Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371F5BD4A4C511EF9117A2AD762E951A.roa
File: 371F5BD4A4C511EF9117A2AD762E951A.roa (raw, json)
Hash identifier: IuDUU+szFI4fR1q9TBSkMMajhU0gn1+7jAbMPbJ5wF0=
Subject key identifier: F7:CB:27:B6:BE:6B:88:05:84:7F:C7:33:1D:DA:C4:FC:20:57:B8:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371F5BD4A4C511EF9117A2AD762E951A.roa
Signing time: Sun 17 Nov 2024 09:20:41 +0000
ROA not before: Sun 17 Nov 2024 09:20:37 +0000
ROA not after: Sun 24 Nov 2024 09:20:37 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 09:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69244 (0x10e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:20:37 2024 GMT
Not After : Nov 24 09:20:37 2024 GMT
Subject: CN=6739b569-0a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:b5:12:b8:cc:23:8f:00:e3:63:2b:b9:15:
4a:46:da:8e:3a:0b:da:79:3d:90:e4:a8:1e:83:b5:
d5:ba:23:90:39:89:5c:8e:04:d9:11:5c:bd:50:bd:
35:32:1a:78:80:23:8f:8d:7d:08:e7:01:a0:b8:39:
5c:dd:68:b9:0e:f7:9a:54:a3:b4:da:35:36:49:8d:
01:83:6e:87:82:bd:fb:f5:7f:e5:91:a0:1e:d5:fd:
4b:59:55:0f:71:ab:af:39:a9:06:3f:4e:71:25:9d:
51:b9:43:fb:d5:ed:d3:8a:a5:6d:02:0f:f2:f1:d8:
72:ae:7f:d8:83:00:0a:65:0e:fa:e9:56:d3:ae:32:
25:a6:ab:7f:14:ee:7b:77:3e:f3:41:01:56:46:85:
a2:c3:11:3e:60:3e:96:54:7a:f8:28:7f:b9:36:16:
66:9d:41:f5:a1:86:19:38:ba:31:f8:09:a2:7f:aa:
fb:9a:a8:c2:c9:cf:91:74:94:ee:a7:d3:7c:5d:4b:
41:69:c3:85:aa:93:ff:25:b3:0a:14:6f:75:2a:a7:
65:e7:f7:d4:79:24:e6:bd:bc:e4:de:68:19:f0:51:
fb:d6:a1:a7:ea:8b:10:71:ac:28:1d:c0:f6:7c:3a:
64:95:37:46:db:1c:7a:75:19:08:5f:ac:47:9c:62:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:27:B6:BE:6B:88:05:84:7F:C7:33:1D:DA:C4:FC:20:57:B8:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371F5BD4A4C511EF9117A2AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:95:e6:f4:2c:aa:65:07:89:61:9e:c0:dd:c3:dd:17:56:5a:
9d:ec:a4:a3:fe:51:dd:b8:80:a3:64:11:b0:12:29:c3:f3:c5:
c0:7f:f8:d8:fe:09:75:dd:27:aa:a6:79:73:9e:67:df:d1:43:
b4:d8:02:97:5f:e3:a3:a3:cc:e6:66:93:6e:fa:aa:4f:4e:56:
30:45:11:9c:19:d6:1a:ac:84:89:57:ca:f5:f0:cc:ef:b8:b2:
db:35:a5:d9:f8:3d:46:0b:ec:6b:33:eb:ad:6d:0d:3a:bf:72:
eb:77:2c:89:30:0d:0c:57:f8:c7:f9:39:8e:f8:6e:c8:b9:da:
23:da:f9:43:72:4b:05:65:97:c7:ac:bf:66:15:29:00:5f:8a:
82:00:54:2c:ec:82:51:a5:4d:2e:4f:1c:ae:32:b3:b8:d7:62:
51:a7:05:d5:d3:9b:f2:55:b4:5e:a7:7a:e2:84:a5:00:71:79:
f1:e2:c8:0f:f8:94:24:2c:51:1f:75:89:72:81:ba:8c:60:0e:
6a:9e:24:ca:52:2f:f8:c2:2d:5e:03:8f:7e:d9:aa:06:95:52:
67:33:83:b1:75:cc:44:17:fe:7f:26:dc:2d:66:02:66:0b:dc:
30:e3:88:4c:e1:54:b4:85:47:45:39:5d:c9:96:29:70:b0:bf:
9b:91:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org