Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A2FCB2725811EFA7A2756C762E951A.roa
File: C4A2FCB2725811EFA7A2756C762E951A.roa (raw, json)
Hash identifier: 1KkoZWIFzBKTrxOUx2XxjbdxhwDkHNadYnwOOxV61t4=
Subject key identifier: 0A:38:9F:14:F4:FE:DE:96:70:FE:3B:C4:1D:B9:74:87:C0:C2:3A:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A2FCB2725811EFA7A2756C762E951A.roa
Signing time: Sat 14 Sep 2024 05:18:25 +0000
ROA not before: Sat 14 Sep 2024 05:18:22 +0000
ROA not after: Tue 31 Dec 2024 05:18:22 +0000
asID: 17561
IP address blocks: 154.217.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60900 (0xede4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:18:22 2024 GMT
Not After : Dec 31 05:18:22 2024 GMT
Subject: CN=66e51ca1-f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:1c:3a:87:c2:02:ae:6f:44:31:1a:eb:d5:
ce:b4:e1:ce:a9:9b:8f:06:4c:29:f4:1a:a8:97:c7:
1b:35:de:a4:b1:54:1a:f2:65:18:85:dd:83:ea:7e:
fd:3d:03:b3:06:a6:27:37:81:4d:44:37:e8:ca:01:
1a:1a:34:2b:6a:5a:1a:82:20:c4:39:a8:91:ec:9a:
59:67:5b:f9:cf:be:37:a5:40:2d:08:e5:9c:e6:9f:
07:82:5c:bd:e4:6f:98:7d:8f:8d:d0:0e:ee:2e:c1:
05:29:61:fc:82:60:9b:d8:f6:f5:cb:d8:75:80:00:
cb:4d:d2:cc:94:fd:a0:5a:cc:d0:0b:d5:db:2b:ac:
73:96:15:fe:ef:3f:b1:65:bd:ee:9a:6f:6b:5b:a2:
41:8b:22:fc:a1:22:4f:8d:bb:c2:6b:bd:4d:2d:5a:
81:88:3f:a3:55:65:ed:0e:a5:aa:df:5e:03:fe:9d:
bf:72:0d:10:b0:ec:52:8c:45:e1:a2:b2:76:85:58:
10:ae:a2:98:bd:6a:07:22:79:c1:e7:2a:8c:48:c2:
6b:8d:f9:0b:7c:db:5e:e9:79:4c:32:41:e8:f1:43:
e5:d9:6c:bd:ca:b9:5c:73:4d:d1:ef:09:e9:73:fe:
eb:ca:4e:c5:16:ec:e7:ec:6b:a2:2e:a5:5f:d8:0e:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:9F:14:F4:FE:DE:96:70:FE:3B:C4:1D:B9:74:87:C0:C2:3A:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A2FCB2725811EFA7A2756C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:31:04:60:31:88:38:d9:f9:3e:a9:33:9b:ae:8b:30:f3:d5:
75:dd:a8:03:bb:03:3d:dd:9a:fe:7d:c5:15:be:d7:d2:2f:b0:
d0:4e:0a:c2:29:64:d8:4e:41:3d:b5:83:e4:49:8b:e7:bc:d4:
53:96:5a:b9:37:ea:d4:34:cb:cb:ef:19:c0:f5:63:b2:aa:df:
16:fe:e1:91:46:53:68:ca:e1:a7:00:b2:f4:50:89:ee:6c:cb:
89:37:66:20:73:9b:54:3a:32:fd:07:b5:b3:49:38:31:b7:2c:
53:b7:61:54:4a:12:7d:39:85:a2:1f:ab:6e:54:4b:f5:c5:35:
22:0f:0b:d3:0f:e0:e1:69:7c:48:e7:65:86:b5:56:10:ae:46:
b2:95:27:9f:0d:95:dc:b3:dc:68:09:12:53:28:17:07:8e:a5:
02:04:92:94:d5:4e:32:16:cd:34:2e:16:ec:11:11:de:4c:8f:
bf:b5:bc:9f:10:ed:28:9f:ef:08:a8:05:4d:22:fe:6d:0f:ed:
1e:8c:73:fd:4d:35:26:e1:ae:f4:2d:f2:63:fe:9d:6b:d4:5f:
9b:aa:f3:a7:b0:0a:3f:f2:58:5b:aa:a1:56:60:97:7b:75:7c:
e0:a5:18:13:7f:07:8c:c7:dc:65:e3:a3:f2:32:8a:56:09:e0:
fc:bd:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org