Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D61EBCA33311EF8A05C854762E951A.roa
File: 59D61EBCA33311EF8A05C854762E951A.roa (raw, json)
Hash identifier: qeDZ5/PxXHky0uZ8vdArZLIyZyNZkU9R/NsS1zBTAV0=
Subject key identifier: 0A:75:EE:70:53:C1:D1:BD:7B:C1:7D:81:94:7E:3A:3B:95:5C:F0:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D61EBCA33311EF8A05C854762E951A.roa
Signing time: Fri 15 Nov 2024 09:24:02 +0000
ROA not before: Fri 15 Nov 2024 09:23:53 +0000
ROA not after: Sat 17 Oct 2026 09:23:53 +0000
asID: 152450
IP address blocks: 154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68992 (0x10d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:23:53 2024 GMT
Not After : Oct 17 09:23:53 2026 GMT
Subject: CN=67371332-35d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:b7:72:8d:32:f1:43:b6:d4:4d:39:41:88:
94:d8:12:f4:00:c7:79:c9:4b:51:d2:32:07:38:93:
e1:3b:f3:ce:3f:81:a0:60:70:80:95:ae:4a:b9:30:
95:88:43:74:dc:fa:8e:fe:c6:77:b7:90:f7:d5:3b:
22:b7:34:e5:73:c8:49:43:a1:2e:fa:f4:7a:9a:98:
8c:d5:05:d1:72:fe:e8:6b:4e:44:d5:f3:3e:df:69:
23:75:90:02:69:c9:73:22:b5:2c:f1:4b:18:03:1b:
b1:3e:47:85:10:90:30:6d:13:c8:c3:27:e6:8d:a3:
96:e7:62:89:b3:95:0f:b2:fc:0e:87:41:c1:b2:0a:
47:c2:04:02:17:7c:4c:b0:ca:0d:11:f7:e7:c7:27:
82:e2:d9:e6:91:29:95:44:43:64:4d:a0:53:e8:3f:
d9:27:9e:2d:25:4d:e2:d5:22:3a:7b:ba:66:c2:50:
62:57:f1:8a:c3:81:d5:fd:10:7d:a4:22:29:09:8e:
f1:8a:3e:39:d0:70:c6:ca:e7:fa:68:06:fb:f5:53:
f9:67:ba:3e:3b:77:3d:01:42:57:70:6b:5a:f5:67:
e1:96:7f:44:66:d5:7d:ce:45:9c:04:06:03:79:fb:
d2:fd:2c:88:c5:29:cc:98:99:57:d8:ff:78:3a:a5:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:EE:70:53:C1:D1:BD:7B:C1:7D:81:94:7E:3A:3B:95:5C:F0:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D61EBCA33311EF8A05C854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:d8:51:ae:e1:58:d6:b0:92:ce:84:dd:0e:4f:08:d3:cd:ca:
25:d6:8b:37:a3:29:a8:2a:76:4d:9f:b3:12:52:41:19:36:7c:
5a:a1:bd:7d:fb:58:7d:cf:b2:f7:e6:ff:0a:02:9c:ac:be:29:
3c:e8:70:40:51:a0:5a:54:56:73:0e:cf:4e:65:9b:56:c2:71:
17:80:4c:ea:d4:9e:e4:e9:a5:83:91:77:f3:ac:2f:b8:69:9b:
13:22:27:60:9e:88:e8:55:f8:d7:06:c4:89:e9:f6:99:7f:ca:
21:2a:85:e5:e5:45:4d:9e:27:96:2a:a2:ee:fc:0c:3c:43:f7:
4c:78:50:c2:ba:d0:c0:f9:a9:ab:da:8e:22:b8:88:d6:81:ff:
38:ce:11:6e:41:ff:ef:47:95:b6:06:e5:3b:ef:63:5d:50:7b:
79:6e:7c:4f:f7:f0:02:78:10:da:ed:f5:8d:e7:b8:1d:dd:76:
24:e7:d1:5a:52:b7:e6:e1:84:ef:6b:cd:6e:3f:6a:e8:43:98:
46:8c:a6:de:b0:7e:82:20:4c:d6:b7:6f:92:e5:3b:c2:6e:f6:
4f:51:a2:0c:dd:96:f9:82:a7:8f:13:32:14:54:81:5b:c9:2b:
3d:4b:74:3c:10:5a:db:12:a4:9a:a2:fb:3b:8a:d6:5a:f8:6a:
d6:32:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org