Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C58EFC49B8411EFAC198FBA762E951A.roa
File: 3C58EFC49B8411EFAC198FBA762E951A.roa (raw, json)
Hash identifier: +mCsps1PgOiWdZcCyuplt7m0suhJnFX5riCp62AjX4w=
Subject key identifier: 8E:32:19:7A:9B:72:24:44:34:A1:13:6E:E7:7B:65:5C:35:15:FD:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010809
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C58EFC49B8411EFAC198FBA762E951A.roa
Signing time: Tue 05 Nov 2024 14:42:52 +0000
ROA not before: Tue 05 Nov 2024 14:42:49 +0000
ROA not after: Mon 20 Jan 2025 14:42:49 +0000
asID: 135097
IP address blocks: 154.213.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67593 (0x10809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:42:49 2024 GMT
Not After : Jan 20 14:42:49 2025 GMT
Subject: CN=672a2eec-2901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:45:15:2a:68:89:01:d6:18:7c:d0:e5:09:
4d:c7:69:b3:bc:e4:df:fe:7a:0e:ee:3e:d7:72:4e:
23:65:f3:32:19:40:2d:50:4f:8a:d5:97:94:cd:42:
c5:68:f1:fb:9f:7c:2f:c7:94:71:66:f2:ac:88:fc:
56:31:a7:44:a7:65:9a:6d:da:c8:e5:f4:fd:29:99:
16:d8:40:2c:ac:4d:2a:bf:1d:60:03:e9:fb:d1:33:
52:dd:59:f5:f0:ad:fb:01:ed:09:47:85:de:fe:c7:
76:67:59:ac:1a:ab:10:31:d8:a4:12:ea:5d:10:f0:
22:6e:f7:3c:36:9f:03:7d:60:fb:ea:08:a2:66:5c:
8e:be:da:b9:38:05:8d:83:e8:e9:04:be:1f:48:e0:
58:7f:98:27:d3:79:bc:82:43:1e:f2:43:a7:b3:6c:
01:b4:9e:35:ea:ff:f4:0e:03:b3:f2:03:e3:3c:fe:
99:84:49:ad:ce:0c:63:a2:16:81:42:3c:ec:d7:51:
4c:08:9b:21:be:1e:1d:80:23:4a:57:a4:f8:f1:46:
78:4e:04:05:86:65:59:93:df:53:c6:2e:56:af:19:
de:2d:46:df:65:2d:b8:c8:63:b7:4f:c4:6c:1a:46:
51:06:49:20:f6:48:2f:8d:3c:ff:11:22:fc:fe:19:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:19:7A:9B:72:24:44:34:A1:13:6E:E7:7B:65:5C:35:15:FD:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C58EFC49B8411EFAC198FBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e9:29:29:00:55:df:d4:8f:a5:4b:be:11:88:9a:bd:6d:45:
41:19:8a:2d:07:11:7b:f3:3f:96:be:0b:cd:bf:46:86:f9:3e:
a1:60:93:f4:a4:aa:df:cf:1c:e9:52:a1:08:32:20:cb:9e:a0:
60:e9:3f:df:77:20:bf:7f:36:d8:0a:81:3b:f8:b7:e8:8a:98:
1e:16:73:9d:79:50:44:3e:8e:7e:8c:d6:fc:2a:b1:26:03:ed:
87:7a:78:53:1c:08:d6:00:e6:99:50:c7:96:a4:31:ac:85:88:
38:92:e3:62:91:d0:ce:f5:bf:6d:92:bc:a5:89:e8:3f:6a:02:
30:6d:1e:21:69:50:e2:cd:87:ff:19:27:c9:94:23:6a:38:db:
67:b8:05:8b:ad:20:e8:8c:23:68:ca:84:93:61:b4:77:09:2a:
fa:82:7c:10:6d:d3:2c:c7:55:fd:f5:22:09:8a:0d:cd:e9:3c:
63:90:5a:52:1c:9a:41:b8:ba:fe:86:66:c3:97:17:1f:a5:67:
a7:ca:6b:c3:4f:46:bb:7d:dd:05:7a:dd:be:3a:e9:72:cd:b6:
6f:b3:6d:08:da:0e:fa:32:0c:4e:3b:39:a5:84:44:23:97:7e:
6e:aa:b4:19:df:5e:a7:f8:29:57:09:23:a5:ec:a8:6e:18:eb:
31:3e:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org