Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219F62849B7111EFA0E62744762E951A.roa
File: 219F62849B7111EFA0E62744762E951A.roa (raw, json)
Hash identifier: lLX2Utnm6eMFZcAKkY8rldAiS+Y//hTn2jdTfro8Wqs=
Subject key identifier: 70:0E:03:03:5E:93:D2:32:39:C4:39:D0:0D:25:E9:35:BA:48:81:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219F62849B7111EFA0E62744762E951A.roa
Signing time: Tue 05 Nov 2024 12:26:07 +0000
ROA not before: Tue 05 Nov 2024 12:26:03 +0000
ROA not after: Mon 13 Jan 2025 12:26:03 +0000
asID: 7018
IP address blocks: 154.195.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67513 (0x107b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:26:03 2024 GMT
Not After : Jan 13 12:26:03 2025 GMT
Subject: CN=672a0edf-3451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:2b:5b:c7:9e:76:6b:7f:e1:bb:fe:ba:ef:
4f:ec:60:bf:4b:89:0f:e0:da:dc:d0:99:b8:14:7c:
10:c0:00:51:9c:10:23:65:21:e9:58:8b:32:c8:13:
e3:1c:e9:b7:7a:e0:6d:c8:f8:23:6d:b5:7e:ee:be:
a8:d1:84:97:99:05:eb:6b:73:4b:7a:7f:35:ca:3e:
77:5b:ab:39:e3:0d:04:5c:60:03:e1:b6:f7:48:c8:
ba:41:ff:2a:8a:87:df:5d:12:ee:80:4f:89:10:69:
30:63:74:53:9d:6c:3b:a8:29:4f:61:69:9c:af:cb:
8a:c6:a3:21:02:ec:03:49:5e:89:1b:88:10:37:71:
6c:a7:aa:6b:44:a2:7f:8d:18:89:f3:b3:87:4b:be:
f1:5e:b1:ef:92:23:f0:57:fd:1d:c2:ef:28:47:d0:
11:6f:d2:44:8a:3a:8e:bf:06:5e:1a:5e:21:bd:49:
68:f6:aa:06:84:fe:b2:46:46:83:a3:f7:d4:ca:0f:
fc:25:3c:1b:f7:f5:a6:20:00:1c:7f:ca:d8:86:b4:
e5:18:ed:b4:b5:87:bf:2d:d7:4b:8c:c2:80:6e:c2:
cd:ad:4b:c9:1a:c7:d8:3f:95:8e:de:6b:85:0a:a5:
b4:e8:d9:a3:6e:87:e3:10:a3:e7:db:0a:e6:cb:c1:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0E:03:03:5E:93:D2:32:39:C4:39:D0:0D:25:E9:35:BA:48:81:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219F62849B7111EFA0E62744762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.40.0/23
Signature Algorithm: sha256WithRSAEncryption
66:dd:c1:03:e9:db:75:da:32:0b:15:dc:a8:5b:58:79:ae:4c:
b7:2a:7f:dd:2b:c5:ab:9b:49:be:de:db:57:65:da:3a:5c:bf:
61:cc:86:52:2a:92:b8:38:e9:f0:6d:95:e1:9f:0a:78:7a:2b:
d1:b2:ac:a1:24:e0:e4:d3:89:9e:82:fd:2d:ad:30:f2:ee:7f:
0b:be:ff:27:59:7c:c5:11:d7:0b:49:56:23:55:58:26:bd:60:
0c:4e:14:e6:0d:67:ff:84:4a:d2:95:53:98:13:da:5f:a1:51:
6f:08:7c:7a:8d:57:f8:16:52:3e:39:99:03:ef:d2:e9:f7:d9:
7f:7e:3f:2c:f2:a0:83:ac:12:ad:83:96:c1:7d:69:ef:99:94:
68:1c:1c:5e:5b:6c:89:52:ff:63:5a:60:d3:15:34:ee:af:bb:
e8:75:7b:27:d7:98:2f:25:9e:8b:86:0a:93:cc:0b:c7:b4:ef:
8c:09:03:3f:fc:ba:5b:d0:77:cd:c8:8e:cb:e6:26:1c:3d:9a:
63:89:fb:f0:8d:a0:41:77:f8:26:cc:84:8a:fe:f9:dd:9f:ed:
b4:0d:f8:e7:0e:43:f3:d6:c1:a8:cc:39:69:02:74:13:6c:7e:
1d:85:80:6c:d7:75:41:d2:32:6d:a5:d2:0a:ba:71:4f:0b:09:
af:42:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:41 2024 by rpki-client on console-fra.rpki-client.org