Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD5FBC49A9411EFB4B9DE52762E951A.roa
File: 2BD5FBC49A9411EFB4B9DE52762E951A.roa (raw, json)
Hash identifier: RDFs1l0oQqaL0LsyDC3LFbRgdcPwPMdfILAmG8IyWuo=
Subject key identifier: B3:BC:49:BB:72:F1:05:36:7A:1D:67:86:A5:69:15:2E:F6:D2:52:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010690
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD5FBC49A9411EFB4B9DE52762E951A.roa
Signing time: Mon 04 Nov 2024 10:04:25 +0000
ROA not before: Mon 04 Nov 2024 10:04:22 +0000
ROA not after: Mon 25 Nov 2024 10:04:22 +0000
asID: 44559
IP address blocks: 154.94.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67216 (0x10690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 10:04:22 2024 GMT
Not After : Nov 25 10:04:22 2024 GMT
Subject: CN=67289c29-f95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:7d:5c:80:a0:e2:b5:c5:7b:3a:ca:28:b8:
36:0c:e0:51:74:1a:36:79:71:4a:cb:77:08:00:ef:
52:e5:45:0c:22:56:ed:7c:21:ea:67:08:6c:bd:df:
1b:c2:26:f1:7f:28:b2:ad:ae:3f:3e:17:ff:d0:74:
cd:eb:2e:fe:30:3d:aa:eb:39:3d:23:d3:1c:d1:84:
e6:b1:ad:fd:6b:26:7a:81:4f:af:34:a4:de:62:7e:
c5:ff:06:54:0c:5c:28:3d:d0:cd:42:45:6e:54:ed:
01:12:f9:4f:66:d0:3d:6b:e4:4f:e4:e0:62:73:f7:
34:13:fe:52:e0:2e:2f:c8:7b:f8:88:74:ee:89:5d:
41:61:2a:25:f7:21:d9:ae:73:b3:53:f6:c5:37:c5:
9d:55:e4:de:5a:f4:4a:17:79:3b:a3:e9:5d:65:47:
11:53:88:eb:97:44:39:37:09:78:e1:d5:19:73:79:
15:a4:8a:77:4f:8a:53:8f:9b:e4:d7:fa:c9:89:6c:
04:63:a9:06:4e:da:76:fb:53:f3:ec:79:3a:32:9f:
e3:6a:5d:94:e3:d2:bf:c6:e7:90:6f:03:ad:e8:f5:
f2:41:45:9e:fa:1c:1b:31:79:51:7b:73:c3:2a:f8:
63:29:46:93:f5:43:81:13:ea:63:89:36:84:57:f9:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:49:BB:72:F1:05:36:7A:1D:67:86:A5:69:15:2E:F6:D2:52:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD5FBC49A9411EFB4B9DE52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:1c:02:2f:f1:10:a7:1d:37:2b:e3:88:fd:cc:e1:90:3d:bf:
a5:0e:ce:c6:d5:ce:97:d0:d1:92:b0:b9:f3:4a:70:72:4c:52:
1c:a4:cf:e5:44:f1:01:1a:d8:c5:26:52:7e:37:1e:a1:70:d4:
8f:cf:b7:80:14:b1:66:f2:d6:c1:9f:1a:02:43:4b:70:b6:5d:
ab:de:1b:6c:09:6e:29:aa:e8:34:2b:0d:d1:7c:c7:40:cf:a5:
d9:ab:7b:89:56:cb:e4:64:74:d4:fd:06:83:be:93:b4:ad:0a:
3b:d8:24:38:3c:67:e6:1b:4f:de:7c:95:00:e7:70:a5:cc:d0:
b4:ca:32:96:32:62:1c:b8:ea:80:d7:0c:ea:09:c9:ab:ea:9d:
3f:ce:5a:b5:1b:b8:34:c5:70:c6:9e:00:84:1c:0e:80:fa:3a:
9c:22:e7:b6:5d:0c:12:0d:d7:4e:41:9a:c3:74:91:36:8b:9b:
7c:67:79:73:24:24:e7:cf:08:33:eb:be:92:bc:b6:27:1a:6e:
9d:4f:37:3c:43:61:50:28:48:84:be:f6:98:5e:85:22:6b:5e:
a7:94:fb:7d:e4:9e:00:4b:64:fc:d7:43:1d:15:af:99:1c:f8:
a5:10:85:e7:62:57:8a:70:07:d9:30:4f:a8:fa:8f:e0:32:9b:
f2:2f:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:02 2024 by rpki-client on console-fra.rpki-client.org