Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7839A1D89B8311EFBCAA7BB4762E951A.roa
File: 7839A1D89B8311EFBCAA7BB4762E951A.roa (raw, json)
Hash identifier: 22LPSamUw/pyn4cYdk0ZFHQZTwUWj0A1Igl0DIMIeHw=
Subject key identifier: 42:94:55:AA:15:C6:21:40:AC:62:B9:16:25:A1:70:E5:7A:17:51:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010801
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7839A1D89B8311EFBCAA7BB4762E951A.roa
Signing time: Tue 05 Nov 2024 14:37:24 +0000
ROA not before: Tue 05 Nov 2024 14:37:17 +0000
ROA not after: Mon 20 Jan 2025 14:37:17 +0000
asID: 135097
IP address blocks: 154.212.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67585 (0x10801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:37:17 2024 GMT
Not After : Jan 20 14:37:17 2025 GMT
Subject: CN=672a2da3-4255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:66:3a:45:e0:94:af:6c:c7:88:09:9a:63:
a2:0f:9d:43:04:a2:d6:79:eb:59:f5:c4:4e:e0:a9:
2d:fa:c7:94:4b:84:6a:e6:09:c6:b3:da:37:ef:f5:
16:7e:62:30:d0:3a:ce:8b:be:78:e5:c5:35:10:95:
fa:29:14:9b:2e:99:81:b7:99:8f:61:66:fd:f1:37:
24:03:1a:6f:f7:94:57:1c:cc:8c:b4:2d:1a:98:e4:
4c:91:66:2b:b3:6b:85:7a:18:af:f1:29:cd:49:ea:
9b:8c:a4:dc:36:75:25:91:6f:46:8e:a8:98:76:03:
96:5b:ad:83:0b:56:bd:75:74:eb:ea:58:aa:24:57:
c4:9c:4d:9d:d0:4e:64:fe:02:ac:e3:5e:c5:30:57:
6c:31:15:f3:e5:8d:3e:23:2e:33:5b:0c:90:98:fb:
2e:1f:61:9d:13:4c:b5:48:ed:8e:5f:d3:bf:a6:57:
30:fe:c6:14:fb:32:4d:5a:51:58:61:23:39:52:b2:
47:15:50:30:c5:c5:27:c9:13:4d:dd:ba:aa:d9:b9:
af:d1:39:88:e2:74:6f:20:eb:a9:79:1a:a0:3c:83:
92:fa:e0:53:8a:06:67:5b:50:ec:40:7b:9c:0e:8c:
1e:b5:8c:9c:ff:2c:fb:4f:c0:6d:54:c0:f3:c5:88:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:94:55:AA:15:C6:21:40:AC:62:B9:16:25:A1:70:E5:7A:17:51:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7839A1D89B8311EFBCAA7BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.192.0/18
Signature Algorithm: sha256WithRSAEncryption
02:2f:67:6a:dd:d5:c5:81:34:3c:e3:2e:f1:2a:94:9e:99:b3:
95:89:64:fd:32:70:23:ef:47:50:10:f5:5e:3a:54:97:75:48:
f3:88:00:bf:c9:4d:ed:16:8e:ee:0c:19:44:14:58:d0:b5:39:
96:b4:c2:05:07:fb:75:ae:5a:51:0e:89:eb:1f:97:34:b0:5d:
ea:5f:bf:7c:d3:82:c9:27:cb:e7:30:32:82:9e:a7:bc:4b:6d:
b7:f3:40:1a:89:2d:ed:e8:b4:9f:4a:09:86:0e:ce:72:08:42:
a0:d4:27:be:d4:cd:12:d7:74:d2:84:37:e0:37:9b:60:22:9b:
db:11:93:36:fe:3d:3e:3e:0c:17:5e:87:ab:a0:7f:34:85:cc:
b5:ff:1b:65:e0:1c:12:a3:09:bb:70:c4:46:9e:3b:71:7d:14:
25:a0:da:60:e4:c9:28:01:8a:01:d8:0b:ed:a2:f4:c3:96:47:
2b:63:12:29:3b:9b:01:0a:8f:fd:f8:86:d5:24:3c:dd:70:4a:
b7:e7:55:a6:cf:e2:2d:8f:fd:d2:3f:58:0d:65:7a:a4:0c:0f:
25:01:af:e5:99:2f:64:92:80:d1:39:15:ab:92:20:3e:99:45:
86:9d:a4:13:52:f9:d5:b6:a3:1a:24:f9:14:14:82:53:38:e4:
dd:48:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org