Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9134569B8C11EFA854B76B762E951A.roa
File: 0C9134569B8C11EFA854B76B762E951A.roa (raw, json)
Hash identifier: aEa9X6Jn98lKjKAAvZqiwqcMhjPIbY0vSMsdecAMKjQ=
Subject key identifier: DA:01:54:E7:49:74:25:F1:12:3A:A0:60:1F:A2:14:7E:A0:00:64:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010827
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9134569B8C11EFA854B76B762E951A.roa
Signing time: Tue 05 Nov 2024 15:38:48 +0000
ROA not before: Tue 05 Nov 2024 15:38:44 +0000
ROA not after: Wed 04 Dec 2024 15:38:44 +0000
asID: 200373
IP address blocks: 154.213.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67623 (0x10827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 15:38:44 2024 GMT
Not After : Dec 4 15:38:44 2024 GMT
Subject: CN=672a3c08-fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:15:e8:72:6d:43:1a:90:80:5b:8d:4f:8a:
2f:61:61:22:73:59:a3:83:58:1d:ea:9b:a8:af:c7:
cf:eb:f6:3c:84:b8:a3:1c:fb:8f:ce:e2:ef:70:89:
55:6c:f4:39:cb:f4:91:22:fc:10:48:32:17:4a:03:
8c:0d:79:98:9a:9d:e4:79:35:de:50:d6:12:f7:5e:
85:3c:7a:2b:8f:d1:de:bd:61:d5:5d:fc:51:9f:72:
53:a0:65:d1:96:4b:f3:92:dd:e0:4e:5a:5f:ef:8e:
3e:5f:ef:22:5b:f7:96:42:2a:f9:a2:bf:3f:ac:4b:
12:9d:a4:4a:0a:b6:24:ae:57:9e:91:01:21:80:cb:
db:a6:e9:b6:4a:6a:cd:22:88:f6:ee:19:47:bc:3a:
8b:f3:e6:8b:cc:93:ba:62:a0:53:2f:75:58:6b:0f:
84:16:e5:c5:ad:07:8f:0b:30:e3:6c:84:ae:2d:d0:
bd:6c:12:f6:9e:4b:40:1d:94:71:8f:97:66:95:aa:
ca:c5:48:ac:d8:23:7e:22:f8:26:2c:2d:ce:3e:ea:
6b:0a:60:6e:d2:66:4b:cc:55:5c:15:51:12:c3:8e:
17:e2:7b:7d:ee:39:91:c5:7a:f7:22:63:dc:eb:cc:
51:64:91:a4:3b:2c:be:81:7f:7f:72:d9:81:5b:3f:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:54:E7:49:74:25:F1:12:3A:A0:60:1F:A2:14:7E:A0:00:64:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9134569B8C11EFA854B76B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:55:37:e6:f7:e3:e9:03:15:c3:d0:a6:f3:49:d9:9f:73:94:
29:12:3d:48:87:d8:ba:b8:75:45:95:23:d9:5f:be:88:87:13:
5f:95:42:86:10:e8:1c:34:87:f7:2c:d6:a4:5b:98:a0:a0:9c:
83:73:e8:ed:0e:30:84:a5:ff:5a:a0:95:a8:5c:d2:9a:a2:fd:
19:0b:88:cf:8e:f2:e0:a1:4b:30:7a:b4:3a:9d:54:eb:64:5c:
fe:4a:60:cd:8c:ce:49:15:06:e9:e6:16:bc:84:04:74:1d:62:
e2:31:b6:55:2d:e5:0d:89:cf:79:ff:dc:31:7c:d8:95:90:46:
5c:86:07:4d:0c:d9:ee:d3:9b:ac:78:ad:fa:e0:b7:02:e6:1d:
da:0c:2c:17:f1:5e:c4:20:e1:58:b9:4f:9d:3a:c8:51:b9:af:
b5:3e:08:fd:86:76:23:f4:7b:f3:49:15:e3:e6:e0:65:c5:13:
e1:a7:4d:4b:2b:03:0f:11:10:bf:ae:1b:88:c1:cd:4c:79:6c:
fc:7a:88:f6:af:29:08:3c:34:4f:9c:38:a8:3b:e7:55:d5:41:
da:58:89:c7:0b:29:0c:b2:28:50:55:04:57:57:25:65:62:6b:
fc:d3:0c:c8:27:cd:29:bc:94:b6:f9:11:37:29:4f:80:b9:a6:
00:13:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org