Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD682D6E5F1711EFA15E0D99762E951A.roa
File: FD682D6E5F1711EFA15E0D99762E951A.roa (raw, json)
Hash identifier: pi91++UanIXYMtubRiYoX4F3fmiCpkSB6M7ZH6jJttU=
Subject key identifier: 7C:5D:1F:1D:CC:55:37:76:45:AA:B3:8F:34:63:56:C0:D1:21:64:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E34C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD682D6E5F1711EFA15E0D99762E951A.roa
Signing time: Tue 20 Aug 2024 17:16:51 +0000
ROA not before: Tue 20 Aug 2024 17:16:48 +0000
ROA not after: Tue 21 Jan 2025 17:16:48 +0000
asID: 63199
IP address blocks: 154.207.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58188 (0xe34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 17:16:48 2024 GMT
Not After : Jan 21 17:16:48 2025 GMT
Subject: CN=66c4cf83-6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:df:6d:0a:b1:87:95:31:84:d0:ea:ca:d4:
23:bc:5d:23:65:86:92:1a:3a:bd:83:f3:23:13:d5:
b6:46:9e:a1:7a:61:b5:59:a7:fe:4c:bc:47:78:d1:
f9:cb:ff:a9:ae:c6:33:ae:6a:27:a1:e5:2a:2c:ed:
cf:de:ff:1c:85:16:66:5d:3b:3e:62:16:b5:3a:4c:
bc:9d:fe:e4:9c:e2:54:4c:96:67:6b:27:6c:f6:3b:
15:d0:6d:19:56:a7:e0:14:08:cc:17:f8:ee:eb:eb:
d9:61:56:04:59:3b:ab:35:2f:3c:52:7c:69:8c:bb:
78:f7:f7:34:01:09:e0:99:01:93:82:9e:b8:a4:b8:
80:65:d0:b7:fe:e4:ee:8c:e4:9a:3b:ca:3e:21:20:
6c:1f:60:2c:74:9d:75:02:da:42:a3:a9:b7:e0:84:
63:b9:2a:4b:c0:ea:34:53:a5:4e:ea:ab:7b:2b:16:
a7:ed:06:6f:40:4d:a6:3b:fe:04:a6:3d:ac:fa:3f:
fb:20:5e:ba:25:19:a7:93:15:60:5c:bd:50:92:18:
06:20:71:92:06:44:fe:d9:34:11:5c:77:81:58:06:
e1:d9:99:08:85:45:bf:ea:6f:d4:d6:fc:c6:d2:03:
9d:20:91:34:7d:ce:b7:b5:53:75:90:b9:d4:a4:aa:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:1F:1D:CC:55:37:76:45:AA:B3:8F:34:63:56:C0:D1:21:64:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD682D6E5F1711EFA15E0D99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.106.0/23
Signature Algorithm: sha256WithRSAEncryption
43:49:38:06:6e:6c:07:93:27:84:57:57:a4:53:8c:f3:ad:3a:
79:28:36:01:b0:da:0d:71:03:5c:17:ed:35:d8:08:46:eb:1d:
78:18:e7:bf:53:da:9a:24:d7:db:6c:e7:6a:21:9d:a0:72:44:
ed:c8:6e:30:1e:a8:d6:6e:09:dc:8c:1a:85:2b:84:73:4f:6c:
a4:48:61:d7:76:cf:89:12:c9:48:f9:53:9c:2e:3f:93:d4:fa:
f5:c1:35:58:3f:5e:31:04:2e:80:3a:8a:8a:8d:35:84:d3:2b:
0a:6b:ab:a1:ea:31:ad:8d:f0:0d:c0:18:21:97:65:c7:e8:2c:
e4:1e:54:38:12:9e:15:8d:05:de:6f:d4:ff:b9:c3:ec:0a:1a:
4f:6f:be:43:31:ad:0e:1f:1a:fa:cd:cb:be:36:21:09:2b:37:
b8:e0:fb:f4:d5:f9:d9:40:80:d7:30:06:c7:8d:84:43:8e:dd:
14:78:a8:71:c0:90:0b:28:17:ee:aa:eb:77:c8:04:20:1a:d6:
71:87:72:f6:d5:21:ae:fc:7b:02:6c:63:a0:ff:65:cc:0e:1e:
f8:91:36:7a:14:74:56:ee:8a:9d:a9:b6:ef:a5:17:fe:83:5e:
2c:92:32:98:74:2b:9e:d3:0d:a1:bd:7a:1b:f1:a6:4d:10:41:
b4:8f:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org