Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BD6128A8CD11EF93A36980762E951A.roa
File: 42BD6128A8CD11EF93A36980762E951A.roa (raw, json)
Hash identifier: OdzY/I0Wonezh2HmuezRXScH4Ou2P1Akz4J60TYwsnA=
Subject key identifier: B9:89:79:C4:24:0E:A5:7E:03:73:1A:80:AC:79:6E:41:1C:DF:22:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011013
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BD6128A8CD11EF93A36980762E951A.roa
Signing time: Fri 22 Nov 2024 12:28:21 +0000
ROA not before: Fri 22 Nov 2024 12:28:18 +0000
ROA not after: Sat 30 Nov 2024 12:28:18 +0000
asID: 137443
IP address blocks: 154.223.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69651 (0x11013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:28:18 2024 GMT
Not After : Nov 30 12:28:18 2024 GMT
Subject: CN=674078e5-5bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:dc:8c:eb:a7:30:18:2c:01:ad:2d:bb:19:
17:70:ae:52:7a:83:6f:7d:c3:72:cb:4a:d3:00:ae:
51:da:c1:9d:8e:ce:62:17:4f:23:01:96:78:6d:f8:
e5:7f:7f:9e:ea:43:33:2e:49:05:8c:ac:f4:a1:53:
d1:8a:e5:3b:18:c9:64:f4:b3:38:65:e5:f7:44:80:
51:78:3f:7c:01:9e:fc:40:49:1b:ba:b2:3e:a9:ce:
1e:41:f8:f6:84:47:1f:4c:89:2a:d9:65:a5:37:92:
8f:7a:01:8b:02:61:2a:5e:36:a9:e0:7b:a7:c1:d7:
3a:89:14:ef:94:ec:48:45:b9:65:a8:1c:b9:6f:bf:
e4:ba:df:f3:5f:50:f2:22:93:d6:78:7b:2d:61:16:
be:bb:4f:39:25:f3:8f:27:aa:76:60:89:93:d8:c3:
4c:64:75:a8:4f:e7:56:d9:c7:19:97:92:d6:de:80:
d3:31:03:22:0d:ad:b4:bb:3d:99:16:94:ec:ad:df:
b9:5b:13:3d:48:d6:80:50:b1:51:65:ee:bd:e2:57:
64:fc:95:68:a4:c4:e2:f0:08:4b:7c:5d:a3:f7:de:
c7:6b:0c:46:53:2e:16:c8:cc:ba:49:eb:9e:d1:84:
f8:b0:c2:2d:18:97:1b:8b:d9:f9:de:30:26:7b:dd:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:89:79:C4:24:0E:A5:7E:03:73:1A:80:AC:79:6E:41:1C:DF:22:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BD6128A8CD11EF93A36980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:22:d1:a4:4c:15:d3:a8:72:d9:f9:3b:f2:83:49:2e:0f:f1:
71:e6:19:5b:64:ff:5e:92:60:23:79:72:ec:ff:38:52:a1:7c:
26:5b:e1:de:5d:df:84:f0:2b:8b:b5:49:cc:26:f2:eb:b3:12:
b6:3b:10:65:05:21:56:50:88:d9:ee:39:47:6d:6f:e4:8d:be:
51:e0:e2:f1:a7:c0:8c:71:0a:d9:95:1b:c4:39:3d:7e:86:a3:
ee:de:6e:4b:fb:84:3f:f0:ae:2a:56:1b:ce:c2:b1:73:e7:34:
a1:54:a0:c3:65:d2:af:c4:b4:46:98:8e:8e:80:17:24:64:71:
1c:24:47:19:6b:dc:72:42:7c:69:4c:5d:65:17:22:fd:a0:c2:
d3:9b:ce:b7:d0:0f:83:ee:e0:03:cd:33:ac:16:57:7f:a0:64:
2c:88:39:80:a4:49:90:f3:c5:99:a0:d8:70:74:16:59:a5:82:
4b:78:c0:ce:60:b6:3b:23:8d:db:00:c8:6d:51:60:18:66:f1:
ec:80:cb:41:dc:1e:62:5d:c5:86:25:6b:d0:bf:34:99:83:4b:
9d:82:a6:75:f5:63:59:21:dc:fe:68:58:09:4c:45:c8:fa:af:
6b:39:9b:45:1e:a9:8d:31:7b:8e:e0:38:af:e0:24:e6:f3:9e:
bd:33:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:28 2024 by rpki-client on console-fra.rpki-client.org