Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/008CEE766AA311EF99AFF378762E951A.roa
File: 008CEE766AA311EF99AFF378762E951A.roa (raw, json)
Hash identifier: ampRfGtVHnxUujmyEGA1px7yTs5M3wiNQc+eSDnE0KU=
Subject key identifier: 9E:9B:CF:27:C8:89:D7:8C:DC:64:E3:AA:DC:4A:21:37:28:F1:DA:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/008CEE766AA311EF99AFF378762E951A.roa
Signing time: Wed 04 Sep 2024 09:49:39 +0000
ROA not before: Wed 04 Sep 2024 09:49:36 +0000
ROA not after: Thu 24 Apr 2025 09:49:36 +0000
asID: 63888
IP address blocks: 154.209.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59969 (0xea41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:49:36 2024 GMT
Not After : Apr 24 09:49:36 2025 GMT
Subject: CN=66d82d33-a5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:ae:bb:a7:d9:0d:b7:2e:f3:ca:3c:b4:56:
f7:46:ef:8d:41:a0:0a:34:16:c9:59:4c:07:1d:fa:
58:7a:03:85:6c:6e:49:19:12:06:6e:f9:c2:98:eb:
43:88:63:ea:50:47:58:c2:d0:e4:5b:8d:d3:95:87:
c5:bd:47:30:86:0a:3a:ec:4c:ac:bd:52:4b:15:c6:
69:62:85:16:74:a8:bf:39:6d:1f:16:9d:a9:94:b5:
5d:74:ba:89:20:81:6f:1a:82:47:97:28:ce:c3:68:
fa:ca:17:44:5d:b3:3f:75:45:cc:98:52:56:92:f8:
d7:6e:ef:a3:0a:3e:2c:ae:fd:54:c3:6b:cf:e2:87:
e7:16:5e:42:65:ab:56:cf:7c:c3:45:ba:2a:38:a7:
cf:9d:fa:19:ac:f3:ac:bf:ab:17:21:87:c5:8b:05:
78:f6:e1:90:32:ac:55:b0:75:5c:27:71:1a:f2:d5:
6f:81:2d:be:ea:a3:c4:da:92:06:62:8b:e0:1a:ab:
de:c3:4c:3d:e5:02:0e:50:35:ef:c7:01:8c:83:5a:
2a:36:f9:53:26:c6:06:b5:68:f8:53:4b:e0:56:f9:
67:5e:d6:96:7e:aa:73:34:11:c0:2f:61:69:1b:ff:
2d:77:0c:fd:d2:e6:9f:d6:52:22:61:d1:99:2e:9f:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:CF:27:C8:89:D7:8C:DC:64:E3:AA:DC:4A:21:37:28:F1:DA:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/008CEE766AA311EF99AFF378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.65.0/24
Signature Algorithm: sha256WithRSAEncryption
43:93:7a:74:19:08:4b:7e:91:90:7c:1d:69:42:82:3a:ce:23:
a0:23:c8:2d:6a:fa:6e:0c:f3:96:d7:4e:87:d6:b8:1b:fd:f1:
5f:b7:7f:dc:c4:a1:fe:2d:ed:6d:ce:66:52:bf:10:61:57:02:
0d:5a:31:75:48:28:e4:93:bc:da:ed:e2:57:ae:71:f6:a8:60:
a6:7c:0a:5b:8c:5d:d1:f5:37:64:2e:b4:fd:79:92:41:10:58:
4b:ba:4f:c5:ef:3d:b0:13:f0:97:e3:83:66:3e:f3:5f:ac:5f:
c1:47:dc:84:7d:1b:bc:20:63:cc:c6:61:1f:8a:27:f5:29:a1:
f1:26:62:09:58:f9:dd:3a:5e:20:97:c2:b9:9b:0f:3f:b0:0a:
0c:ee:c8:a0:22:c6:3f:fd:80:8c:59:9b:f8:4e:6a:ff:4e:2e:
b1:fa:a1:c1:88:f6:47:29:16:f4:a3:36:76:18:59:ce:eb:2e:
45:54:e5:b9:69:ae:bc:a6:f3:e0:85:cf:bd:b1:65:70:2c:3d:
8f:09:cf:ee:cb:f5:39:ee:af:22:39:ba:aa:62:ba:cf:a5:c7:
22:da:a3:93:bc:6e:c0:8c:c5:f4:4e:97:41:bc:fd:62:6b:fb:
28:25:87:21:c9:7d:e9:c8:50:77:6e:3a:71:a3:eb:0e:0a:d5:
f0:c9:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org