Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A350EA9AAA11EF8B940B5D762E951A.roa
File: 86A350EA9AAA11EF8B940B5D762E951A.roa (raw, json)
Hash identifier: +iP4adg/w0KmjPRsv/Gt9m4CADi7lYDYyaNU/8AT4sA=
Subject key identifier: 11:93:2E:64:78:AA:72:5E:C3:72:9E:D2:7A:97:77:1C:85:B1:67:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A350EA9AAA11EF8B940B5D762E951A.roa
Signing time: Mon 04 Nov 2024 12:44:27 +0000
ROA not before: Mon 04 Nov 2024 12:44:23 +0000
ROA not after: Tue 03 Dec 2024 12:44:23 +0000
asID: 141883
IP address blocks: 154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67242 (0x106aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:44:23 2024 GMT
Not After : Dec 3 12:44:23 2024 GMT
Subject: CN=6728c1ab-3db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:43:53:35:6d:00:0e:90:c4:9a:be:52:d1:
dd:5d:ae:4d:d5:df:ac:ea:22:bf:f6:38:84:0f:14:
0f:6d:79:ec:3f:e3:82:70:31:eb:af:18:a2:b6:02:
eb:aa:35:80:cb:5c:f0:c3:ee:65:8d:18:e3:27:62:
d6:35:01:a9:c5:6e:07:e8:71:24:43:37:6d:53:d0:
cd:9b:e3:ab:02:00:fa:45:50:31:68:b8:9f:95:5a:
f1:31:69:0e:67:a4:6c:27:66:8a:63:f1:d7:b3:bc:
8d:8a:a7:aa:91:2a:d8:ba:45:a8:d1:d0:cd:14:08:
7e:e2:80:8d:bb:39:2a:ce:a0:23:54:bc:3b:6c:96:
bc:6c:00:b8:af:a1:65:a6:24:a4:99:88:c6:a9:d7:
56:84:40:e4:c3:2e:0d:de:f7:59:41:6b:fe:e8:c7:
6e:82:b5:9d:58:ab:69:ec:c4:e6:61:4f:0d:4b:6d:
ef:11:9e:b7:6e:21:f5:39:6c:41:8e:4e:ab:2d:7c:
8a:2c:84:71:fc:65:52:88:da:30:87:bd:17:3d:a7:
93:cc:e4:46:8c:b4:a3:dd:7b:e7:cd:e8:e1:ac:25:
7f:49:a8:75:66:43:02:af:9f:c4:d0:b4:05:57:6d:
3c:ab:c7:fd:00:7b:44:f8:55:76:bd:7a:6f:a4:3c:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:2E:64:78:AA:72:5E:C3:72:9E:D2:7A:97:77:1C:85:B1:67:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86A350EA9AAA11EF8B940B5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1a:bd:cd:a7:1b:2a:bb:13:40:fc:90:3d:51:5e:da:08:e1:
13:d0:fb:2f:38:67:ea:70:24:8c:a8:ce:72:32:6a:52:51:f7:
84:d7:af:ee:43:dd:e6:84:4b:17:27:7f:5b:c6:a6:65:31:d3:
6b:45:0d:11:66:57:da:1c:5d:1d:af:31:bf:b2:61:dd:6e:48:
a6:4d:70:28:36:00:32:c0:4e:a6:83:88:02:89:15:51:e2:3d:
a6:41:20:58:6b:31:01:f7:00:26:9d:86:43:ec:8f:a4:14:55:
72:b6:27:3c:78:04:8d:bf:47:0f:09:b1:88:c5:fe:47:1e:bb:
0a:54:39:5f:73:8a:f2:9d:a0:7a:9c:f7:b9:0d:79:85:ff:94:
18:17:b0:99:e2:57:a8:9e:b7:5e:03:e9:96:3b:19:1d:52:fa:
5c:ec:76:5f:a4:53:ec:4e:e6:a3:59:01:18:1f:a8:89:c0:35:
57:fb:5d:05:df:56:a6:7b:6c:e0:97:6b:4d:3b:b5:61:ae:7d:
cf:23:63:e0:c3:14:f2:45:f9:52:64:d2:ec:b7:25:ad:75:e4:
7d:47:fc:b9:f8:09:e8:45:3f:b4:5e:06:1a:62:3f:ec:54:23:
30:1b:de:46:d2:bf:72:37:cc:b2:d5:b7:f9:5d:0e:72:a2:47:
05:b0:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org