Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BFB82ACA19E11EF96F3A151762E951A.roa
File: 2BFB82ACA19E11EF96F3A151762E951A.roa (raw, json)
Hash identifier: g9WApY6jVtOp6J382eMGMihunDRTmIg4PE+ZgFCbzHY=
Subject key identifier: E1:51:52:6C:69:36:EA:B6:39:C2:53:0A:A1:63:A7:72:3D:A2:9A:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BFB82ACA19E11EF96F3A151762E951A.roa
Signing time: Wed 13 Nov 2024 09:03:39 +0000
ROA not before: Wed 13 Nov 2024 09:03:35 +0000
ROA not after: Sat 23 Nov 2024 09:03:35 +0000
asID: 39600
IP address blocks: 154.95.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 09:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68819 (0x10cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 09:03:35 2024 GMT
Not After : Nov 23 09:03:35 2024 GMT
Subject: CN=67346b6b-b687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:3f:fa:1b:d3:4f:6c:91:bf:e2:ed:1e:e0:
3a:10:11:98:fd:12:50:a3:cb:05:0e:fc:ff:7e:58:
67:4b:a0:da:0b:f8:67:4e:20:8a:3a:67:89:a0:6a:
e8:59:25:32:bd:a4:10:29:fc:79:88:1a:fd:66:dd:
0f:0d:b9:56:06:c5:e7:89:23:2d:04:ee:42:cf:9a:
31:32:4d:24:47:b9:46:dc:83:ce:2b:3d:5c:ef:87:
33:b0:4f:b5:c0:b1:7e:8e:1a:86:e1:7e:37:34:87:
50:31:09:84:3c:24:39:4a:f3:d2:33:42:8b:a6:63:
9a:81:7a:cc:e8:91:d0:67:cc:73:76:55:5d:a2:8f:
23:78:9d:32:bf:69:20:a7:11:c9:ee:a7:e0:b2:eb:
1c:41:7b:65:bc:2c:11:05:9a:40:ee:b4:5e:c9:8f:
48:32:51:48:1e:7c:66:7d:b6:59:4e:a5:0f:be:0f:
75:e4:8d:47:c1:ca:62:79:96:bc:49:34:81:e3:f6:
70:55:0d:b9:33:87:2b:6f:fb:9f:82:7c:79:58:91:
d5:23:a6:7f:9a:c7:09:46:cf:90:e2:e1:ef:32:22:
53:96:d1:53:29:d0:82:27:b0:58:a8:56:f2:41:c1:
6f:b5:aa:eb:19:d6:ad:44:56:c2:29:11:9e:01:6a:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:52:6C:69:36:EA:B6:39:C2:53:0A:A1:63:A7:72:3D:A2:9A:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BFB82ACA19E11EF96F3A151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.40.0/21
Signature Algorithm: sha256WithRSAEncryption
50:1f:9b:ad:af:96:67:b1:44:48:42:48:f4:c2:d1:59:72:55:
18:df:69:57:ea:a5:1f:48:c0:ca:1c:ed:1f:3b:cf:d9:2f:21:
fb:d4:0d:33:49:ec:8b:8f:54:42:86:bd:28:0b:5c:4a:b3:a0:
1c:ba:c7:90:06:39:70:22:fb:93:88:fc:c5:98:fa:f9:57:3a:
a5:08:7b:56:9a:44:9a:d7:2f:0d:aa:85:04:2d:15:d9:00:83:
e5:b2:55:99:f8:c8:54:b7:39:80:86:af:49:2a:b0:a9:69:61:
85:32:4d:2a:e6:24:78:ac:6d:6f:4b:a7:0c:ea:54:2a:cf:bc:
fe:40:d6:5b:6f:29:cb:36:f6:1a:c5:52:4b:79:52:8b:a2:24:
0c:97:4a:2f:a9:fa:52:35:eb:f2:44:44:0c:66:7e:1a:a4:32:
aa:e4:40:67:eb:b3:45:d4:a6:2b:8d:1a:5a:26:9e:c8:7e:3b:
68:fd:f5:ab:e2:36:b8:b0:b0:ee:de:83:4c:d5:8b:a4:cf:39:
a2:ff:65:f6:aa:9e:8b:80:ac:3d:3f:60:0b:b4:5d:02:82:1e:
8e:50:6d:81:84:ad:cb:9c:2b:19:6a:0d:83:41:90:e6:59:f3:
82:f1:f9:5d:9a:79:75:c9:64:13:c9:67:47:b2:03:bd:d2:0e:
19:36:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:02 2024 by rpki-client on console-fra.rpki-client.org