Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF6A3EAA75211EF97E614AE762E951A.roa
File: 7BF6A3EAA75211EF97E614AE762E951A.roa (raw, json)
Hash identifier: 3E0HCkte83t7XSBds6r3QSirPw+8+xXr5Ga1WI3JI2w=
Subject key identifier: 52:94:B2:DD:0E:E3:D8:C1:4C:77:1B:2F:57:61:3F:24:14:30:C2:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF6A3EAA75211EF97E614AE762E951A.roa
Signing time: Wed 20 Nov 2024 15:16:58 +0000
ROA not before: Wed 20 Nov 2024 15:16:54 +0000
ROA not after: Sun 01 Dec 2024 15:16:54 +0000
asID: 151800
IP address blocks: 154.197.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69565 (0x10fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:16:54 2024 GMT
Not After : Dec 1 15:16:54 2024 GMT
Subject: CN=673dfd6a-6fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:d5:d3:14:98:8f:d9:b8:03:0b:a9:f6:c4:
bd:d1:47:01:3a:d9:b6:d9:f3:d9:12:d6:48:70:90:
cb:27:e0:c3:49:da:e3:b5:6c:ee:24:0b:e5:bf:3b:
29:aa:18:1e:b4:05:ee:12:0b:08:e9:4c:61:47:27:
8d:77:0f:fb:c4:8c:46:4c:c5:8b:d1:61:f0:de:62:
6d:99:53:73:a3:28:65:70:8d:f4:aa:a1:fc:71:74:
b8:40:db:cd:9d:5c:88:3a:2b:5a:03:09:62:21:f0:
09:70:fd:87:52:df:9b:60:ad:00:9a:4f:0f:37:92:
45:18:c8:94:14:50:6f:76:a8:50:50:bb:d7:f9:72:
8c:91:84:ec:81:3b:22:00:61:f0:20:db:e1:03:70:
b4:ab:1a:07:57:6a:f6:79:50:cf:fe:e1:15:c2:c7:
e6:11:bc:74:a2:39:5c:08:75:5b:1b:49:45:ce:64:
05:ca:da:30:83:ea:04:7d:6f:5d:89:0a:6e:f3:de:
b7:40:a5:a8:66:1c:27:5a:e2:c3:c5:43:ce:5b:f1:
9b:2c:e7:57:59:e4:e6:b9:c1:50:8e:3e:8b:56:f7:
f8:89:65:45:55:45:7e:3f:96:7b:88:ff:79:9c:6b:
70:06:33:32:cd:7f:84:ff:60:6e:4a:5a:53:5d:5d:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:B2:DD:0E:E3:D8:C1:4C:77:1B:2F:57:61:3F:24:14:30:C2:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF6A3EAA75211EF97E614AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:eb:e3:f7:8a:38:00:ff:80:66:d8:1a:9e:32:24:d9:7d:f9:
65:b4:60:09:86:cf:46:e5:55:16:0b:87:76:c4:7d:9f:d2:b9:
18:34:d3:e7:f9:d8:2c:75:10:a9:14:28:6f:f8:d5:65:bc:62:
04:c3:61:35:ae:87:c4:88:50:15:51:46:93:0b:38:8c:5f:0b:
31:19:17:25:18:1d:1d:e7:c5:ad:2e:93:2c:56:d0:8f:27:22:
fa:67:d6:d9:6e:18:34:4d:45:c3:cc:be:c5:e3:54:36:06:46:
23:6a:7f:c1:e1:bf:3c:90:27:84:4b:80:89:c3:fe:b6:f8:c0:
c4:0c:95:a3:e8:da:85:b9:60:04:4e:b2:93:ee:8d:a1:93:7b:
a5:25:3e:f5:13:36:0d:f2:b9:38:ba:69:a9:38:62:b5:2c:86:
5a:30:74:a7:d0:b9:a0:50:1b:75:17:72:04:4f:0f:fd:08:d5:
f3:1a:2f:2b:21:e1:28:bf:f3:70:01:5d:f4:b3:fe:25:5a:a7:
0c:a9:2a:68:14:90:e9:3c:3c:3c:c4:bc:13:24:1c:32:25:95:
af:28:74:02:b4:42:24:74:6a:02:45:70:3b:f7:d8:0f:39:83:
44:82:6d:26:01:6a:b4:2e:94:ad:5b:8b:27:5f:92:fe:c6:ba:
47:53:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org