Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/771147A8A33911EF83D85779762E951A.roa
File: 771147A8A33911EF83D85779762E951A.roa (raw, json)
Hash identifier: FxDsOvKe586hV2gr4gETvnRNmc23TGupQcPWjYyZxEw=
Subject key identifier: D0:46:90:DC:C9:DB:73:72:8A:8B:A9:92:7A:3C:9B:08:0E:87:FF:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/771147A8A33911EF83D85779762E951A.roa
Signing time: Fri 15 Nov 2024 10:07:48 +0000
ROA not before: Fri 15 Nov 2024 10:07:44 +0000
ROA not after: Sun 24 Nov 2024 10:07:44 +0000
asID: 55933
IP address blocks: 154.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 10:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69002 (0x10d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:07:44 2024 GMT
Not After : Nov 24 10:07:44 2024 GMT
Subject: CN=67371d74-cc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:17:1a:19:1a:84:b8:9f:b3:ba:e9:60:f5:
c4:2f:eb:92:6f:01:b1:aa:bb:e1:8c:47:e0:05:d3:
7e:7e:ed:e9:07:68:31:01:07:84:58:32:53:9a:39:
f4:ea:83:e1:d7:63:26:87:d1:df:96:51:89:f3:80:
28:a7:a7:d4:1b:21:09:78:3f:80:ee:f1:ed:cf:ed:
2b:6c:f5:ea:88:c6:8b:40:5e:c4:92:0a:cb:ac:5d:
57:7d:ab:4e:b2:6f:00:c2:25:b0:25:17:79:c5:e1:
d2:0c:4a:46:3e:12:06:1d:56:d1:6a:b2:4c:eb:10:
8c:93:13:ca:ca:6e:87:9a:bc:24:f0:98:3a:74:67:
e1:04:13:17:25:0c:d9:65:35:1c:3e:01:d7:a5:63:
42:0d:15:23:89:5d:89:96:d3:62:a8:33:b7:bf:92:
46:49:5b:78:26:25:9b:88:db:89:64:5b:1a:38:e7:
98:33:fa:17:12:3f:60:bb:2f:b4:9c:a1:fd:a3:7e:
ad:36:63:3a:88:0b:1a:69:b1:33:81:6f:5c:3d:be:
da:ee:52:54:5a:e2:f1:22:80:2a:6a:cd:9c:e5:cb:
2c:1b:de:b4:9c:1c:db:1f:64:92:5b:30:63:29:e4:
09:4d:91:fd:03:89:dd:c8:9d:39:42:48:8c:e9:d6:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:90:DC:C9:DB:73:72:8A:8B:A9:92:7A:3C:9B:08:0E:87:FF:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/771147A8A33911EF83D85779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:23:e0:6a:48:a2:0a:60:99:11:53:ea:e7:c6:42:a3:7b:a5:
ca:d6:7c:a9:78:74:29:45:ba:f5:18:ee:dd:0a:88:5a:b5:0a:
4e:7e:27:4a:13:f8:f7:51:f9:00:73:20:24:d6:5b:e2:c9:6c:
de:ce:82:d5:56:8a:ae:f8:70:c6:fd:43:11:0a:aa:c0:cd:87:
bd:8d:10:e0:e2:6f:3a:c9:cc:5a:cf:b7:58:5f:85:d8:71:c1:
ca:bd:8d:79:77:b8:98:d7:09:c9:94:f5:2a:8b:9a:52:f1:c1:
cd:ff:e5:42:52:46:33:37:cc:f2:c5:28:16:3c:f2:73:26:d7:
40:c4:59:fd:fd:08:bc:62:f6:89:74:54:95:3b:50:16:e2:61:
90:75:75:c9:67:42:89:34:7c:26:1b:4d:0a:ee:d1:a2:9e:76:
61:3d:da:0b:0f:85:ac:b9:00:f6:14:b9:89:64:61:93:75:bc:
ee:3e:df:3c:3f:4a:68:2f:2a:06:52:ca:fe:3c:2f:6e:25:ec:
37:5d:82:04:b5:38:6e:a5:6a:35:1e:00:1a:0a:33:c4:4e:0c:
8f:52:33:94:9b:b7:6e:38:37:2b:01:2d:79:86:78:13:ee:ed:
99:45:a9:4c:c5:ab:36:e8:f3:8a:7b:47:e6:d7:d3:48:37:f1:
0a:30:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:35 2024 by rpki-client on console-fra.rpki-client.org