Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7549B59AA4D311EF8F8C7886762E951A.roa
File: 7549B59AA4D311EF8F8C7886762E951A.roa (raw, json)
Hash identifier: 7FAC/shrUe9x+TNw+/iZlRAqsikMhngIt/Hqhj0s8Es=
Subject key identifier: 15:2F:A4:EE:AF:12:CB:51:D4:7E:8B:D2:4D:E5:CC:1C:AC:F6:E2:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7549B59AA4D311EF8F8C7886762E951A.roa
Signing time: Sun 17 Nov 2024 11:02:39 +0000
ROA not before: Sun 17 Nov 2024 11:02:35 +0000
ROA not after: Wed 27 Nov 2024 11:02:35 +0000
asID: 137951
IP address blocks: 154.215.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69330 (0x10ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 11:02:35 2024 GMT
Not After : Nov 27 11:02:35 2024 GMT
Subject: CN=6739cd4e-3377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:ed:9a:26:5d:1e:b9:3d:4d:b0:56:e5:4d:
f8:81:dc:e7:4e:5b:1b:05:cd:85:53:15:19:22:6e:
13:19:f4:b1:3c:6b:a1:61:12:a0:f5:c4:0c:9e:a8:
f2:ef:78:33:5b:19:a1:1c:b8:77:3b:e1:92:80:c1:
33:ed:6a:da:ec:0a:a7:e9:43:c8:7b:03:e7:11:c5:
89:6d:0c:4a:60:16:21:87:4e:53:2f:5f:b5:20:8e:
09:cf:2f:5a:a0:87:f2:cd:2a:5e:ac:5c:6b:7a:db:
ce:64:b7:8b:63:40:a7:0d:37:6a:b1:f4:4f:2a:2b:
5f:a0:7e:d0:6a:8c:36:c2:dd:52:25:85:14:ff:9c:
d4:4e:01:ca:59:1f:6e:f2:43:fa:cf:88:75:bd:46:
20:ed:50:f7:b8:f0:d4:5d:22:62:01:3e:e0:39:b9:
0e:c3:36:bb:a2:8c:8a:15:d1:15:85:4f:62:0d:cf:
fa:d1:68:20:ee:0f:6b:56:e9:d8:8d:5f:ff:2f:b0:
38:41:99:69:10:34:c0:ac:02:46:8e:26:81:d7:16:
16:1c:7d:89:db:75:40:1f:b5:40:aa:ee:cf:e4:f8:
65:7a:2b:be:08:b0:63:24:71:52:d1:48:85:48:eb:
7b:68:97:19:62:70:1d:e1:ce:41:14:95:b4:a3:a5:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:A4:EE:AF:12:CB:51:D4:7E:8B:D2:4D:E5:CC:1C:AC:F6:E2:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7549B59AA4D311EF8F8C7886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.8.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a6:39:11:7d:dc:64:b3:0c:25:07:8e:f7:10:22:59:cf:99:
29:11:1a:80:c1:07:b4:13:94:fb:64:74:e9:bb:b2:60:04:f0:
c1:1b:1f:79:b5:54:82:ef:9e:81:b3:7f:b0:e2:41:ee:93:0d:
50:4c:0e:e2:28:17:81:59:1b:93:5d:93:bf:07:89:84:3d:f4:
19:c2:4e:73:97:cb:e5:02:84:b3:25:b4:e0:da:81:db:9c:3c:
0a:d1:78:a7:0d:b4:b9:1a:4b:72:ad:a8:38:48:48:cc:e6:1b:
49:6a:de:a3:37:7a:ec:71:17:7a:da:c9:f3:ca:df:99:69:60:
57:1f:01:54:c9:dc:00:1a:14:99:9f:8e:11:f9:89:07:d9:50:
79:0d:95:33:f6:a2:e9:fd:ed:aa:c3:e2:65:3d:37:8e:82:60:
32:67:4e:4e:65:19:11:8e:66:9e:25:2a:d1:f0:3e:4a:64:d7:
08:67:37:2b:18:f5:ce:d2:91:11:4b:4b:16:47:6f:61:6f:88:
7c:72:52:5e:32:ad:fe:dc:99:a1:d2:99:85:f8:13:5e:b6:be:
14:7d:1f:aa:43:1a:0b:17:8c:90:5f:82:2e:7d:30:7e:93:a2:
41:9f:a3:02:57:fd:39:90:d6:9c:1d:7e:f4:a5:88:19:37:db:
31:ac:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org