Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD993BCA59111EF9134C7AE762E951A.roa
File: 1CD993BCA59111EF9134C7AE762E951A.roa (raw, json)
Hash identifier: DFz+JKyVvjuKkrpxfAwtjxHmdBsGQnggRW67D5i1mEk=
Subject key identifier: F8:8F:22:B6:F8:99:00:DD:48:46:71:71:58:67:51:CB:A7:3A:14:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD993BCA59111EF9134C7AE762E951A.roa
Signing time: Mon 18 Nov 2024 09:40:14 +0000
ROA not before: Mon 18 Nov 2024 09:40:11 +0000
ROA not after: Sat 21 Dec 2024 09:40:11 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69347 (0x10ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 18 09:40:11 2024 GMT
Not After : Dec 21 09:40:11 2024 GMT
Subject: CN=673b0b7e-57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:9b:21:af:13:f2:65:7b:26:4b:df:59:ce:
7d:8a:ed:ef:04:0e:ed:60:88:b0:56:25:cb:ba:eb:
32:6d:f4:10:12:bd:10:5b:31:d2:64:2d:66:21:82:
33:e8:ef:b3:b1:0e:71:6a:4c:55:d4:d7:34:4e:9f:
9b:98:ed:c1:99:08:02:18:d5:01:f9:b5:a8:03:cd:
17:3a:74:dd:15:a8:55:bf:2c:11:bd:16:44:77:38:
05:b0:dc:b0:79:c6:39:d7:c2:0a:41:76:30:0b:ff:
ce:73:b8:31:72:fd:77:71:ef:3c:6f:66:e5:20:9a:
1e:2a:3f:90:13:9f:93:bd:c4:55:80:a1:79:00:a4:
6c:39:00:6a:9f:1f:70:51:6f:8c:50:c2:2e:a9:30:
1d:da:54:c5:d9:36:f7:53:2f:e8:12:b1:e4:f2:8d:
ce:65:ca:ed:3d:1f:11:b5:4f:1e:7d:f2:f5:94:ae:
fa:42:bf:e8:4d:ac:1c:70:1d:5e:06:e9:07:fd:0e:
44:50:7b:81:37:8b:a7:3b:5b:bf:29:ae:48:04:cb:
d9:2a:eb:a2:eb:0b:65:1e:88:5f:d3:2e:82:1c:41:
ac:08:bb:0c:16:04:53:8f:3a:4c:f6:d0:2a:f8:bc:
46:06:8e:6c:87:cf:80:91:1f:db:5f:97:0f:bb:cb:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:22:B6:F8:99:00:DD:48:46:71:71:58:67:51:CB:A7:3A:14:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD993BCA59111EF9134C7AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9e:3f:53:8f:63:7a:f0:aa:9b:ee:ba:6b:2e:84:83:b3:30:
83:73:74:cd:62:68:e8:c8:1e:02:89:6b:9b:18:9d:fb:f2:d3:
aa:d9:79:f7:79:69:c6:1b:5a:5f:c8:0c:b9:de:32:f2:27:6e:
34:51:c9:a0:7f:de:9f:5d:68:36:a4:36:e0:59:c2:00:84:be:
c0:31:1d:bf:89:22:4d:5c:8e:8e:0f:70:a0:40:60:26:b2:62:
8f:54:22:01:2d:3d:a7:5e:05:9c:d7:ff:e5:f1:a3:25:82:d2:
93:11:d2:6f:6a:a0:9e:7c:da:91:dd:0d:17:e7:3f:5a:28:9d:
f8:24:54:bb:43:8c:a0:c1:6c:f6:87:41:b2:f2:bc:1b:db:1c:
c3:5d:8e:8c:43:89:68:e7:26:bf:e1:9d:6c:51:26:62:2f:b9:
db:4e:0c:88:a2:26:fc:b7:fb:7e:7e:c8:44:e8:fe:20:21:76:
bb:23:c1:e8:93:d0:33:30:0b:8b:64:58:2b:55:06:e3:8a:f6:
2b:ea:c2:be:ea:b3:7c:58:b0:60:04:af:4c:04:b7:42:6b:cc:
20:d2:33:c9:9d:fb:27:3e:ea:aa:0a:51:59:8d:31:ea:46:d1:
4c:df:33:23:6c:c8:16:54:05:c3:99:23:88:e8:75:20:40:05:
54:f4:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:23 2024 by rpki-client on console-fra.rpki-client.org