Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/6069E9FA190611EFAAC79456017001B1.roa
File: 6069E9FA190611EFAAC79456017001B1.roa (raw, json)
Hash identifier: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=
Subject key identifier: 19:65:07:AE:84:3C:37:37:7F:3F:95:73:8F:EC:B0:D1:EA:6B:DF:0F
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 025A
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/6069E9FA190611EFAAC79456017001B1.roa
Signing time: Thu 23 May 2024 13:14:25 +0000
ROA not before: Thu 23 May 2024 13:14:22 +0000
ROA not after: Fri 31 Dec 2049 13:14:22 +0000
asID: 30984
IP address blocks: 154.113.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Validity
Not Before: May 23 13:14:22 2024 GMT
Not After : Dec 31 13:14:22 2049 GMT
Subject: CN=664f4131-f1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:6d:73:29:c0:9b:ec:71:68:3e:ab:99:74:
9f:57:98:da:ee:1b:a9:14:96:b5:97:fb:09:ed:ad:
fa:be:90:88:ff:ca:e0:9f:de:7b:4a:4b:41:cc:d4:
2e:e6:3a:e6:83:9f:24:23:c4:20:9e:5d:bf:ff:75:
8b:0c:e8:5c:af:29:05:1d:27:0b:10:71:4b:a0:cc:
6e:f2:29:1a:4e:98:8c:71:dc:74:36:35:81:e5:7e:
f1:e0:46:0c:98:73:34:85:b7:60:b5:b3:0d:6f:f7:
5c:32:65:27:1e:0d:14:26:c6:08:52:e5:56:8c:b9:
c6:1b:19:94:99:29:f3:e7:4a:02:9c:ff:ee:73:9d:
e4:72:76:67:29:d6:d2:ab:b9:e1:9b:68:0d:cf:d9:
bd:64:8d:f7:19:9f:f8:b5:5c:e4:a5:1e:18:66:e7:
e0:45:48:f5:42:e2:a0:d2:c3:4d:66:6f:3a:15:c6:
20:ef:02:9c:46:26:c5:e3:47:f6:a0:39:a7:d7:8a:
f3:1a:60:8a:a8:9c:a7:0d:85:62:db:db:62:07:cf:
bb:4b:be:89:8a:3c:b2:a5:8e:75:dc:60:56:51:59:
02:f9:a5:fa:0c:a2:d0:e1:47:13:4b:87:77:d0:b9:
1c:a7:d6:6e:ba:cf:b4:e8:8f:63:e9:b1:9a:01:b2:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:07:AE:84:3C:37:37:7F:3F:95:73:8F:EC:B0:D1:EA:6B:DF:0F
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/6069E9FA190611EFAAC79456017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2d:a0:79:75:f3:79:0c:78:7a:58:e6:7e:66:04:8e:19:2e:
31:65:79:4e:e6:33:4d:f7:5a:61:cf:80:d5:88:c5:ff:ac:23:
ea:f3:15:28:f6:9f:59:da:d4:b4:06:5a:59:67:00:cd:1c:18:
ae:f3:ca:6f:f1:54:ee:2f:32:15:3c:ad:36:eb:20:f9:2b:4a:
d0:3d:8e:f3:a7:69:49:2e:7a:54:7b:92:d9:6f:2d:89:e8:f0:
3f:17:f6:28:a2:0c:68:d8:f9:20:36:40:c6:c3:3a:0a:cc:05:
89:6d:17:e3:40:b5:15:9c:88:1d:a5:43:ed:4c:51:d6:9b:91:
90:de:c1:2c:d5:93:72:7f:a7:93:45:da:2f:bf:d7:af:ff:49:
62:11:30:8e:2e:39:88:0c:15:fd:0f:15:d9:6a:84:cc:7d:dc:
62:99:28:ae:f2:89:49:01:0c:d1:de:bf:0f:f8:b1:78:4a:44:
98:28:b7:2d:e6:d1:e3:cb:04:26:34:ee:15:df:6d:20:36:4a:
32:05:19:8d:90:76:c0:f5:9a:6e:e3:cd:01:b6:9e:2d:94:29:
4f:e9:19:6f:c5:f7:35:7c:a1:97:2c:aa:0e:d0:0f:2e:f4:d1:
04:e2:a3:e7:44:11:19:97:ce:a9:06:31:42:44:d1:cb:78:9c:
b0:ce:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org