Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F53C9685B9A11EF96209546762E951A.roa
File: 7F53C9685B9A11EF96209546762E951A.roa (raw, json)
Hash identifier: ax7c3PpwU5LUqmJMGGNUqeuy03FV+zNAafDPCDPqUUw=
Subject key identifier: 08:4C:9F:9C:04:EE:D0:41:59:FC:7E:64:14:B9:1C:D4:9D:C2:89:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E09C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F53C9685B9A11EF96209546762E951A.roa
Signing time: Fri 16 Aug 2024 06:40:59 +0000
ROA not before: Fri 16 Aug 2024 06:40:56 +0000
ROA not after: Mon 24 Mar 2025 06:40:56 +0000
asID: 132513
IP address blocks: 154.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57500 (0xe09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 06:40:56 2024 GMT
Not After : Mar 24 06:40:56 2025 GMT
Subject: CN=66bef47b-0d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:8d:1a:36:05:89:60:e5:28:20:0e:0a:39:
38:25:b1:af:43:7e:ed:55:c5:a4:4f:43:86:0c:8c:
c5:8d:d2:d0:e4:bf:f0:a3:d0:ea:02:9c:8b:24:a1:
a8:e8:db:80:3a:a9:5a:cd:fb:73:c4:01:b2:a1:70:
87:b4:94:a7:6c:e8:b5:97:14:dc:72:3e:88:93:2c:
18:b2:41:66:b6:e9:04:54:d2:5f:3e:2e:62:2c:23:
63:cd:a3:29:dc:12:da:8e:30:f6:4a:fe:47:98:75:
58:df:17:f5:92:97:8d:e4:71:14:c6:06:82:43:97:
66:ce:6f:41:26:52:67:52:b9:28:63:60:5f:39:1c:
9e:02:0d:a6:37:a7:be:a3:28:dc:5f:41:1e:f6:b4:
a0:ea:70:b9:50:df:57:cf:f0:37:ce:ac:4a:d3:e4:
20:7e:f8:23:96:43:27:84:9f:9c:5c:e5:f1:bf:a9:
79:f4:70:ca:1b:2f:bd:4b:2b:e7:15:61:a7:61:0f:
07:f6:cb:f4:5e:42:93:98:52:55:37:07:d5:7e:ae:
9f:25:85:09:c7:4d:d9:cd:34:31:4c:cd:57:29:1e:
0c:a1:8c:c1:e8:8b:8b:f0:ca:0a:66:11:df:81:73:
42:a5:4a:bf:63:f1:5b:77:df:9a:23:2c:85:dd:aa:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:9F:9C:04:EE:D0:41:59:FC:7E:64:14:B9:1C:D4:9D:C2:89:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F53C9685B9A11EF96209546762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:22:b4:b4:4d:54:69:ae:6e:13:bd:20:be:40:98:93:b3:73:
ba:65:2f:30:08:2c:85:4d:d2:0e:a2:0d:d5:14:22:e2:94:b9:
f3:67:16:d1:08:e1:db:ff:f3:e5:ee:70:79:62:62:ec:a5:0b:
6c:da:23:bb:36:d4:e8:c4:93:52:c5:29:2e:de:ab:28:ff:e9:
5f:25:41:99:33:ad:d4:17:08:6d:f8:38:a8:a6:b0:38:52:35:
45:ca:2a:1e:c6:b1:5a:83:4a:c7:ad:3a:07:aa:2a:2c:f8:51:
fa:5a:62:50:47:1a:83:9d:58:63:93:a7:f2:25:9b:4f:8a:0d:
a4:a2:2d:5e:12:31:b4:f0:f7:1b:ac:67:29:83:16:38:78:16:
8a:38:fe:e2:7b:f3:d7:82:e8:91:24:5e:fc:9a:40:93:15:e4:
10:d4:22:69:f5:ba:14:08:88:98:f7:8f:79:d0:ca:21:91:11:
fa:63:ca:00:f5:cd:b4:74:d6:9a:31:8b:58:ea:11:05:14:3f:
18:fa:b1:90:1d:8e:c0:b2:38:5d:16:79:ff:66:0e:51:9b:11:
16:69:3e:74:09:a9:7f:db:6e:09:51:64:0b:c9:b5:d9:a9:ea:
bf:92:6b:8b:73:15:db:51:aa:ee:4a:98:f3:23:b8:9d:db:fc:
1d:b4:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org