Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D7F2D62C6E11EF92EC08E67CDC24C2.roa
File: 73D7F2D62C6E11EF92EC08E67CDC24C2.roa (raw, json)
Hash identifier: J9CX7RVSioXLY5RZ96oYhd4iKbmXdRlV7t57S9E41Tk=
Subject key identifier: 6A:7F:D6:45:57:A2:B5:58:53:4A:C2:D8:23:0A:26:11:57:60:5A:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C38F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D7F2D62C6E11EF92EC08E67CDC24C2.roa
Signing time: Mon 17 Jun 2024 05:57:17 +0000
ROA not before: Mon 17 Jun 2024 05:57:14 +0000
ROA not after: Wed 18 Dec 2024 05:57:14 +0000
asID: 31863
IP address blocks: 154.197.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50063 (0xc38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 05:57:14 2024 GMT
Not After : Dec 18 05:57:14 2024 GMT
Subject: CN=666fd03d-0e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:7b:b8:2d:ab:e6:39:d5:2a:11:02:fe:9b:
28:33:12:5d:e9:b7:85:07:35:2d:d7:78:71:34:75:
08:4f:23:fc:81:29:02:8d:a3:f7:a3:63:7a:40:4c:
e5:69:04:9e:d7:89:39:de:d1:4a:27:20:79:57:df:
e8:b0:7e:09:c1:0b:a6:3b:8a:55:82:35:7c:33:eb:
d4:55:77:c1:17:e8:8b:78:20:87:b4:3d:cd:d1:68:
a6:d9:99:07:98:ee:3a:16:60:81:2a:60:5a:37:e9:
6a:33:7e:a3:f3:3f:37:24:6f:69:6e:a2:54:f0:95:
de:71:09:0e:92:aa:38:5c:14:28:6a:f9:c8:08:5c:
2f:5d:8b:a3:1b:e7:3a:b9:7c:53:f9:3a:f6:4b:f0:
a1:78:ed:08:a4:23:a0:83:02:78:06:bf:bb:c9:3d:
b2:24:13:08:48:9c:18:21:47:a7:a9:d1:85:fb:95:
a2:27:d6:76:97:85:05:0a:07:b1:7d:49:ff:8e:f7:
bd:f5:50:e3:2c:9d:57:f6:a4:d3:c6:50:96:9f:54:
94:50:55:5f:ea:2a:85:9e:d1:a4:c1:5e:4c:2d:bc:
e2:09:47:2c:e1:03:af:19:ee:a6:40:3b:77:a2:f5:
5e:2e:1a:a2:9c:a5:37:ea:b5:3f:f5:3b:ad:e1:e0:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:D6:45:57:A2:B5:58:53:4A:C2:D8:23:0A:26:11:57:60:5A:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D7F2D62C6E11EF92EC08E67CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.101.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:ae:5e:c2:c1:ed:29:30:fa:97:ba:b2:9b:b4:2c:05:39:
a6:2e:12:95:57:7c:b3:4b:11:ba:97:f8:64:89:d7:18:6b:3a:
f6:9b:e5:17:3d:07:48:91:ef:a5:8c:31:7a:13:7c:cd:4d:54:
be:92:c5:5e:a5:28:6e:bb:3c:5c:28:8b:9f:32:bf:68:10:d5:
0b:5b:52:8b:91:0d:6e:3d:df:d6:eb:e0:9b:38:f9:8e:ee:6f:
4a:e7:ec:f2:37:e0:af:db:74:76:06:4b:60:d1:0b:b3:d3:92:
ab:ea:c6:3a:6e:fb:c1:fc:f2:40:48:2c:9d:7c:64:5e:3a:2d:
50:c9:69:86:61:63:4f:ec:f6:00:5a:04:ba:f7:1c:bb:0a:44:
aa:ba:2a:b6:3e:7a:52:f4:bc:32:f6:9f:8d:f7:93:3c:74:a1:
f7:77:25:21:ba:fd:19:63:78:5a:d9:c0:e2:9c:f5:1f:da:d0:
8f:b2:3f:c8:d8:9c:a4:c6:bf:cc:84:8c:12:7f:48:b0:5d:14:
b0:25:6c:3a:54:4a:49:f0:be:e8:48:35:c4:7b:44:f0:36:ed:
70:9d:37:79:45:1c:1b:8b:82:48:e4:15:12:e1:bd:39:e1:11:
fd:08:c8:44:44:24:96:b6:85:ed:48:13:c9:88:ac:30:53:85:
9c:9f:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org