Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CABD67A983511EFBB7B045C762E951A.roa
File: 1CABD67A983511EFBB7B045C762E951A.roa (raw, json)
Hash identifier: cidRwxysPt5ov1GztUB8VDtde++GWPo/lVu/Mj0jk4w=
Subject key identifier: E5:F9:51:5C:CE:36:27:54:4B:BC:C5:E9:44:47:F0:59:10:90:97:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CABD67A983511EFBB7B045C762E951A.roa
Signing time: Fri 01 Nov 2024 09:38:55 +0000
ROA not before: Fri 01 Nov 2024 09:38:52 +0000
ROA not after: Sun 24 Nov 2024 09:38:52 +0000
asID: 54467
IP address blocks: 154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66755 (0x104c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:38:52 2024 GMT
Not After : Nov 24 09:38:52 2024 GMT
Subject: CN=6724a1af-d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:48:0b:e3:21:cc:dd:bb:0e:dd:5f:98:3f:
40:39:4b:a7:54:51:c4:97:88:94:2a:0a:0f:f6:0c:
9c:08:d9:69:9a:4c:c6:9c:43:dd:ab:45:fe:fb:cd:
c9:b3:46:21:ea:01:ed:04:6f:d5:0a:f3:7f:dd:fd:
82:a2:07:c8:de:9f:f9:d4:09:d7:24:62:bf:e4:6c:
f2:c5:d8:53:4b:31:b8:d0:a9:1b:99:74:c5:05:27:
21:a4:33:3c:a7:c5:94:34:90:25:b0:01:40:09:02:
a9:cd:7a:ad:14:0b:01:b8:00:50:13:be:d4:49:a2:
17:5d:4d:81:5f:77:56:e3:b2:7d:d3:2f:27:e3:cd:
4d:be:fb:54:28:73:49:bf:22:1b:6d:ec:f9:a2:15:
87:bd:36:58:1a:b1:f4:de:45:aa:b3:ea:f3:1f:52:
61:9e:d4:0a:a1:9d:1c:75:f9:4e:ac:d1:3b:10:6c:
ce:b2:2f:b8:e8:55:f1:1d:8b:7b:19:91:0a:d7:13:
82:6e:13:7b:01:9f:40:d0:f3:33:79:1f:06:07:54:
88:98:06:8c:14:11:20:c8:4a:2c:72:85:28:46:f1:
c4:12:a2:5f:72:b1:c8:fe:8b:d7:20:cf:27:cc:93:
11:c4:82:3d:2c:93:01:35:20:e5:94:06:aa:e3:89:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:51:5C:CE:36:27:54:4B:BC:C5:E9:44:47:F0:59:10:90:97:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CABD67A983511EFBB7B045C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
02:2b:00:ce:4e:03:67:bf:24:b5:18:f2:d2:81:e4:5a:a9:2b:
e4:36:d3:7c:46:ab:95:53:98:ec:e8:3e:cc:21:cb:0f:a3:fe:
d1:a2:b0:84:25:89:a6:2d:35:a9:d9:77:3e:6e:b2:18:c0:3a:
ac:8e:28:8e:73:42:e7:df:dc:35:18:76:4a:d7:6b:1c:2d:02:
48:df:9b:28:36:32:06:c0:09:de:11:68:a3:00:8e:b0:30:3d:
d2:22:7b:28:1c:7c:0f:bf:3c:bf:56:9e:9c:53:97:04:14:c4:
d5:92:3c:15:06:19:9c:55:4c:ce:0b:f3:90:64:77:74:86:b3:
f4:f1:d1:a8:b9:9f:b7:68:76:fc:f5:da:f6:4d:fd:85:e2:ba:
fc:db:a6:20:d9:60:39:8f:a6:2f:99:c8:14:8c:b0:be:e7:e1:
85:ab:4f:8f:63:e2:d5:e6:02:e4:2d:95:a4:06:f9:d9:c7:b8:
6c:6b:81:bf:7e:24:69:5a:aa:14:ea:9d:20:51:1a:db:fe:b1:
55:33:0f:90:57:ee:dc:36:cb:88:10:94:3d:aa:ce:00:60:cb:
7f:93:6d:17:3d:c7:7d:5f:b4:f0:8e:28:85:94:fa:e9:84:b1:
1b:f7:ff:53:74:1a:e5:ee:79:7b:1f:e6:4a:5d:8e:25:19:38:
22:7d:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org