Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3C6E6CA33111EFB497F945762E951A.roa
File: 0F3C6E6CA33111EFB497F945762E951A.roa (raw, json)
Hash identifier: CLfUJ4AgRHSFS6TMxzLQaAY9qdHB9nfBHVAY2kabJPc=
Subject key identifier: 91:46:03:F1:D9:89:85:2A:DF:46:F4:9C:1D:CB:49:6C:1B:C2:11:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3C6E6CA33111EFB497F945762E951A.roa
Signing time: Fri 15 Nov 2024 09:07:38 +0000
ROA not before: Fri 15 Nov 2024 09:07:34 +0000
ROA not after: Sun 12 Jul 2026 09:07:34 +0000
asID: 55967
IP address blocks: 154.85.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68976 (0x10d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:07:34 2024 GMT
Not After : Jul 12 09:07:34 2026 GMT
Subject: CN=67370f59-63d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:cb:95:bf:52:96:5d:3f:04:31:54:ed:9e:
b6:f9:00:6a:17:12:56:52:52:d7:fe:f8:b8:74:23:
9b:8a:d6:38:0e:b7:5f:1c:8f:07:66:f1:5a:52:9f:
cf:9f:15:41:37:77:20:a0:22:0c:50:c5:01:d9:a2:
2b:34:ab:78:b6:a4:f4:26:4b:a9:3a:92:87:cc:e3:
42:f2:5c:24:82:a6:8a:07:55:a8:fa:ce:aa:ab:a8:
22:c5:5b:7b:73:07:f0:fc:fe:50:b4:84:5a:8f:cf:
18:a3:ce:a5:95:d6:04:cf:17:19:d9:e7:45:e9:18:
4d:9a:16:e4:93:be:f9:9d:69:29:c7:45:0d:4f:b0:
10:61:d8:11:67:66:f9:8b:6e:2b:11:b2:5d:6a:e7:
f6:0e:8d:70:03:1e:8e:c2:68:52:a0:a4:2e:16:e5:
e0:77:2a:f5:26:3c:83:c2:cb:ea:e3:66:e3:fd:d1:
bf:cb:3c:24:75:42:96:c2:e6:8b:3e:d9:7a:8e:f1:
45:90:02:f5:97:5a:73:53:ae:6f:97:c4:2c:c9:ed:
5a:71:5d:c4:e6:44:0c:cf:39:cf:12:81:cc:93:28:
b8:74:50:21:75:c7:e5:fa:1f:40:9a:b7:8f:33:84:
38:f0:f3:6f:5c:ab:32:d3:9e:aa:fd:c0:25:ba:5c:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:03:F1:D9:89:85:2A:DF:46:F4:9C:1D:CB:49:6C:1B:C2:11:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3C6E6CA33111EFB497F945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.32.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:f7:20:e5:87:d2:e5:2f:5c:ce:ae:9c:3e:81:4a:4e:23:58:
33:72:43:52:42:af:7e:ab:9a:cc:81:48:ed:c3:a2:eb:9a:81:
fa:c6:9c:bd:30:10:d0:85:e3:11:5e:ae:11:ad:ef:61:05:29:
e1:45:3a:ef:5f:d7:df:68:fb:aa:a2:3f:52:f0:1e:1c:06:6b:
22:0d:a1:a9:11:ba:02:b3:2e:7c:0f:35:33:d3:cc:fa:f5:a9:
a6:9b:bc:d4:7b:5c:3d:5c:7f:9c:b9:c5:20:de:b9:c4:ce:f3:
37:88:63:0c:ef:b5:7a:7c:9b:78:a0:d3:01:0d:58:cf:58:6a:
bf:b4:d4:72:3c:bb:1e:78:44:54:37:53:cb:12:93:ed:4c:78:
da:ab:62:13:4b:9a:e8:bc:51:af:c3:77:a9:7a:27:bb:81:a4:
82:4a:13:db:44:fa:12:2f:0b:d8:63:cb:6c:d1:8d:bf:87:fd:
db:2b:cd:30:ec:00:16:f6:29:b2:dc:19:5f:83:0c:17:bf:96:
b6:5f:0a:e8:16:97:31:1e:75:db:71:26:2e:c6:3f:44:68:23:
5a:0b:95:3f:93:16:e4:de:b0:d4:a5:4b:24:a8:d7:e0:2b:f7:
e8:b7:d2:3d:c9:94:a4:3d:20:8b:f0:40:9e:68:de:f2:24:da:
52:a0:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:12 2024 by rpki-client on console-fra.rpki-client.org