Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AD901A9EAE11EFAA8DD6A6762E951A.roa
File: 73AD901A9EAE11EFAA8DD6A6762E951A.roa (raw, json)
Hash identifier: rvm0gqShXQsgm3EoKBEB5lAJRhMWin7jumZTel0qJ1o=
Subject key identifier: D5:5D:AC:04:E2:19:83:1D:8B:D3:27:86:EC:01:BB:40:9F:A8:8A:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AD901A9EAE11EFAA8DD6A6762E951A.roa
Signing time: Sat 09 Nov 2024 15:22:37 +0000
ROA not before: Sat 09 Nov 2024 15:22:34 +0000
ROA not after: Tue 10 Dec 2024 15:22:34 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68125 (0x10a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:22:34 2024 GMT
Not After : Dec 10 15:22:34 2024 GMT
Subject: CN=672f7e3d-f0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:84:e5:d4:09:a0:d5:de:c2:f0:cc:73:89:
65:19:16:cd:a2:c2:76:45:7d:8c:07:82:ba:42:d0:
52:0e:c2:c3:7b:34:92:61:30:e6:77:bd:c5:c2:b3:
b0:48:eb:5c:d1:7f:ce:7f:2f:33:28:ea:96:6e:27:
04:d5:d9:2e:d1:02:a3:96:97:26:5c:0f:a9:43:27:
bd:34:3b:5c:0c:4e:2d:54:7e:69:8b:49:00:35:5e:
55:5e:34:f6:ab:43:42:a7:d5:f9:77:93:be:f0:9a:
57:8d:1a:cc:88:31:9e:e8:72:6e:ac:4e:09:a9:b7:
fc:22:e8:b4:f3:3f:47:93:8e:99:ff:61:b6:a5:73:
9c:c2:f4:03:c2:17:92:ab:7a:aa:0c:91:ff:06:78:
4b:4d:91:44:01:5e:5b:94:f4:65:91:e1:88:13:38:
98:f6:d6:99:e2:cb:5b:95:ea:e5:95:0e:2a:51:17:
df:f3:9c:6d:1d:fe:86:63:fe:8c:d0:94:5e:0f:c3:
95:dd:2f:5a:3e:df:04:69:32:a8:a6:41:f9:5e:6f:
1e:02:a9:03:f5:66:2f:1c:b9:9d:22:7b:48:13:c4:
90:99:1b:88:e8:73:7d:bb:5f:a6:fe:26:65:61:66:
5a:24:2e:84:1f:6f:c2:b9:94:02:aa:e0:ee:5c:bb:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:AC:04:E2:19:83:1D:8B:D3:27:86:EC:01:BB:40:9F:A8:8A:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AD901A9EAE11EFAA8DD6A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:af:8b:f4:bc:2f:c6:d8:3b:3d:06:7e:36:cc:c3:31:47:f7:
9b:0a:ed:10:7f:85:d1:5e:ce:b2:b0:02:67:26:95:09:2d:b5:
69:b6:8c:4e:7a:11:6c:cf:88:dc:a0:73:67:fc:c7:fa:87:5a:
9a:06:fa:d9:c5:4a:bf:d0:9e:e2:17:80:1e:eb:8e:d7:fb:07:
a4:f3:16:50:19:f6:be:be:7a:8f:0b:7e:4b:5c:f8:16:0d:c6:
82:1c:7f:ef:75:72:89:e4:ee:ac:71:7d:e7:5d:75:c4:fc:40:
28:c6:79:ef:8e:b0:26:90:41:41:ee:9e:ae:95:e4:81:94:6a:
4f:3a:17:90:28:bf:22:2d:d1:9f:c3:a5:76:59:53:b5:fa:ea:
e1:af:87:23:aa:52:40:29:cb:87:8c:65:d3:89:54:0f:26:28:
d0:b9:b5:f6:c6:bd:f3:18:0c:50:e3:b3:ec:09:3d:97:39:25:
3b:0f:93:30:88:1a:17:33:58:1d:da:23:a9:45:36:5f:0d:eb:
91:a6:4b:89:98:47:82:6f:51:1b:a9:2d:74:c5:6e:51:79:36:
bc:bd:c1:4e:6d:93:17:73:d4:65:a8:fd:89:d5:ca:e5:23:d5:
e4:32:c2:d7:a8:eb:f8:5e:06:a5:f1:ea:e3:bc:f9:6f:4d:26:
2f:08:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org