Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60D8EC49DA211EFB513CB9E762E951A.roa
File: E60D8EC49DA211EFB513CB9E762E951A.roa (raw, json)
Hash identifier: UOcLYm4JLT54LyTlwdAP6pNVGNm677RIs+SLu6hbdmo=
Subject key identifier: 6A:AA:5C:A9:52:5E:A1:8B:D8:9F:99:88:5C:66:CF:99:17:F0:C1:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60D8EC49DA211EFB513CB9E762E951A.roa
Signing time: Fri 08 Nov 2024 07:27:24 +0000
ROA not before: Fri 08 Nov 2024 07:27:20 +0000
ROA not after: Sat 30 Nov 2024 07:27:20 +0000
asID: 150008
IP address blocks: 154.206.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68028 (0x109bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:27:20 2024 GMT
Not After : Nov 30 07:27:20 2024 GMT
Subject: CN=672dbd5c-4c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:ab:e9:38:39:ca:a0:15:e0:68:b4:6d:90:
a3:f7:27:fe:95:1d:07:77:f4:2f:a7:5b:3c:55:d8:
7d:c0:1c:fa:1c:4b:fb:70:32:bf:35:0a:90:ec:cf:
b1:0d:0c:09:08:7a:f2:4c:d4:ca:4e:b6:04:21:ae:
7e:e4:19:ad:4a:69:35:85:b4:de:fa:3f:87:89:48:
f7:16:7c:ae:80:45:53:e1:fa:06:91:f2:dc:42:97:
41:0d:07:43:67:34:fd:dc:01:9a:8c:1a:a3:5f:71:
e0:bb:ce:19:b2:94:93:0d:60:c5:7b:92:1b:a5:9c:
5c:1c:50:9e:f8:c4:37:53:10:ee:82:cc:e7:3b:86:
f8:46:ec:4c:4c:50:dc:e5:a4:e3:6d:e4:fb:53:96:
74:ee:81:cb:ac:5e:7d:1f:a7:77:62:57:6c:e1:69:
45:ee:8f:70:98:72:51:5a:c9:c2:42:bd:16:6b:5a:
72:d7:e6:11:e0:55:6e:b7:d2:df:58:4b:53:ba:e3:
73:d7:e5:28:b8:52:3e:98:42:97:f2:b8:e8:47:13:
bd:c1:f9:d7:c4:6a:5c:40:20:c8:09:73:b0:18:03:
d1:77:1c:bb:07:55:57:f5:96:96:97:83:11:ac:30:
14:dc:3f:e9:5b:b2:ab:58:c6:f8:19:d8:e8:e2:4c:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:5C:A9:52:5E:A1:8B:D8:9F:99:88:5C:66:CF:99:17:F0:C1:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60D8EC49DA211EFB513CB9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.18.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b9:50:97:aa:28:81:54:67:ed:b3:22:d2:c3:8b:04:c1:92:
24:45:81:96:b7:a3:1b:6c:df:43:7b:0a:5d:be:05:fd:a9:99:
c7:c9:ad:60:a2:e9:fd:5f:e6:97:8b:f2:e0:0b:da:10:93:19:
f8:68:3c:28:60:bf:7c:3e:fc:34:4f:ff:a6:6c:b5:59:f4:db:
6d:42:bd:60:c8:9b:db:9d:a9:7b:50:42:8f:c8:6d:8c:5f:0e:
17:83:b6:95:9c:fe:81:99:dd:2d:bc:0d:e5:cc:7e:36:19:56:
fd:9f:5f:b6:df:d3:8d:a3:c3:9d:3d:1b:45:ab:8b:a1:87:8b:
1d:20:3f:ef:19:a6:43:c0:75:6c:3f:f1:f8:2d:cd:74:22:9c:
b1:1c:68:7e:5e:d4:6c:5f:3f:8d:e0:b7:3a:40:7b:d3:47:32:
d9:b8:64:a5:8b:bf:69:bc:57:27:65:0d:bb:7f:92:b5:4f:e0:
79:15:cd:ad:9f:9e:aa:a9:0d:99:e8:5a:87:5f:86:93:fc:9a:
6a:17:5e:2c:72:a3:cb:c7:20:bd:18:47:e5:fc:39:8d:0e:45:
3d:f8:6e:48:ce:90:3b:91:56:f6:ab:0b:23:60:2c:6d:4d:3f:
56:96:72:04:75:b9:42:c9:df:8f:67:aa:74:32:31:33:4b:e4:
21:e5:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:51 2024 by rpki-client on console-fra.rpki-client.org