Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D5522A72311EFADDB318B762E951A.roa
File: AA6D5522A72311EFADDB318B762E951A.roa (raw, json)
Hash identifier: Q6CIpfQws200gZ1Cxw0Uvcj7ltiGvpQvFKaSr2zzatk=
Subject key identifier: 91:63:58:67:70:DF:B9:B1:B4:51:FB:DA:E3:35:B8:45:0C:98:2D:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D5522A72311EFADDB318B762E951A.roa
Signing time: Wed 20 Nov 2024 09:41:50 +0000
ROA not before: Wed 20 Nov 2024 09:41:46 +0000
ROA not after: Sun 15 Dec 2024 09:41:46 +0000
asID: 215240
IP address blocks: 154.216.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69491 (0x10f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:41:46 2024 GMT
Not After : Dec 15 09:41:46 2024 GMT
Subject: CN=673daede-f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:46:8b:16:8d:0d:78:53:dc:94:1b:64:85:43:
52:1b:69:79:2d:a2:54:6f:ad:c7:00:37:cc:5a:c2:
62:b1:e0:c6:cc:84:96:49:29:17:fc:e4:03:08:23:
0f:84:e3:25:38:d2:a0:47:99:d4:a2:a9:56:9b:8d:
a7:0b:44:4a:73:e4:04:b2:77:81:96:f6:f9:36:51:
30:fc:f1:78:53:23:fd:47:1f:d9:1d:13:8f:7a:86:
be:1c:67:31:99:8a:71:32:77:bb:a9:80:59:a6:e3:
69:c7:a1:c7:97:e7:b4:ad:76:1d:ec:d7:29:3a:21:
22:80:c4:78:e0:83:22:fe:22:38:3a:ae:eb:a3:ba:
87:fb:e6:dc:29:4a:56:4a:11:fc:2f:6f:12:87:29:
1d:f9:6e:a7:5d:f9:0c:34:c7:b6:b5:c0:64:29:d8:
c1:e8:73:80:cc:4b:57:7a:f7:ba:2a:6c:ee:6c:69:
28:41:d8:bb:af:5a:4f:ed:4c:4d:10:88:9f:e2:7d:
31:d7:2f:d7:20:05:56:22:2c:d3:fd:4d:fe:82:3a:
c6:c7:0c:92:75:54:5e:11:5d:72:c3:9d:3a:6b:af:
06:95:9b:a8:39:74:19:44:84:94:c7:a5:41:f4:85:
f6:56:67:21:2c:74:b6:b1:01:d5:5b:5f:cc:9c:65:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:58:67:70:DF:B9:B1:B4:51:FB:DA:E3:35:B8:45:0C:98:2D:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D5522A72311EFADDB318B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.20.0/24
Signature Algorithm: sha256WithRSAEncryption
24:90:00:e6:d1:17:df:0d:29:56:36:3d:85:8b:36:bb:f8:5e:
04:51:e6:40:05:cc:b9:f9:30:66:34:2a:91:5c:31:e1:9b:04:
ad:27:c0:0d:76:5f:b3:9e:18:b4:a0:e9:62:4c:06:58:1c:59:
60:8c:70:4c:a7:b1:92:ed:b7:8d:dd:60:4c:c9:ee:08:42:90:
ab:27:df:97:4a:95:7a:5f:1e:c7:b7:f2:da:09:f3:29:98:39:
49:dd:54:db:f6:79:7c:5a:7a:57:0b:0e:12:66:b8:a0:92:e0:
7a:7f:c2:6f:58:e2:e0:74:85:fd:d0:0f:6e:f1:6d:f8:56:77:
b5:76:c1:b1:39:62:f6:35:c9:aa:b5:92:e4:b8:c2:b7:c1:1d:
2d:11:45:ec:e1:d6:7f:58:5e:0e:91:c5:19:fa:1a:61:11:c0:
05:a7:b2:05:ae:c5:57:a3:b9:53:80:ee:fb:b2:f6:19:0a:f7:
e3:4f:b9:33:54:45:57:c0:58:6e:9b:29:88:32:d1:96:5a:d9:
22:e6:3c:80:fb:20:60:7b:23:45:7c:91:25:5b:48:71:8a:56:
9d:da:3e:87:1d:77:b3:80:18:54:57:dc:de:39:14:0b:75:72:
cc:3e:09:cf:91:96:42:88:83:a8:5b:31:5b:64:18:92:ab:1b:
ad:48:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:32 2024 by rpki-client on console-fra.rpki-client.org