:EF:E4:0D:0A:B1:CF:27:69:B1:81:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869EF27E985D11EFA7F60159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.136.0/22
Signature Algorithm: sha256WithRSAEncryption
42:73:6e:1c:e7:a1:52:95:21:5e:38:6d:7b:fd:1a:02:27:a1:
36:6a:5d:7c:45:da:0f:37:96:53:d0:83:82:26:5b:0e:ca:51:
b1:3b:04:22:34:9d:06:57:cf:92:e3:bf:5e:45:2f:e6:b5:a4:
39:5e:21:29:29:af:77:43:0f:d3:a2:02:d3:7f:da:ec:ee:12:
7b:59:b8:69:b4:4a:67:c5:87:01:9a:c1:68:f0:c0:a6:41:54:
c8:33:55:d6:f8:45:d7:6f:29:9e:30:da:fe:96:22:0d:43:51:
5f:3c:00:44:5e:8b:83:39:6d:88:66:0c:ff:94:fa:28:ad:bd:
14:9d:64:07:28:67:f1:5d:fc:f6:8f:41:96:e0:7e:a8:78:c3:
90:72:63:4f:9e:56:6d:13:e5:41:fa:cf:d8:b1:a8:3c:4e:61:
20:d0:50:3b:47:df:9a:9c:e0:60:0a:34:bc:fb:c5:ee:5e:27:
53:6e:33:ec:06:28:ad:29:04:d4:35:89:55:70:e5:fd:85:e7:
d6:db:22:99:29:2a:cc:09:55:70:17:69:4a:6c:d2:3a:47:fe:
60:ea:ea:c5:3d:95:62:11:75:7d:69:a8:f3:b5:86:a2:c6:62:
ee:5a:89:a6:59:c5:74:4e:84:3e:fd:f7:da:aa:69:bf:49:81:
42:a2:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org