Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8894E4E6A44511EFAA6A8C80762E951A.roa
File: 8894E4E6A44511EFAA6A8C80762E951A.roa (raw, json)
Hash identifier: TUE2biHpB+K0virxIm++npl/N0I3CJNqGfYtdNhrF1s=
Subject key identifier: 64:E4:21:AA:BC:50:AD:D3:85:78:ED:61:5F:DC:E9:0C:77:0D:82:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8894E4E6A44511EFAA6A8C80762E951A.roa
Signing time: Sat 16 Nov 2024 18:06:42 +0000
ROA not before: Sat 16 Nov 2024 18:06:39 +0000
ROA not after: Mon 25 Nov 2024 18:06:39 +0000
asID: 5065
IP address blocks: 154.207.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 18:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69095 (0x10de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:06:39 2024 GMT
Not After : Nov 25 18:06:39 2024 GMT
Subject: CN=6738df32-aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:87:c4:1b:f0:e5:58:74:84:a2:73:6b:f5:
f0:b3:21:91:90:e5:7b:1d:28:d5:9d:4c:6e:dd:7b:
83:d0:c6:f0:5b:05:e4:bf:7d:3b:a8:78:c8:73:ff:
c4:bf:67:1c:f2:87:3a:79:36:f8:49:90:7a:63:a5:
10:7f:57:f2:44:d4:e2:0f:68:27:1d:00:1c:df:e3:
a9:60:5b:95:03:d1:59:39:96:b7:59:5f:eb:83:b0:
91:7a:b2:7d:30:83:b2:8d:a3:47:6e:55:c0:7a:da:
8d:de:3a:34:1f:9c:f5:f5:df:50:20:ee:d5:7b:4e:
65:e2:69:04:cc:43:8a:55:ec:d3:1b:cb:08:71:d5:
e7:83:e7:1f:60:ac:7e:4f:61:d1:f3:30:24:d8:08:
1b:05:b3:e0:67:9f:1b:9b:a5:fe:c2:08:39:f4:12:
b5:05:fa:63:c5:46:95:5e:68:e7:e7:d7:64:30:6d:
0e:2e:35:2d:4d:3d:3c:c7:ca:69:66:0b:4d:5d:b3:
02:d0:ce:84:cc:2b:78:c8:88:10:3c:54:37:5e:d8:
ac:23:a9:69:9a:a3:2e:f2:fd:30:ec:ec:cd:b2:4b:
fe:67:25:b3:02:3f:b7:1f:a0:d0:8e:6a:eb:47:af:
31:06:46:d3:b4:af:7e:d3:63:0b:6f:46:31:84:0f:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:21:AA:BC:50:AD:D3:85:78:ED:61:5F:DC:E9:0C:77:0D:82:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8894E4E6A44511EFAA6A8C80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.166.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d3:4b:83:29:a1:48:57:de:91:a1:86:89:41:6a:67:4d:f1:
46:de:b7:90:29:d0:5a:fa:11:d0:ed:07:47:0b:d8:b5:9e:03:
0a:d4:05:79:bf:81:76:cf:45:1b:e5:ce:51:8c:81:dc:32:a0:
8d:74:93:d6:7c:81:d4:13:d4:5f:39:45:33:ca:14:e6:85:f2:
a6:28:38:81:8c:85:eb:13:71:6d:08:07:6b:d6:be:f4:75:24:
b5:2b:97:8c:56:bf:34:ad:4e:f5:35:cd:31:54:92:a3:88:8a:
3c:0f:c5:9e:34:75:b1:3c:06:c2:f7:6f:a8:d0:f8:58:ba:42:
ed:1c:07:ec:a0:09:28:83:bd:27:71:d7:13:f0:51:42:0b:39:
1b:71:ae:e0:49:2a:ea:dd:18:37:37:83:75:3a:1d:49:52:f1:
72:dd:34:d1:0a:59:55:06:de:74:15:84:7e:64:a0:8b:b9:b0:
6c:be:40:5c:46:f7:48:ef:dc:2a:7c:9b:d6:f5:cf:d2:9c:99:
b3:c7:4a:e3:c9:eb:58:97:50:cb:34:e6:9e:f2:81:07:42:dd:
65:f2:08:69:64:25:ac:82:14:55:00:6f:7e:7c:1c:70:d7:49:
b5:45:64:1a:e4:dc:8c:01:f0:99:d7:f6:07:a6:05:64:d7:28:
cd:e0:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:07 2024 by rpki-client on console-fra.rpki-client.org