Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04735F3CA75411EF93E782B8762E951A.roa
File: 04735F3CA75411EF93E782B8762E951A.roa (raw, json)
Hash identifier: 4d1mefRRD7+cgzRzopGK6LC13dt013Vbat7LakGShic=
Subject key identifier: 72:DD:62:4D:6F:7F:81:7F:51:40:7D:48:20:74:0C:F3:09:81:8C:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04735F3CA75411EF93E782B8762E951A.roa
Signing time: Wed 20 Nov 2024 15:27:56 +0000
ROA not before: Wed 20 Nov 2024 15:27:53 +0000
ROA not after: Sun 01 Dec 2024 15:27:53 +0000
asID: 5065
IP address blocks: 154.86.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69583 (0x10fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:27:53 2024 GMT
Not After : Dec 1 15:27:53 2024 GMT
Subject: CN=673dfffc-62b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:59:6c:b2:b8:fe:3d:b2:0e:2d:0f:02:0e:
15:8b:50:d2:61:1f:9a:3e:4c:96:86:74:6b:1e:f8:
bc:ba:a8:2f:92:85:7f:78:6a:2c:48:cd:ff:9d:d6:
8a:43:49:7e:04:82:f2:8f:9d:b3:2f:67:cf:0f:6e:
dd:86:4d:ff:72:f0:3c:f3:fe:2a:3d:8c:03:56:fb:
59:18:42:1b:d4:b5:18:b2:80:70:29:ac:91:e3:8e:
01:6b:71:b1:50:ea:37:20:52:e5:1b:2c:30:91:ee:
9b:9b:2e:a3:61:1d:bc:8e:59:33:cd:1b:90:73:f5:
5d:63:1d:db:64:9d:1e:5d:7c:2b:2a:41:f3:87:98:
3e:8a:32:30:53:95:da:20:1f:e6:4c:22:b9:ec:1c:
34:fb:fd:30:83:3d:d9:21:e3:fb:77:af:b5:2a:5e:
81:80:b4:a0:0c:00:3d:9b:6c:a0:33:17:70:ce:7f:
2a:6c:ee:46:e0:e5:96:40:76:16:8c:11:85:d7:bb:
e3:0c:56:22:06:fe:08:9d:41:31:40:fd:ed:56:10:
dd:13:c7:58:f5:49:1e:1b:cd:99:a2:2a:51:75:1b:
51:2d:73:6e:56:ef:86:dd:da:51:9c:48:8a:a1:35:
7a:a9:5c:9d:c5:2c:07:15:56:31:2f:d7:67:56:d9:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:62:4D:6F:7F:81:7F:51:40:7D:48:20:74:0C:F3:09:81:8C:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04735F3CA75411EF93E782B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.96.0/20
Signature Algorithm: sha256WithRSAEncryption
42:ea:ff:33:58:61:7b:b1:4d:cf:71:57:d6:77:7c:f9:b3:4a:
fa:f5:f2:8a:4e:27:b0:22:b3:6f:9c:fe:1f:b2:b4:f8:3e:6d:
e1:28:f7:b4:9b:e8:77:fb:b1:64:01:16:ca:e7:d5:23:b0:f1:
44:52:61:ad:b9:2d:8a:75:76:80:24:5f:76:92:09:87:f8:ee:
f4:39:f0:a0:0e:ba:aa:63:16:0a:7c:07:fc:d7:68:52:ac:08:
80:3f:92:7f:6d:66:5b:25:aa:01:0f:4e:a9:64:7d:01:a7:47:
12:40:bf:69:b4:f5:ae:0a:76:82:d7:ce:44:e0:ef:e4:f4:9d:
01:e0:9a:1e:ab:14:72:66:d8:55:0f:70:14:9a:08:a7:46:e6:
c1:8a:37:d7:72:1d:52:2b:d0:b4:4e:c9:86:d5:23:b3:c6:7a:
6b:19:cc:0b:75:94:2e:b9:1b:e5:fb:d7:d7:b7:46:fd:d2:94:
18:35:57:19:1c:01:cb:1d:f2:2d:ab:af:dc:79:ad:39:de:2b:
91:b2:4b:c7:85:32:8f:e2:00:e7:ee:86:dd:e3:6d:25:27:3b:
71:49:bc:36:ca:48:e3:5b:4e:36:58:d8:0b:23:63:85:d6:b7:
36:6c:1e:e6:96:81:53:eb:dd:fb:e0:f7:8b:e2:ff:f6:65:11:
ec:2e:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org