Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39DE4500993111EF9462488E762E951A.roa
File: 39DE4500993111EF9462488E762E951A.roa (raw, json)
Hash identifier: Q88kR0etWUzCUksiMSlKI0Ub/a6m6bc0aC68/T5zjSI=
Subject key identifier: 68:39:B9:3F:72:4E:B6:E9:0D:16:F3:54:12:31:70:F7:BC:C0:C0:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0105D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39DE4500993111EF9462488E762E951A.roa
Signing time: Sat 02 Nov 2024 15:43:37 +0000
ROA not before: Sat 02 Nov 2024 15:43:34 +0000
ROA not after: Mon 13 Jan 2025 15:43:34 +0000
asID: 135377
IP address blocks: 154.202.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67028 (0x105d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 2 15:43:34 2024 GMT
Not After : Jan 13 15:43:34 2025 GMT
Subject: CN=672648a9-a7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:41:49:79:39:94:dd:c1:3d:04:11:5f:ca:
c6:ce:9b:66:02:41:fd:02:77:bf:4f:f5:aa:25:fa:
e6:95:d7:27:a7:c5:8c:96:b5:cc:e7:dc:e4:6b:69:
71:2c:6e:eb:b3:d9:13:8a:0d:9a:c2:f2:b7:e4:80:
bb:86:16:8f:cf:ed:88:93:65:6a:ae:9f:84:94:16:
9c:a2:39:66:9f:79:af:28:09:ce:e9:b7:91:91:78:
b3:29:ae:5a:31:61:86:ff:da:a8:71:05:38:14:6b:
6c:42:b0:dc:fd:4d:75:ba:6d:85:e8:1d:e5:0e:a6:
b4:07:b9:63:39:3a:84:f3:aa:bc:15:cb:c4:38:ad:
a8:24:a7:55:82:01:e4:16:9e:67:2c:0f:00:d4:a2:
25:40:4d:ff:ec:8e:92:1a:71:fb:bc:b4:d1:a0:02:
0f:ac:21:5b:cb:db:87:43:5d:dd:a7:7c:06:fc:76:
b0:e9:47:b0:3d:2b:bf:db:bb:b2:0a:1a:75:0b:9b:
35:28:b6:62:bd:67:39:1a:32:05:91:e4:cc:1a:50:
3f:72:b4:1d:60:0e:b8:3f:dd:03:ff:3a:d9:95:81:
80:0d:97:d8:53:f0:ea:67:8d:de:b2:aa:4a:f3:5b:
0d:f4:7a:f2:a5:4c:b0:bb:e1:f6:ef:05:15:4c:eb:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:B9:3F:72:4E:B6:E9:0D:16:F3:54:12:31:70:F7:BC:C0:C0:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39DE4500993111EF9462488E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:eb:6b:b3:68:f8:41:1f:b5:94:c8:90:b3:af:34:c4:c8:dd:
85:3d:72:7e:95:1d:30:76:0a:b5:e1:bf:cc:e8:fc:85:e3:9e:
ef:45:1b:a0:89:6c:9d:29:5e:c8:5e:56:a0:b7:80:86:dc:8e:
78:34:f1:cc:c1:1a:7e:39:7d:61:76:d6:d2:46:ff:3e:1c:53:
79:c7:8b:51:5d:1c:62:53:c4:a1:ff:db:85:e3:08:1a:e5:3e:
a9:fe:c2:df:6a:e2:c6:98:3d:ab:79:54:ad:f2:89:2e:59:c0:
b8:e5:d2:f9:eb:3b:93:81:08:b1:6a:08:04:87:fb:3c:0c:ee:
0f:cb:fa:f1:8b:f4:3f:b6:a7:75:08:be:ee:ab:19:b5:a0:51:
f5:40:07:f1:fc:2e:28:b7:4b:f1:63:f7:1c:fb:c9:fd:8f:d5:
60:75:42:46:ab:0e:3e:14:9b:70:5e:47:f3:4e:06:d0:17:9d:
1a:68:84:78:f3:b9:cd:f8:1b:20:b6:01:d6:f5:4c:87:10:0c:
f5:f2:4d:cb:5b:2b:2a:0b:75:99:7f:d7:9b:9a:61:35:d0:5b:
3e:63:c1:5d:2f:42:c1:62:b5:4e:f1:9e:48:e5:cf:80:14:87:
a3:9b:4c:08:c2:00:c3:84:6f:78:22:9e:ee:b0:5b:76:c1:0a:
4d:24:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org