Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02457E8AA8E811EFA29B7AA7762E951A.roa
File: 02457E8AA8E811EFA29B7AA7762E951A.roa (raw, json)
Hash identifier: nibEOBNYq2IH1wO0VCXB6eTwnI99T2oMIten5IV8Yl0=
Subject key identifier: 53:7D:80:7D:CE:CB:3C:42:07:3D:85:4D:96:16:2F:39:62:5C:3E:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02457E8AA8E811EFA29B7AA7762E951A.roa
Signing time: Fri 22 Nov 2024 15:39:50 +0000
ROA not before: Fri 22 Nov 2024 15:39:46 +0000
ROA not after: Tue 03 Dec 2024 15:39:46 +0000
asID: 62240
IP address blocks: 154.194.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69863 (0x110e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:39:46 2024 GMT
Not After : Dec 3 15:39:46 2024 GMT
Subject: CN=6740a5c5-5ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:cb:3d:62:74:15:b0:74:4e:2d:66:6c:40:
e3:ef:ee:a1:f4:f1:89:84:0e:97:c6:1b:a2:51:16:
bd:79:68:08:0b:bc:ff:d3:43:7c:86:42:8b:83:db:
45:17:82:b9:3f:4c:5e:20:e9:e0:1d:36:5d:aa:85:
6a:42:19:3d:3c:f6:2b:f8:16:94:ba:3c:24:ed:75:
7b:c3:a1:e6:ae:39:56:0c:fa:65:e5:c5:a2:c0:9c:
15:8a:c6:e4:51:d1:01:9a:48:f8:70:dc:4c:f3:55:
20:03:3b:ee:af:53:65:a0:bd:2f:72:8d:58:4b:7c:
fe:cd:dc:9f:bb:c8:3a:b4:c7:14:ea:58:26:5e:b2:
6d:e7:0d:74:4a:33:1d:8f:99:8f:6a:6f:24:57:97:
b1:47:61:c3:2c:05:06:9e:7c:4f:04:df:af:26:04:
99:1d:86:6d:e0:14:d0:10:c9:be:cb:a9:05:46:5d:
65:6c:05:a7:a3:70:d3:cc:96:80:24:37:83:37:98:
ab:ad:a8:97:76:30:a8:ef:5b:e7:9b:5f:5b:1e:a2:
ae:67:22:a1:aa:cb:d2:f3:f9:3b:cf:c3:a9:c8:ed:
d7:6f:4c:7f:79:f2:e3:c9:dc:c6:a9:ff:f0:05:dd:
7c:d4:25:fb:2f:42:f8:2a:aa:1e:30:5e:e9:68:02:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:80:7D:CE:CB:3C:42:07:3D:85:4D:96:16:2F:39:62:5C:3E:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02457E8AA8E811EFA29B7AA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:11:a0:ce:b9:63:38:61:51:23:c8:27:54:b4:40:21:b5:26:
f7:92:aa:5b:e7:c0:8d:58:32:96:45:f7:00:cf:26:8b:3c:4d:
f1:64:30:5e:03:fe:a9:2c:50:02:bb:12:7c:4e:7a:bf:89:43:
8e:09:f7:c5:d5:c6:a7:a9:be:ef:92:dc:3b:a0:49:22:6e:de:
89:74:9b:a8:59:c9:d8:c5:c0:63:2f:02:68:c5:69:6d:43:2b:
07:a7:90:5f:1a:ff:39:11:0f:48:3a:f0:f8:f2:a6:da:7b:30:
11:84:b9:b3:2b:44:cd:16:92:7a:2f:71:44:90:fd:14:3e:a0:
c4:12:3c:0f:a2:b3:36:48:1b:d7:a5:e6:70:03:96:63:9e:fb:
de:15:f6:d5:06:c7:d2:0f:f6:44:2e:9e:64:82:24:40:07:e2:
41:13:41:e3:d6:fa:8d:2d:7e:c7:e3:67:98:21:a5:be:27:51:
d5:08:05:f3:1a:56:56:bf:54:9b:8d:38:95:47:b2:b5:61:83:
ac:6a:c3:58:5e:a9:03:6e:e2:6d:1c:72:a7:92:86:ff:17:a8:
de:6f:39:20:9a:88:33:25:b9:fe:38:02:f9:3e:b4:bc:b3:50:
1a:37:ff:6e:b8:92:6b:36:d0:c9:96:fd:fd:c4:0f:dc:81:a7:
28:50:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:19 2024 by rpki-client on console-fra.rpki-client.org