Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AB210AA9CE11EFA7CD7E51762E951A.roa
File: 51AB210AA9CE11EFA7CD7E51762E951A.roa (raw, json)
Hash identifier: 5ioR+wY1UbcdR2LMM7uGc2ht2QO2niOEs+WleG10BKw=
Subject key identifier: BA:41:ED:34:AB:E8:BA:78:A0:E9:8F:B1:2F:BA:B8:C0:FE:DA:CC:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011202
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AB210AA9CE11EFA7CD7E51762E951A.roa
Signing time: Sat 23 Nov 2024 19:08:27 +0000
ROA not before: Sat 23 Nov 2024 19:08:23 +0000
ROA not after: Mon 02 Dec 2024 19:08:23 +0000
asID: 9009
IP address blocks: 154.95.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70146 (0x11202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:08:23 2024 GMT
Not After : Dec 2 19:08:23 2024 GMT
Subject: CN=6742282b-ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:3c:23:9d:80:98:9a:a2:2f:d0:d2:73:9f:
dd:db:40:31:17:6f:f2:5f:3a:1e:eb:4a:05:94:cb:
95:7d:97:86:31:27:2c:8f:d1:5a:f2:50:65:10:24:
b9:92:f8:f2:a0:48:6e:ea:31:84:af:81:ba:3e:92:
25:e0:e6:43:f3:43:f2:d8:6d:4c:68:f4:f2:a1:ae:
ef:07:3d:0b:1a:d8:f4:99:9b:98:73:e3:37:0f:52:
d7:b3:fd:37:08:6f:05:ac:12:58:0c:d0:30:2b:53:
70:04:50:54:59:3f:c7:7f:e0:c7:7e:5d:da:f3:10:
18:33:ff:e2:40:79:44:e7:42:02:e4:c0:76:89:0b:
9f:03:52:c8:75:fa:ad:76:04:0a:e0:e5:29:b4:fa:
c4:06:12:eb:7b:51:bd:58:e8:7e:df:ae:8e:b0:43:
9d:9a:00:3c:99:f1:e2:27:e8:9f:10:f4:97:bc:93:
ab:5c:2a:c6:88:f5:68:99:76:5a:0e:c8:ef:32:4b:
95:1e:a4:9a:d5:cc:45:73:a4:09:54:e8:a3:d1:27:
a3:c1:e6:08:c4:63:da:d0:d9:47:c6:6a:d4:1b:4e:
0d:4f:43:3c:93:4e:f0:3e:4a:46:99:4d:92:51:dd:
ae:d7:20:3f:a2:66:5a:9f:42:47:8a:7b:11:97:f9:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:ED:34:AB:E8:BA:78:A0:E9:8F:B1:2F:BA:B8:C0:FE:DA:CC:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51AB210AA9CE11EFA7CD7E51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:80:4e:74:6b:23:ff:e0:1d:a7:b9:5b:a6:cd:c1:f7:92:2e:
cf:61:13:33:da:4d:5b:de:c7:fd:4a:4a:3e:63:85:8c:7c:98:
cf:e3:cf:6a:2d:a3:05:14:0c:0c:f8:dc:b0:ab:7c:43:e2:65:
d9:05:5a:bd:3e:d3:fc:49:f2:f3:ce:4e:2b:af:76:be:30:81:
da:ba:1e:7b:35:cb:20:69:fd:7b:ba:18:44:e9:2b:b2:54:f4:
68:0d:2a:85:93:6e:a2:d5:d1:f9:e7:cb:57:dc:13:c0:bc:e3:
1e:bb:1d:57:79:02:a1:ca:81:e8:40:69:55:7f:33:7b:15:e1:
5b:cf:42:17:97:1f:a0:50:08:54:40:8e:4d:84:99:2a:ca:86:
1f:3a:5a:5f:62:af:6d:60:4b:47:be:d5:f0:9d:53:b9:15:a7:
f8:a7:c0:03:56:dc:91:70:3a:a5:06:3d:94:27:db:e7:29:57:
97:b6:83:aa:f2:81:04:63:9a:f4:81:03:26:a8:b4:7a:77:ba:
49:c0:da:50:b2:34:a8:eb:1f:58:5b:cd:fe:ba:24:d7:31:46:
05:a5:0b:fe:dc:b2:3d:18:54:83:f2:d5:70:89:4b:2d:4f:7c:
d4:ce:bc:c6:93:65:dc:66:8c:15:f1:d0:80:0b:f2:ca:76:37:
98:2c:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:30 2024 by rpki-client on console-fra.rpki-client.org