Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31095478A71F11EF862B3D6E762E951A.roa
File: 31095478A71F11EF862B3D6E762E951A.roa (raw, json)
Hash identifier: cCF7W9m34tHCRMsu+cVR2ujDpyIHlNU18Jye7e7mU2s=
Subject key identifier: 40:2F:13:E3:C5:D7:DB:E9:A8:0B:4A:4D:A9:B7:56:82:07:9D:35:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31095478A71F11EF862B3D6E762E951A.roa
Signing time: Wed 20 Nov 2024 09:09:48 +0000
ROA not before: Wed 20 Nov 2024 09:09:45 +0000
ROA not after: Sat 21 Dec 2024 09:09:45 +0000
asID: 29852
IP address blocks: 154.194.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69467 (0x10f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:09:45 2024 GMT
Not After : Dec 21 09:09:45 2024 GMT
Subject: CN=673da75c-426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:0e:7a:02:74:3b:e1:f6:9a:85:4e:10:0c:
b8:46:6a:6d:67:68:26:9a:97:1f:1d:48:1d:ec:f0:
82:de:97:cc:2e:cd:85:d8:d7:ae:59:90:a4:7d:d6:
a6:0b:a1:17:e6:ee:cb:9e:75:1c:97:5b:b6:36:d7:
bc:13:84:b4:05:dc:8e:4f:5e:7d:0a:1e:a7:72:8b:
d3:4c:62:57:29:e6:5a:d3:a3:97:71:f5:e1:ea:21:
75:7b:d6:54:e9:5e:5d:f3:fc:36:a5:c1:23:26:f8:
1e:8a:ca:73:14:62:79:94:e6:a6:da:e3:6c:21:ab:
c8:fe:06:d7:47:16:a0:17:e3:ce:76:5b:85:79:e4:
2d:e8:2b:12:c8:cf:74:84:7b:43:33:0c:f8:bb:84:
bb:50:2d:32:17:1f:28:7c:d5:e5:be:8a:68:93:54:
ed:d9:7d:04:72:56:46:b3:08:aa:f9:37:25:8c:d8:
df:a3:a9:d1:3b:fb:c8:58:3e:01:c2:25:06:58:40:
19:6d:19:60:56:10:7d:fb:ec:d1:f0:5a:af:e2:61:
c5:cd:d6:fa:db:1f:e7:73:ce:8a:3e:86:07:b1:76:
58:9d:20:d5:a8:d3:a5:73:06:54:c9:8a:6f:6a:ca:
0b:23:51:78:22:fd:67:39:b5:c8:22:a3:a3:b7:bc:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:13:E3:C5:D7:DB:E9:A8:0B:4A:4D:A9:B7:56:82:07:9D:35:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31095478A71F11EF862B3D6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.58.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:93:68:5f:95:86:5e:e8:bb:12:66:63:8f:1e:23:05:00:fb:
4b:1a:08:65:be:21:15:cf:70:95:5e:9b:75:0b:69:79:7f:5c:
a4:f9:0b:36:50:d7:4a:ee:2e:49:6e:ff:b0:ed:df:a3:07:0e:
bc:da:71:71:eb:2d:e0:a1:07:6a:0c:98:68:f6:97:aa:ff:0b:
83:0d:19:16:ee:ce:b2:77:0a:ff:ed:09:43:67:d1:d1:3d:2f:
bd:f7:c8:20:05:4f:96:75:07:0b:ca:bf:e4:ab:a8:76:21:bb:
ca:99:53:62:84:80:ed:95:a7:c1:c0:a9:45:eb:95:d0:a3:4e:
21:d2:e3:39:fb:ee:bb:03:87:a9:ad:6b:cd:32:2a:ac:ec:5f:
81:9f:e7:41:75:f2:59:20:e1:88:ce:0e:d0:98:ee:80:36:51:
9e:c2:e2:ad:3b:33:b3:07:ad:5f:07:dd:40:d3:81:74:0f:30:
fa:bf:22:6f:aa:ea:70:18:fe:c1:5d:d4:8f:4b:d5:6a:7d:12:
74:f4:4d:e5:7d:99:b7:3b:ce:80:fb:da:56:a8:22:11:0e:57:
c3:57:8b:67:3c:fc:57:35:3e:17:5f:df:64:72:aa:cb:f6:dc:
26:6b:13:9d:44:16:3c:0f:a2:0e:7a:1a:04:18:79:44:3a:42:
24:11:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:26 2024 by rpki-client on console-fra.rpki-client.org