Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA57474A0DA11EF9A213557762E951A.roa
File: 7DA57474A0DA11EF9A213557762E951A.roa (raw, json)
Hash identifier: rRl69l8cdG18toeGS3NnSE7PWbieKjgVm3d/SSojO8E=
Subject key identifier: 73:17:0C:BB:9D:4E:6E:F0:50:0C:59:8E:AE:88:8D:8A:09:4C:20:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA57474A0DA11EF9A213557762E951A.roa
Signing time: Tue 12 Nov 2024 09:42:54 +0000
ROA not before: Tue 12 Nov 2024 09:42:50 +0000
ROA not after: Sat 07 Dec 2024 09:42:50 +0000
asID: 138915
IP address blocks: 154.223.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68646 (0x10c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:42:50 2024 GMT
Not After : Dec 7 09:42:50 2024 GMT
Subject: CN=6733231e-53af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:00:a0:bd:41:a0:9f:8f:fb:cc:56:38:26:
ec:d7:cd:b1:a4:28:d5:9a:f3:1e:10:af:4c:dc:83:
df:1b:a2:dc:3c:12:f2:a2:12:b8:c1:15:05:52:f9:
f2:cc:0e:02:1a:83:c8:fa:39:dc:3e:85:62:3f:b2:
28:49:f7:66:fb:4b:6f:44:28:c2:bd:70:50:b4:21:
aa:d7:3b:63:4f:8d:9f:3a:c5:2c:c6:e1:b0:58:91:
2d:6d:94:b3:61:8d:8d:87:cb:36:1a:ba:e8:d9:89:
0d:ca:fa:c8:73:25:fa:73:1c:d4:52:16:ff:58:cd:
10:9e:62:52:32:8e:4b:6c:f6:31:08:cc:e4:a2:dc:
f0:01:19:3e:43:05:71:82:f4:a3:0b:9f:70:07:02:
c1:4f:fc:39:00:4f:ed:67:ef:48:86:8a:b5:82:04:
b9:05:66:bb:ac:b6:f3:63:bb:23:17:11:8d:91:3a:
6a:d5:8c:cd:87:01:cb:64:ff:78:de:8d:b5:e9:b9:
98:63:e6:51:fb:87:31:92:fe:2c:ef:a2:c9:b3:dc:
1c:56:bf:b5:1a:eb:50:0b:b3:db:2c:7d:51:43:e6:
82:21:e5:9b:ec:05:f6:e3:06:c6:4e:3b:c8:13:02:
5c:2a:d2:72:d6:83:18:c3:12:e2:8e:5b:16:1b:57:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:0C:BB:9D:4E:6E:F0:50:0C:59:8E:AE:88:8D:8A:09:4C:20:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA57474A0DA11EF9A213557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:d1:ff:1f:b3:32:7e:ce:71:0d:b2:19:98:40:0a:d5:20:36:
0d:2c:5e:7d:81:e5:f4:dc:89:6a:d6:40:6f:7f:17:de:71:af:
34:97:0b:44:ad:29:a4:44:31:e9:c9:d4:5f:c9:ce:50:a5:11:
7c:b9:42:0e:f9:7b:c5:b2:81:42:df:52:50:6b:ea:6f:db:5f:
10:63:b8:9d:1e:c5:b4:14:e9:07:b3:fe:14:d7:a6:e7:62:91:
29:b4:7b:ad:46:89:26:c5:01:a0:66:a1:f9:cf:c5:77:67:c4:
3e:32:33:55:de:67:99:81:c3:84:72:88:3f:eb:4a:b3:c3:ed:
40:da:b7:94:69:b5:f3:f5:81:62:c9:59:0f:d5:30:25:01:70:
8f:78:f4:45:5c:a4:d5:62:99:c1:d9:b1:23:ea:c8:c5:21:fe:
1e:21:5d:f2:55:09:49:99:46:23:c2:ff:83:0c:67:ff:f0:12:
ce:57:3e:12:f4:62:83:e1:40:2b:4f:d0:c7:07:03:c5:22:b6:
d5:c2:ac:65:64:45:bd:72:0a:79:64:ff:c7:ab:10:da:25:1e:
7d:5c:2d:6d:78:38:60:4f:7d:14:3e:53:3d:2b:e6:b9:28:92:
99:cc:3d:f7:29:98:16:90:e2:72:70:6d:48:72:ea:a5:54:fc:
95:30:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org