Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B454C809B5E11EF8985A04F762E951A.roa
File: 7B454C809B5E11EF8985A04F762E951A.roa (raw, json)
Hash identifier: to1jzw3mQ3AHbcWcY8lG7RgUSWZ4QMH3A9ONw6CtByE=
Subject key identifier: 82:EA:46:58:9B:C5:FF:C8:FC:71:9E:F5:8E:D1:72:C0:6D:07:80:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010797
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B454C809B5E11EF8985A04F762E951A.roa
Signing time: Tue 05 Nov 2024 10:12:37 +0000
ROA not before: Tue 05 Nov 2024 10:12:33 +0000
ROA not after: Mon 13 Jan 2025 10:12:33 +0000
asID: 22773
IP address blocks: 154.84.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67479 (0x10797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 10:12:33 2024 GMT
Not After : Jan 13 10:12:33 2025 GMT
Subject: CN=6729ef95-f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:c5:aa:3f:ad:b4:2e:b5:6a:fe:27:61:93:
8b:45:db:b8:33:1c:d9:09:3f:a4:97:56:58:17:9c:
bf:58:6a:97:b2:64:fb:4b:9d:51:69:29:2f:b0:f3:
e6:93:ee:62:2e:c8:76:2e:50:95:ad:c6:1d:9d:e4:
38:ce:df:25:21:81:4d:82:84:e1:49:a1:7e:82:15:
f2:30:96:0c:b1:57:97:fe:e1:55:a0:74:4d:d2:df:
c8:c8:94:98:53:28:d3:c2:ae:57:e4:8a:51:8d:4d:
d0:37:01:a5:62:66:81:93:35:fc:b7:fb:06:8f:90:
29:c0:da:d6:43:52:f5:27:3d:ab:7a:18:6e:2d:6e:
e4:62:95:b2:42:6a:a9:88:ab:f8:0b:c4:3a:ff:c1:
36:00:ca:7c:c5:21:e1:d1:47:88:31:7c:8b:ff:9b:
2a:0d:71:d3:fe:c1:b7:a6:f8:dc:44:77:fd:32:48:
9b:f9:71:ef:92:51:29:73:61:00:6a:4f:42:72:e8:
92:34:c7:3f:99:70:cc:08:08:46:0c:92:96:dd:76:
39:3d:03:d7:09:fc:45:6b:c8:34:9e:df:05:ad:23:
c7:4a:99:d4:1c:5e:08:55:72:20:17:68:79:6a:4b:
3a:20:cc:4c:d1:56:60:c0:7b:93:91:eb:c8:1b:1c:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:46:58:9B:C5:FF:C8:FC:71:9E:F5:8E:D1:72:C0:6D:07:80:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B454C809B5E11EF8985A04F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
02:51:64:ca:58:a2:96:29:9f:03:89:c3:da:05:cc:56:0e:8c:
93:12:61:55:c1:22:bf:39:5c:cd:32:c8:0b:06:0d:60:3a:11:
af:c0:e4:cd:69:96:1a:73:f2:a1:80:4e:1d:84:2a:f7:19:55:
0f:ad:1b:58:a6:f9:50:b8:2b:96:b1:7b:35:ae:49:75:2d:b1:
aa:ab:51:f8:e4:ec:b6:e8:34:52:5c:f6:8e:1e:0d:71:8d:52:
35:8e:e3:18:8a:e7:c7:41:13:a4:92:19:2b:2f:b7:6f:25:97:
26:11:75:99:9d:a4:0a:60:47:94:cd:fe:50:28:16:05:ef:cb:
08:cb:46:9e:b5:7d:d5:08:9a:da:47:02:89:95:ad:93:3b:92:
9a:bd:1f:46:0d:49:e8:c5:b5:3d:de:b5:5c:e7:1a:a2:d5:6f:
81:b2:fe:fb:84:f7:a1:97:84:5c:b8:46:ba:c2:51:4a:28:89:
87:36:74:ea:9c:bc:db:23:f7:b6:76:88:f1:c7:e0:1a:d2:53:
3e:ce:c8:3e:fe:c3:a5:ab:2e:3f:7c:05:a4:0e:84:c4:0e:9d:
3f:5f:99:e8:aa:3f:5d:81:c3:fb:6d:6f:d0:e4:cd:1e:7d:c9:
78:9d:12:5e:b1:cc:45:eb:6f:c5:11:eb:77:09:ab:27:36:09:
8b:bb:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org