Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DD29A50912211EFBBFA7749762E951A.roa
File: 4DD29A50912211EFBBFA7749762E951A.roa (raw, json)
Hash identifier: M3v6HSKUOUFPNkLD0r6dn72CFWmxyV1SMdYqsDtcGGk=
Subject key identifier: A9:B7:93:98:CD:27:BA:1D:CA:36:EC:63:76:84:D4:DD:49:7E:FC:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010108
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DD29A50912211EFBBFA7749762E951A.roa
Signing time: Wed 23 Oct 2024 09:36:39 +0000
ROA not before: Wed 23 Oct 2024 09:36:36 +0000
ROA not after: Fri 29 Nov 2024 09:36:36 +0000
asID: 203020
IP address blocks: 154.223.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65800 (0x10108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:36:36 2024 GMT
Not After : Nov 29 09:36:36 2024 GMT
Subject: CN=6718c3a7-60b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:28:d1:c0:0a:c4:f3:f6:a9:c7:2f:f0:1f:
21:68:af:32:95:15:0d:cf:0e:29:71:23:09:29:21:
bf:df:88:06:33:94:8a:15:a5:3d:33:02:9e:3a:dd:
bb:18:53:d2:47:da:76:cb:05:7c:2b:c7:bf:00:41:
9b:2a:da:0f:22:73:28:2d:10:9c:1e:11:8c:53:6c:
c6:eb:93:87:18:fd:08:1e:81:5d:7f:b1:df:29:8b:
64:8f:e9:93:12:d4:50:09:ff:76:b7:bf:49:af:b3:
8d:1c:8d:f4:f4:39:af:fb:b2:3b:70:04:80:4b:d1:
29:31:8e:0c:63:10:11:bf:f0:98:99:b5:f7:95:e2:
31:0b:31:ce:28:3e:9d:ca:27:ee:02:f2:30:69:1f:
1b:78:ff:75:9c:9c:e6:b4:46:d7:e3:80:f8:0f:02:
d9:7e:cd:9e:88:d8:9b:a2:58:25:16:83:b1:29:d0:
25:2c:ed:6b:59:60:19:a3:73:eb:3b:df:fb:ee:15:
5c:69:13:6d:45:d2:e1:24:df:43:55:48:9a:13:f2:
c6:28:32:73:53:04:d8:6f:1a:80:83:03:05:ca:28:
8c:4c:ba:98:b3:bf:15:2d:84:9e:2e:dc:67:e0:8f:
91:8f:aa:1e:9c:0c:21:17:ce:24:88:54:e8:b1:16:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:93:98:CD:27:BA:1D:CA:36:EC:63:76:84:D4:DD:49:7E:FC:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DD29A50912211EFBBFA7749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.138.0/23
Signature Algorithm: sha256WithRSAEncryption
45:07:cc:17:36:e5:65:b7:d5:52:8d:52:88:ef:bc:fc:c1:1b:
8f:16:72:90:50:c0:7f:0e:71:23:89:d3:f5:dc:05:06:04:bc:
2a:a9:54:20:86:4f:7b:68:5f:5e:70:2a:6c:c6:53:fc:79:78:
00:be:c5:88:1d:70:c5:aa:a3:1d:08:ff:21:d1:3e:da:6a:1e:
f9:8a:b1:11:d5:b3:4e:cb:61:25:04:c4:0b:0e:d9:e4:48:85:
a9:69:32:f7:1f:19:98:23:64:5a:e5:8c:b9:cf:60:b6:c8:0c:
5b:ca:0b:d7:c6:60:80:c5:b3:20:07:15:c7:ee:fb:e3:32:8c:
7a:e2:c3:ba:11:d5:81:47:01:cc:39:cb:9f:91:0b:20:2d:a9:
45:74:6b:bb:38:c6:c3:0d:85:b3:dd:4a:51:70:37:3f:2b:39:
c7:e2:ba:e8:f9:1c:0e:45:63:ec:f5:2c:2c:54:ab:98:b2:df:
f4:1c:70:50:2e:ba:6e:99:51:69:9e:b7:46:6c:c0:37:de:fd:
64:be:de:c2:6e:0f:96:63:c0:54:9f:2a:21:51:00:58:96:70:
0c:c4:6b:31:25:6c:51:4a:ea:e9:15:69:c2:a7:b4:7a:41:54:
e5:cb:d8:18:e3:34:4c:c4:03:40:68:e9:d1:0e:e6:b6:8d:73:
36:af:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org