Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21D177E736711EF85D1D246762E951A.roa
File: C21D177E736711EF85D1D246762E951A.roa (raw, json)
Hash identifier: lV8qw8uPlV8OF/3Nzq7CZB4BxjibrIYzSo3GMLPXtYY=
Subject key identifier: A5:2C:92:B4:81:E9:51:1F:2B:32:A6:29:CC:F1:D8:32:41:95:30:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21D177E736711EF85D1D246762E951A.roa
Signing time: Sun 15 Sep 2024 13:38:15 +0000
ROA not before: Sun 15 Sep 2024 13:38:11 +0000
ROA not after: Sat 30 Nov 2024 13:38:11 +0000
asID: 138152
IP address blocks: 154.94.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61220 (0xef24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:38:11 2024 GMT
Not After : Nov 30 13:38:11 2024 GMT
Subject: CN=66e6e347-3402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:c5:40:1c:e2:a6:1c:9b:65:00:86:b0:87:
06:0c:f7:26:c0:f0:f5:93:1e:36:1b:75:24:9e:38:
90:aa:61:0a:75:64:24:7b:c2:88:92:a7:c8:59:00:
cc:32:95:72:ad:15:4f:8a:c9:30:a0:ff:ce:03:06:
83:6f:c9:f3:73:c1:e6:14:25:c9:d5:92:68:20:e3:
4a:90:35:3e:2e:23:c2:7f:66:89:c1:62:a3:80:53:
ba:74:18:4a:00:b7:cc:ce:56:cb:a3:aa:a2:43:19:
ea:79:c9:e4:a7:00:ea:81:6a:7c:f7:d5:bd:0f:8e:
04:95:6c:d4:74:49:c8:1d:bb:49:5d:bf:bd:24:13:
a6:a6:78:23:19:2b:de:0a:cf:28:5b:b7:7f:46:a4:
3c:dc:60:44:b0:a4:2c:70:f8:50:ca:bc:5d:eb:90:
7a:5c:c2:52:36:7b:44:a1:af:61:09:84:63:ff:9a:
a0:e2:a7:0c:16:14:a0:d8:8f:b4:c8:ce:16:cf:30:
92:48:2f:2d:30:39:0e:3b:2b:cf:1d:86:76:85:e6:
d0:d5:00:13:0d:4c:2c:ad:8e:ee:e9:e4:91:6b:86:
e6:20:de:f2:38:35:11:15:36:79:97:47:64:e3:e5:
88:66:ec:8f:51:15:67:06:4a:13:ec:3e:59:7f:3a:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:92:B4:81:E9:51:1F:2B:32:A6:29:CC:F1:D8:32:41:95:30:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21D177E736711EF85D1D246762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.4.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d2:e4:66:fd:41:5d:e2:3b:ee:be:b9:ba:1a:e2:a4:b2:fe:
ed:f9:7d:dc:77:1a:3e:86:c7:3f:81:96:21:30:ca:a3:4b:0d:
f5:69:ef:97:66:7d:d3:c5:7d:79:f9:6b:e5:7d:2f:ba:d5:a4:
e2:44:79:29:f3:23:18:f4:93:a0:31:d6:82:83:c2:b2:5a:4d:
34:a6:98:12:28:b6:ce:a7:93:c6:fb:af:ff:7c:76:0f:93:18:
66:da:5c:8a:1e:30:eb:d4:a3:8c:40:23:0e:e2:98:29:c4:2b:
c9:fc:22:cf:59:c7:85:4b:37:28:c1:7d:3a:14:60:b2:d3:6c:
e2:c6:af:95:79:88:6c:65:40:22:c8:ee:86:d8:24:98:6f:92:
4d:f6:ff:fd:a6:b6:53:ac:40:9c:b1:4f:cf:82:c8:6c:58:f5:
5c:27:64:b5:d1:8b:cf:3f:a6:87:96:b0:9d:13:b7:9a:51:72:
b0:3a:6a:d1:ca:a2:fb:a0:1e:a2:06:9c:f2:ee:30:dd:c0:18:
dd:66:26:d1:bb:0a:f3:6f:0c:74:5b:62:2c:50:ef:8d:ee:e5:
9b:14:95:d6:a5:ae:80:73:fa:09:47:5f:5c:6c:f8:3f:f0:d8:
33:f7:32:45:fd:b4:e8:6c:35:ef:6a:b5:48:85:fa:5e:4f:a2:
1d:a0:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org