Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0273F722A33B11EFB03AAB83762E951A.roa
File: 0273F722A33B11EFB03AAB83762E951A.roa (raw, json)
Hash identifier: I5sUGbqS303thhzW5u9hmFC8moA0C5sVFYrTtCrM/6g=
Subject key identifier: 11:AC:93:24:D7:8A:CD:E2:89:8B:7C:C7:C4:21:B2:B4:E9:8E:AC:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0273F722A33B11EFB03AAB83762E951A.roa
Signing time: Fri 15 Nov 2024 10:18:51 +0000
ROA not before: Fri 15 Nov 2024 10:18:47 +0000
ROA not after: Mon 25 Nov 2024 10:18:47 +0000
asID: 5065
IP address blocks: 154.207.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69022 (0x10d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:18:47 2024 GMT
Not After : Nov 25 10:18:47 2024 GMT
Subject: CN=6737200b-3f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:ca:f8:a5:bc:90:59:05:80:4e:df:70:00:
07:40:7e:14:0b:4a:c3:5a:a9:44:c7:2e:70:60:a2:
f4:2e:05:3a:e8:b8:7a:00:17:2c:a4:cc:50:7b:84:
56:ee:e1:b1:19:ce:02:f8:13:3d:e6:34:03:73:47:
a6:c0:aa:45:31:df:2e:b2:a2:52:35:9a:ff:43:ce:
59:a1:d4:d1:da:8e:6e:f1:4d:73:b2:08:4f:45:84:
fe:86:00:6a:e4:df:c0:2b:1d:e4:98:49:20:35:b7:
fe:d1:14:2e:f6:b4:a6:2d:92:a6:ad:52:0c:51:ac:
e3:3d:eb:12:4b:f8:a2:8f:c8:ef:96:da:e6:69:2a:
71:1e:0a:81:aa:12:d6:3d:49:ba:76:2d:fc:03:92:
5a:94:da:44:5d:1a:43:30:32:c6:5e:20:b7:7d:32:
1c:25:db:a4:5a:2f:44:97:de:7c:98:74:1e:12:7f:
fe:25:aa:be:c2:61:9c:10:b1:60:32:4f:f9:6d:e5:
83:17:42:44:df:04:fb:e5:b9:99:e8:0c:49:60:54:
e9:29:d4:1f:b6:9a:c2:ac:bc:9c:aa:01:58:77:7d:
37:7b:a4:3e:2f:8f:63:8f:61:fa:d1:94:6c:41:62:
c3:4c:1a:2e:44:c1:55:c5:cc:19:40:7c:a7:c5:bc:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:93:24:D7:8A:CD:E2:89:8B:7C:C7:C4:21:B2:B4:E9:8E:AC:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0273F722A33B11EFB03AAB83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:73:97:ab:cd:0c:a0:15:c8:30:58:a0:b2:48:2d:0c:e5:f2:
7d:f2:5f:6e:51:28:bf:fa:b9:8a:b7:08:75:aa:13:cb:b6:51:
d7:60:65:b3:16:d9:1c:67:60:70:38:5d:d7:d2:d8:3b:d1:9a:
fb:25:a7:7d:da:12:44:b1:d4:2a:66:c8:7c:d9:e0:c3:4b:ca:
47:45:b5:33:97:fb:4e:9f:ee:96:bd:4a:6b:bf:b4:25:97:60:
db:8a:bd:10:ac:db:90:1d:8f:ba:12:6e:8d:b6:8a:54:49:db:
c2:30:65:4f:2d:8f:66:6d:99:2d:32:0f:74:98:22:49:e5:26:
e1:6c:68:92:39:f9:25:8c:a0:ec:f3:29:5b:7b:c1:6f:40:78:
27:8c:9e:b2:7c:9e:5e:7d:e4:d2:2a:3c:51:95:22:bc:9a:e8:
0f:6a:04:f7:73:e2:51:bf:fc:92:e9:71:34:93:4d:86:71:bb:
91:13:03:19:c1:35:0b:86:83:f8:d9:b8:bb:c1:0d:62:31:d2:
d3:39:17:4a:b9:53:33:cc:e9:d4:4e:3f:85:19:7e:37:8d:c8:
a7:22:09:73:0f:27:e8:54:fa:30:06:c5:14:7a:24:ad:ed:87:
33:b2:7d:ca:c0:6b:b3:aa:04:2e:c9:5d:49:09:22:36:58:43:
39:cf:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org