Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7B2239D11EF921C3DE87CDC24C2.roa
File: 02D9E7B2239D11EF921C3DE87CDC24C2.roa (raw, json)
Hash identifier: keGUrkE+ZcmIKhojkJA3kzkdvBojweWC6UWABitLp+0=
Subject key identifier: A9:3B:04:03:9D:17:03:1E:93:46:ED:50:12:A9:63:3D:1D:BD:B6:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C05A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7B2239D11EF921C3DE87CDC24C2.roa
Signing time: Thu 06 Jun 2024 00:37:54 +0000
ROA not before: Thu 06 Jun 2024 00:00:50 +0000
ROA not after: Wed 11 Jun 2025 00:00:50 +0000
asID: 3491
IP address blocks: 154.194.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49242 (0xc05a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 00:00:50 2024 GMT
Not After : Jun 11 00:00:50 2025 GMT
Subject: CN=666104e2-c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:9e:ea:b7:cb:d0:5d:55:97:b4:db:7b:fe:
26:71:1e:e5:ff:da:89:a3:de:15:b8:5c:92:33:6a:
87:f7:a6:e0:d4:1b:67:e0:4f:23:16:2b:59:65:dd:
0f:58:1b:da:d7:d6:c0:fa:45:af:01:92:82:7a:0b:
fa:24:0a:d1:ea:da:13:e8:da:53:60:e2:1d:22:6a:
61:bb:ff:80:0d:a7:8a:7b:cb:bc:0d:ef:43:97:17:
53:67:02:dc:2c:82:04:99:66:aa:22:94:c7:81:b9:
1d:43:9e:43:0a:a4:1e:df:31:34:98:24:49:e7:c9:
e3:2a:7f:8a:3d:f4:27:02:86:10:86:7b:63:0c:35:
a8:b9:b1:e0:87:9d:eb:ed:00:fa:15:03:ac:c1:1e:
7b:a7:e7:68:f9:96:e0:d7:dd:83:f4:47:80:1e:a6:
bc:9a:43:59:73:1f:8e:a3:af:d0:6c:da:d9:3d:56:
ed:10:70:60:8c:ac:30:f6:3b:54:34:0b:51:04:68:
ee:c4:25:19:70:3d:41:3a:db:95:56:a0:b5:f6:19:
be:6b:b0:59:10:eb:5f:22:9b:8f:01:d3:c7:65:30:
40:3c:f5:a3:fd:87:a9:5a:86:20:d0:cf:91:77:7b:
1c:cf:6e:92:85:f6:94:a5:0d:52:e5:e7:dd:3c:15:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3B:04:03:9D:17:03:1E:93:46:ED:50:12:A9:63:3D:1D:BD:B6:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7B2239D11EF921C3DE87CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.34.0/24
Signature Algorithm: sha256WithRSAEncryption
59:82:02:d0:57:dd:99:98:eb:8c:8d:93:c8:32:d8:c5:d2:72:
d0:78:60:d7:2e:79:2c:c0:04:22:d1:3a:d6:49:53:5a:e8:5d:
08:56:32:22:67:d4:62:87:45:1f:90:38:50:2c:8d:0d:dd:79:
70:dd:ea:93:a6:5e:2f:06:33:71:1a:5e:6d:ad:19:73:9f:5d:
a9:82:db:eb:2a:17:82:52:ef:5d:d3:e2:bc:04:e2:c2:4f:0f:
3f:ad:3a:10:84:8c:67:78:9e:a3:b1:3e:3b:7f:59:80:d9:99:
23:1c:25:d4:3c:a7:67:f3:4d:70:64:2f:d1:ed:aa:60:b5:66:
2d:5a:11:e0:30:10:1d:18:07:98:68:72:8c:78:57:f8:0f:94:
80:3a:9e:fe:6e:50:28:b9:df:92:c4:cc:67:13:3b:e3:08:88:
16:0f:2f:31:01:9a:de:e6:a2:2b:0b:4d:b5:d8:98:49:ed:05:
bd:2e:c8:aa:6d:74:6a:f0:0b:3b:58:d9:2f:43:6f:8d:58:33:
52:dd:1e:a9:86:86:d1:66:13:4c:81:38:ba:a6:bb:e3:61:15:
e6:d2:48:d1:79:c3:90:f6:9a:76:33:ef:27:94:9c:d3:e5:54:
6d:5c:ad:fb:73:8a:a8:85:35:9b:bc:80:b4:00:87:e4:39:f7:
c3:60:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:20 2024 by rpki-client on console-fra.rpki-client.org