Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0873E7C0A8E711EFAB55A5A1762E951A.roa
File: 0873E7C0A8E711EFAB55A5A1762E951A.roa (raw, json)
Hash identifier: 2uGxV3Rx7e79SevxUClLkQfVVuxGiP5ppFtsJfSbE0o=
Subject key identifier: 8B:9F:E5:16:4D:96:47:EF:C2:1C:FB:CF:25:32:D2:D3:45:19:AB:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0873E7C0A8E711EFAB55A5A1762E951A.roa
Signing time: Fri 22 Nov 2024 15:32:50 +0000
ROA not before: Fri 22 Nov 2024 15:32:47 +0000
ROA not after: Tue 03 Dec 2024 15:32:47 +0000
asID: 62240
IP address blocks: 154.194.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69851 (0x110db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:32:47 2024 GMT
Not After : Dec 3 15:32:47 2024 GMT
Subject: CN=6740a422-6893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:27:49:d3:6b:a2:cf:de:9c:13:31:33:0a:
62:0c:2c:ce:f9:17:a3:d2:26:8c:9a:28:93:69:32:
41:49:bc:84:cf:88:3c:70:5b:e1:1e:16:a0:9e:e4:
a4:bf:8f:66:a9:06:51:10:e1:47:18:99:11:84:63:
c2:ea:13:dc:83:a7:79:81:79:17:98:0b:b7:47:ed:
76:92:8f:da:13:31:5d:ff:36:02:b9:b0:21:09:e4:
d1:d7:5d:54:1b:78:30:2c:14:dd:49:54:4d:92:e6:
86:8a:99:63:67:cb:be:62:5d:46:16:8d:cf:b2:53:
30:26:9a:55:01:21:21:37:8e:bb:8c:98:6a:e4:39:
94:87:bf:21:b3:26:44:e6:5b:bd:21:cb:59:5a:91:
31:75:8b:c2:47:85:78:64:19:ac:28:f1:8c:2a:d3:
aa:4c:c9:a7:28:68:ea:89:f6:62:3e:9f:cd:56:7e:
18:57:95:22:77:72:f4:c5:48:a2:26:c1:26:ad:e4:
aa:cf:09:f6:58:0c:9c:a9:5f:ff:53:f5:38:96:79:
37:04:d0:2b:02:20:d5:1f:e0:61:6c:88:02:fd:1f:
76:de:8f:b9:c2:05:a3:ee:d0:d5:33:ac:b4:b3:32:
b3:80:97:0a:7b:9c:b6:54:46:6a:1f:01:2a:92:90:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:E5:16:4D:96:47:EF:C2:1C:FB:CF:25:32:D2:D3:45:19:AB:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0873E7C0A8E711EFAB55A5A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.110.0/24
Signature Algorithm: sha256WithRSAEncryption
26:25:a2:57:1a:50:c2:62:37:07:ad:58:8e:c3:ab:71:e1:87:
96:c4:1e:12:df:9f:10:e9:e3:e7:c2:0f:a5:79:6d:ea:d9:b8:
f8:99:23:92:c2:cc:54:82:b0:56:e0:e1:23:ab:75:1c:c9:20:
5d:88:f7:75:88:e2:58:39:b8:1a:b4:80:f4:bc:6b:e1:f2:54:
44:e8:b6:63:58:4f:fc:79:b1:fe:7a:82:9d:0e:56:9f:98:98:
a4:2f:e4:02:8b:d6:0b:d3:5a:7c:29:4c:90:1e:3f:7c:87:b9:
be:bc:1e:2b:50:43:66:a2:c5:ee:96:44:32:c0:ad:66:4d:8e:
b3:e2:86:18:dd:28:e5:b1:c2:e8:c5:83:0b:64:bc:f0:41:bb:
cd:1b:90:f4:de:e0:63:21:10:d7:c3:ec:ba:db:2d:e9:bb:f2:
c3:1c:d9:71:01:aa:f2:5b:10:4d:41:1b:60:ad:6d:4c:42:79:
7a:14:6d:3a:5f:b4:be:f6:9f:b8:13:db:38:2b:3d:17:91:7e:
9e:6e:87:eb:35:4a:00:a1:12:a1:16:3e:d7:f4:53:01:e3:9f:
92:15:61:3d:89:6d:6f:35:25:e9:5b:92:b8:6a:77:7f:f8:01:
6b:80:f3:2d:67:0b:5b:6b:d2:5a:35:60:ee:7c:47:06:d6:ae:
0b:e7:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:20 2024 by rpki-client on console-fra.rpki-client.org