Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1697DF569B8511EF9E42F6BE762E951A.roa
File: 1697DF569B8511EF9E42F6BE762E951A.roa (raw, json)
Hash identifier: zwV7crceDb1DcEfDWA3SsZhfPUxS5j64gjf03BV4lDU=
Subject key identifier: 97:42:F5:70:22:E2:00:3B:89:2E:CE:C4:85:69:B1:60:38:C8:22:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1697DF569B8511EF9E42F6BE762E951A.roa
Signing time: Tue 05 Nov 2024 14:48:58 +0000
ROA not before: Tue 05 Nov 2024 14:48:55 +0000
ROA not after: Mon 20 Jan 2025 14:48:55 +0000
asID: 135097
IP address blocks: 154.213.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67603 (0x10813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:48:55 2024 GMT
Not After : Jan 20 14:48:55 2025 GMT
Subject: CN=672a305a-5994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:73:42:a3:55:d8:06:d4:92:35:aa:8c:72:
ad:5b:c4:4d:66:ba:20:2c:74:c8:85:4e:21:7c:f4:
4c:b7:aa:36:11:44:ac:24:52:f7:83:d0:28:fc:33:
8d:02:45:b8:61:4a:9a:e2:a5:51:bf:5f:a2:6a:79:
23:0d:c0:6b:54:27:a5:70:76:a8:b5:a7:44:b9:73:
60:a9:6f:48:b1:ce:09:ad:42:fb:3f:57:29:55:2a:
97:6c:4a:ee:06:17:33:e8:60:b2:db:fa:a9:4a:4d:
51:c2:67:fe:ef:55:7a:0c:7c:70:c5:91:1d:1b:d6:
55:bd:fa:fb:1b:74:05:57:7b:71:d2:07:31:4e:fd:
5e:c3:10:b5:68:60:31:89:44:d3:5f:72:6a:64:16:
4f:d0:09:85:13:d5:45:d7:c1:83:f7:c2:49:85:ce:
48:fd:4d:a3:ce:66:14:56:59:1a:ed:de:a4:c3:58:
77:ca:53:d6:22:67:ae:5e:2e:fb:4e:fa:b3:bb:47:
23:41:32:ed:e2:01:c7:a0:51:ca:24:91:a9:c4:63:
99:cf:b7:2d:04:a7:ca:21:24:be:ae:b3:dc:b1:1f:
5d:e6:e6:9e:ee:89:a4:bd:a3:70:86:60:cf:21:7e:
1f:63:15:9e:e0:28:be:3d:d2:bd:49:35:a6:cf:02:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:F5:70:22:E2:00:3B:89:2E:CE:C4:85:69:B1:60:38:C8:22:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1697DF569B8511EF9E42F6BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.8.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:c8:30:75:32:11:08:14:0c:c4:80:1f:1f:7c:c1:21:b6:2c:
71:1d:b5:c4:15:81:86:64:fb:f3:fa:f1:5f:7f:26:f1:2a:01:
07:1d:a6:1a:a4:9a:5b:c5:11:c5:42:5d:4e:9a:0e:58:d0:07:
2b:0c:0f:1f:85:19:8a:70:9c:35:63:be:c3:2c:84:dd:67:f1:
0c:08:71:25:a1:4d:04:b6:96:a5:98:f5:64:1e:44:2c:ce:e9:
54:2f:88:cd:7a:11:5f:38:d2:3f:34:5c:8c:c9:cc:ea:61:38:
12:a6:75:69:1c:37:77:5b:f8:c7:b2:b5:bc:26:19:e4:1a:a6:
18:a9:f2:88:52:00:19:31:7a:d7:71:28:9c:4f:44:32:36:b5:
a1:be:8d:f5:05:ac:1b:8c:29:35:9d:ca:46:1a:ca:1c:6b:ef:
71:cb:7a:87:9f:a3:88:d3:6e:68:bd:e3:be:d3:d9:52:e3:8a:
8a:f6:c2:d7:91:9e:45:f9:e2:f1:bb:ba:db:7d:e3:9d:75:85:
9b:14:c6:23:1e:51:4e:f4:7c:3f:61:5b:67:c6:bc:b4:ab:a4:
9b:c2:b0:a7:f1:1f:3e:b5:18:9b:cd:d9:70:fa:f3:51:35:c4:
52:74:bf:cb:2e:02:80:ee:73:e1:9d:d7:33:a5:09:5f:41:77:
c8:43:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org