Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B884E889C1A11EF88D9E573762E951A.roa
File: 7B884E889C1A11EF88D9E573762E951A.roa (raw, json)
Hash identifier: uYGksPr4BgB5W3V1VfgZ8pAxJhtCu8LFMJC2UMiCpuA=
Subject key identifier: E7:69:63:22:66:F7:EB:6D:C8:73:0D:5C:5F:E2:F4:CB:D2:07:C9:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B884E889C1A11EF88D9E573762E951A.roa
Signing time: Wed 06 Nov 2024 08:38:23 +0000
ROA not before: Wed 06 Nov 2024 08:38:19 +0000
ROA not after: Mon 30 Dec 2024 08:38:19 +0000
asID: 138915
IP address blocks: 154.93.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67670 (0x10856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:38:19 2024 GMT
Not After : Dec 30 08:38:19 2024 GMT
Subject: CN=672b2aff-b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:47:a1:cc:77:78:3d:27:7f:07:31:53:1a:
1e:a0:81:dc:ac:cf:61:05:90:89:75:b5:5c:2e:a3:
4e:b1:77:7c:14:d7:a9:ff:aa:73:78:09:b4:a9:98:
60:63:01:1c:2e:e9:9a:85:ea:40:9a:b7:85:db:a5:
58:b6:f5:8d:d6:ef:42:f1:71:7c:b5:30:3b:f9:68:
17:b7:0b:bc:f2:c5:c4:5c:26:7e:e1:75:f1:51:93:
e9:b1:68:24:3f:21:f5:07:29:7a:4f:82:7a:60:61:
2a:cb:8e:d1:e2:22:ec:80:d8:8a:c4:a3:33:73:f6:
3f:6f:21:d2:31:15:b7:0b:6e:e4:a7:7f:6c:f0:1d:
80:80:c4:0f:06:1c:4b:bb:3e:dc:77:0d:93:fd:9f:
88:37:5b:e2:3b:49:0a:ab:09:c1:ee:eb:eb:81:54:
e1:97:da:25:55:91:91:e0:0d:aa:34:a6:e0:99:65:
3f:79:86:3f:f8:cb:5b:d7:0e:05:4b:bd:61:97:dd:
dc:a2:f9:05:35:cc:8d:54:0c:e0:26:6c:33:c8:39:
66:32:9e:e2:1c:d3:b0:d7:7b:23:60:08:60:08:0b:
15:87:f8:93:09:9a:15:91:48:c6:53:dc:5e:58:38:
86:9b:0f:5a:3d:ed:db:c0:4c:16:71:45:c0:04:2c:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:69:63:22:66:F7:EB:6D:C8:73:0D:5C:5F:E2:F4:CB:D2:07:C9:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B884E889C1A11EF88D9E573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.102.0/23
Signature Algorithm: sha256WithRSAEncryption
01:28:6f:a8:f8:51:ef:be:ba:70:25:4b:58:75:3f:5c:25:6c:
9e:b2:2b:81:f7:51:40:ca:bc:36:07:7b:24:74:4d:83:37:ed:
51:70:ed:a4:e6:99:3a:9e:8d:49:75:64:b2:3c:4f:cf:0c:86:
53:6a:0f:66:8e:c6:68:88:a2:a5:ff:cd:66:79:c3:5f:32:ae:
50:42:24:19:4d:71:9b:ad:a6:50:21:d0:83:80:bf:2a:bc:79:
fd:61:72:4d:a1:9b:c1:2f:40:53:9f:f1:14:8d:64:a9:53:45:
6b:34:be:e0:88:2d:2b:25:6c:76:d8:d4:5b:5b:ea:c2:ad:10:
ec:86:2d:4d:00:ae:72:77:e8:83:51:02:d7:cf:d8:82:25:ab:
7a:6c:46:ba:30:2d:a7:0c:59:5b:0a:7e:30:5d:d4:23:69:b2:
b0:1a:e2:69:ef:f4:88:52:d4:81:3f:3b:f1:22:f0:fd:2f:ab:
cf:82:5b:d3:6e:53:49:f0:bd:49:d2:26:d9:e1:79:7e:11:41:
f3:e2:6c:fa:17:30:6f:7a:94:33:45:83:c9:54:23:7f:61:3c:
ea:37:ef:90:04:e3:83:37:26:3f:f5:2e:a8:b0:aa:70:af:4f:
a8:87:d0:af:19:c3:0d:4d:ba:a0:4b:45:6e:5c:f5:a3:5f:50:
33:83:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org