Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAFE0F0A0D711EFB527AA41762E951A.roa
File: 3DAFE0F0A0D711EFB527AA41762E951A.roa (raw, json)
Hash identifier: zzTstTljFjxkVNe5JD9FZRWZ5PcDOVJe/WKmKMAFu+4=
Subject key identifier: 84:09:FB:C9:24:93:10:52:8F:FE:D3:7D:12:F8:18:1F:10:A3:3B:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAFE0F0A0D711EFB527AA41762E951A.roa
Signing time: Tue 12 Nov 2024 09:19:39 +0000
ROA not before: Tue 12 Nov 2024 09:19:35 +0000
ROA not after: Fri 13 Dec 2024 09:19:35 +0000
asID: 138915
IP address blocks: 154.206.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68610 (0x10c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:19:35 2024 GMT
Not After : Dec 13 09:19:35 2024 GMT
Subject: CN=67331daa-e542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:e9:28:04:48:65:18:9f:38:3f:5f:92:c5:
01:d8:dc:47:72:cf:e8:9f:6d:98:a2:9f:13:72:44:
07:b6:e3:1c:3a:96:b1:7c:3b:99:ba:2a:c7:a0:28:
2b:75:88:7b:00:7e:ab:cb:24:3b:6b:d8:01:9e:27:
1a:a3:d1:85:25:fa:d0:50:29:c7:0f:b9:62:8a:46:
5d:bc:ab:7c:4f:8d:ab:d1:ab:02:32:1d:93:a7:0a:
e7:6b:a1:01:bf:ec:7d:54:94:b8:a6:21:9d:81:a3:
42:d5:09:91:ae:d4:a2:4d:f4:84:19:e3:9c:83:d9:
cf:f9:a4:fb:9f:80:01:0e:11:04:20:cc:78:36:ef:
d0:17:5b:92:42:65:2b:27:e5:9f:54:da:de:b6:86:
00:82:8e:9c:fb:75:23:a7:b1:e9:70:68:80:51:a7:
39:33:70:bd:1b:fb:91:8f:fe:84:7d:d5:94:0f:4f:
5e:bb:1d:24:03:9c:ad:a7:49:7f:18:9d:77:f0:7e:
4c:cf:01:89:16:cd:0e:4e:b2:61:ca:f3:8f:f1:8d:
71:a6:fe:f2:1e:2f:ed:8a:44:47:d1:ab:32:99:9b:
b8:89:9f:5d:d0:52:1a:69:42:ca:2a:ee:02:79:5a:
01:4b:18:d8:19:32:7c:23:08:30:eb:ce:09:64:e5:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:FB:C9:24:93:10:52:8F:FE:D3:7D:12:F8:18:1F:10:A3:3B:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAFE0F0A0D711EFB527AA41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:23:2c:31:17:31:82:e7:e2:54:86:1b:b2:82:54:2a:61:2f:
8a:db:96:bf:b4:36:8e:75:0b:f6:b7:30:11:d5:b5:59:5f:30:
c3:b8:8d:64:b9:18:fa:ed:b5:0c:90:a4:a2:dd:d7:21:e4:33:
e2:9d:b2:d2:a4:59:c3:79:8b:6c:d1:22:38:95:87:47:ef:9e:
12:73:8a:a7:64:25:93:d5:83:41:52:e2:60:90:3e:d5:c0:cb:
6c:3d:14:7c:77:ac:f7:06:1d:68:a5:c8:3f:6a:bc:81:e7:fe:
ca:f8:96:2b:04:58:38:10:d6:64:83:57:08:b8:d0:92:b0:8a:
fd:94:24:0d:26:12:97:87:7c:4a:ec:0d:ec:6d:88:b4:90:ff:
d4:da:26:a5:13:e3:b0:f8:3f:7c:ce:2e:ff:58:bd:22:2e:72:
9a:ab:14:1d:1a:42:01:38:e3:c7:26:57:fe:fb:f9:a0:66:96:
14:d2:b4:ff:b4:a1:65:f5:67:a1:06:61:e3:23:33:e3:f6:dd:
a1:15:5b:1a:dd:58:ef:24:ff:ec:0c:19:f4:b4:53:db:7c:97:
6d:96:0f:a9:17:48:d5:85:28:fd:8e:a2:4d:d5:84:63:ba:b7:
72:0a:60:32:69:bf:40:e4:4c:5b:d5:6c:f0:0a:da:ed:07:e2:
f4:32:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org