Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F98588993111EFB09C7D8C762E951A.roa
File: 14F98588993111EFB09C7D8C762E951A.roa (raw, json)
Hash identifier: NbC2PfUXcSmXLB7aMw0bkAB5EprkxU1RwZz0MrTsvEU=
Subject key identifier: 84:ED:44:3F:AC:00:69:26:D3:F7:90:5B:23:A7:B5:72:C9:5E:07:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0105D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F98588993111EFB09C7D8C762E951A.roa
Signing time: Sat 02 Nov 2024 15:42:36 +0000
ROA not before: Sat 02 Nov 2024 15:42:32 +0000
ROA not after: Mon 13 Jan 2025 15:42:32 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67026 (0x105d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 2 15:42:32 2024 GMT
Not After : Jan 13 15:42:32 2025 GMT
Subject: CN=6726486c-bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:77:de:4e:db:9b:ef:bd:d6:53:3d:40:76:
07:e0:e4:0d:e5:cc:80:a4:eb:74:d4:e5:51:dd:d4:
0b:22:08:12:12:55:4d:95:01:9d:b0:3b:b5:54:d0:
03:0e:04:6d:7f:66:6b:e9:4d:d9:e5:8f:d2:6b:c7:
5e:c7:6e:cb:bd:dc:3c:b4:f9:e3:de:de:d7:d4:36:
09:fb:e4:02:f4:77:51:ec:4f:19:19:a2:72:ca:15:
68:90:cb:1b:54:09:1a:2d:f8:bf:a3:2c:80:99:f2:
9e:31:6f:27:c9:ea:28:0c:20:72:24:2c:f5:7d:68:
00:89:4d:b5:ce:ec:7d:a4:68:65:ab:db:95:ad:af:
1e:5d:23:a8:fa:80:e1:a5:5e:ee:d0:ef:24:3a:26:
0f:91:ab:4c:92:b8:e7:38:98:b4:13:43:1a:15:3f:
3c:03:56:b4:81:6f:52:c5:6d:9f:d3:14:dc:bd:0c:
2f:72:de:ff:26:10:34:f5:bb:24:12:42:8e:0c:46:
ee:b4:3b:03:59:2f:87:5e:8b:46:e7:cb:c5:da:91:
7a:fe:28:b9:e4:fb:30:ad:e9:11:64:38:0a:d2:27:
7d:a9:7e:aa:4a:c0:6f:15:e4:22:60:0c:3e:e1:e3:
76:22:7a:b5:18:43:c6:a9:83:eb:4c:70:6d:a7:13:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:44:3F:AC:00:69:26:D3:F7:90:5B:23:A7:B5:72:C9:5E:07:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F98588993111EFB09C7D8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f9:79:74:e0:26:26:ae:71:2c:b6:bf:94:cc:b4:9a:54:85:
f4:63:cb:85:9e:26:16:ec:bb:a7:34:c9:31:9a:ba:16:15:f9:
3a:18:85:ab:e5:7c:8b:75:ab:84:88:ff:81:01:8f:94:b7:6c:
7a:9c:dd:1e:87:fa:30:90:8f:29:28:5d:3a:3f:6f:fa:92:b9:
bb:63:e6:87:91:fa:12:5e:70:a7:16:c1:03:c9:76:68:ea:b7:
37:20:58:5f:cc:d9:3a:9f:86:0c:08:fa:f4:b8:0e:ef:40:c7:
30:b2:56:c3:5b:a5:ba:9f:73:20:50:02:c7:4e:4a:53:ba:24:
c7:56:e1:c1:57:59:bb:9a:04:58:75:b9:c6:20:35:00:08:83:
d0:07:52:69:e9:c1:8f:d4:70:65:b9:bd:9f:da:6d:3f:4a:e7:
48:5a:0f:13:52:dd:57:20:91:18:56:a5:fb:cf:79:42:0f:44:
5e:00:24:b9:98:77:c8:ab:bd:19:71:53:32:3e:c3:07:d8:59:
5c:d3:4e:d4:ad:5f:b9:7c:5b:08:83:a0:ec:71:23:7f:2f:41:
35:4d:70:0f:1e:c8:ff:35:db:c2:04:8a:93:1b:6d:dd:04:18:
70:2a:57:85:77:86:e5:a4:eb:31:17:7d:15:ec:ae:0b:be:c0:
28:ab:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org