Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6274BB4A15C11EFB527A949762E951A.roa
File: C6274BB4A15C11EFB527A949762E951A.roa (raw, json)
Hash identifier: yqn6bEIViz8sofztlZ0Hcl6s0qc/CEkjynd9dD8xwiY=
Subject key identifier: E1:E2:29:0B:66:A7:6E:D1:F7:11:CA:68:70:ED:88:B8:85:9A:B7:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6274BB4A15C11EFB527A949762E951A.roa
Signing time: Wed 13 Nov 2024 01:15:30 +0000
ROA not before: Wed 13 Nov 2024 01:15:27 +0000
ROA not after: Fri 04 Apr 2025 01:15:27 +0000
asID: 55967
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68723 (0x10c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 01:15:27 2024 GMT
Not After : Apr 4 01:15:27 2025 GMT
Subject: CN=6733fdb2-eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:af:a3:95:10:a0:a3:13:17:60:c6:f2:5c:
56:a8:63:d0:6d:d9:4a:14:4b:8e:11:2c:33:86:bb:
41:d4:f4:8b:48:f4:9f:86:e8:18:b6:7a:08:27:1d:
23:bc:93:7e:84:db:c4:02:bd:57:66:f3:c5:e6:57:
41:b8:c7:d9:b0:0e:1a:a9:7a:3a:39:48:7f:97:d6:
61:3e:9c:9a:f0:5f:2d:7b:95:1c:44:89:4f:9c:fa:
d3:01:07:ba:bd:d1:d1:0e:e4:c2:16:da:32:c5:a1:
dc:a2:b1:80:87:24:e7:24:f6:e4:cf:90:2a:bd:86:
d4:df:86:eb:99:0d:85:b9:f1:82:3f:5b:2d:2c:96:
a6:7b:9a:d5:12:39:db:1d:26:bb:6e:1f:e0:5f:02:
ed:0b:4b:d5:31:fd:d2:ea:83:ef:9d:ce:53:0c:d8:
e8:c2:61:db:20:0e:10:59:ea:d5:fc:25:2f:4a:8f:
15:d8:56:6f:8b:75:41:9e:65:c7:a6:af:86:05:e8:
c1:2a:a9:ec:64:09:65:6e:20:dd:64:6f:f0:f8:43:
b3:dd:b3:69:a8:2a:70:89:9a:1b:00:20:7b:c7:38:
da:4a:86:5e:71:d5:f4:53:d6:3f:4c:e0:a9:f6:df:
e9:8c:cb:56:06:0d:a6:85:14:4d:0a:48:c6:8f:b0:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:29:0B:66:A7:6E:D1:F7:11:CA:68:70:ED:88:B8:85:9A:B7:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6274BB4A15C11EFB527A949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a2:4d:dd:27:7a:09:8a:c3:7e:04:8b:75:dc:5d:d5:74:b3:
db:fe:81:57:d5:17:08:62:fe:9a:4f:e3:1a:14:2d:55:eb:98:
7f:fd:06:b5:67:3e:36:84:96:bf:80:b7:47:3a:8d:b4:76:2a:
96:7c:5c:e0:ea:7f:59:fe:ec:fe:b6:30:3a:74:0c:57:4a:9c:
de:9f:af:68:d0:21:ab:3f:e3:b6:47:60:fa:d2:9f:dd:f9:4a:
56:e5:05:39:b3:05:e9:68:c0:b1:64:2d:ba:1f:c5:29:ca:e4:
27:d0:09:b9:8b:d4:76:8e:aa:b1:3d:5a:e3:d0:81:46:8c:3a:
19:82:9e:80:bf:5f:4f:7e:56:68:02:e4:3d:7e:12:b9:24:58:
6d:74:c7:df:61:56:36:fb:98:d1:d6:72:c0:c4:0a:4f:f1:79:
90:68:f6:b8:06:18:ba:90:12:fb:85:31:c6:57:f3:b1:27:d4:
27:8a:0e:32:64:44:3d:39:83:ba:71:24:8c:dc:ab:81:20:98:
1d:9c:5a:ec:de:d2:93:9b:2d:2a:95:33:91:32:1d:24:39:e1:
5a:63:44:75:47:24:fd:b3:6e:21:c7:9f:dd:eb:97:b4:79:78:
17:58:cb:47:0c:af:b4:0a:1a:91:2c:d9:9e:cc:c2:16:9f:2f:
15:18:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:35 2024 by rpki-client on console-ams.rpki-client.org