Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7E47209A9111EFBA925543762E951A.roa
File: 7F7E47209A9111EFBA925543762E951A.roa (raw, json)
Hash identifier: BGo2lW/AukRqMRuNL9+L1VCzY3m53iDB6UOzjmG6by8=
Subject key identifier: C7:F3:68:58:B2:DA:6E:F3:F9:81:16:38:DC:3B:42:13:F2:36:ED:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010670
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7E47209A9111EFBA925543762E951A.roa
Signing time: Mon 04 Nov 2024 09:45:17 +0000
ROA not before: Mon 04 Nov 2024 09:45:14 +0000
ROA not after: Fri 24 Oct 2025 09:45:14 +0000
asID: 140403
IP address blocks: 154.89.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67184 (0x10670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:45:14 2024 GMT
Not After : Oct 24 09:45:14 2025 GMT
Subject: CN=672897ad-844e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:c3:b0:9f:62:9e:c2:54:0a:06:44:e8:9c:
91:e8:36:c6:f1:08:59:a9:b0:66:9b:48:ee:36:f4:
f4:66:4e:5c:b4:4e:ce:6d:a2:71:a8:a4:65:b8:d7:
8d:07:85:82:f6:e6:48:98:94:b4:10:ee:75:92:7d:
4a:b1:3a:e1:b3:c9:3d:0a:e6:7b:dd:0b:4d:0b:e0:
7c:11:32:c4:d7:2f:91:24:cc:d5:17:a0:bb:a4:21:
2a:64:e9:02:82:4d:6f:66:37:2b:9b:1f:06:c6:11:
ef:e5:15:fd:e6:0f:14:dd:25:03:2b:f7:83:74:0e:
1e:28:57:a1:6d:44:d6:2a:70:b5:ae:b4:33:12:cf:
93:13:5f:fc:a4:b4:66:38:a1:04:54:96:2d:5d:86:
4f:46:53:63:d6:f9:1d:f0:54:b5:e5:76:c8:de:c3:
a8:77:1e:14:ff:65:d6:9b:f3:e8:97:b4:b2:d1:16:
68:45:8b:93:6f:da:20:c2:1e:5b:e1:e9:5f:1b:53:
97:e6:10:4a:76:7b:bf:61:88:ea:18:1b:b7:47:60:
b2:d3:57:0e:40:6b:62:a2:bb:3e:71:00:e5:da:d9:
9d:db:05:7a:e2:d2:b9:65:e1:63:cd:a5:17:ae:f8:
45:af:37:16:63:4a:8d:5b:1b:74:26:d3:31:95:1a:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:68:58:B2:DA:6E:F3:F9:81:16:38:DC:3B:42:13:F2:36:ED:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F7E47209A9111EFBA925543762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d6:db:8b:c6:dc:95:11:fd:b2:d3:96:05:87:f8:b5:7a:10:
3e:44:c6:4c:01:09:1c:7a:5f:1d:1b:95:f7:57:18:5b:ba:f8:
f4:49:d8:43:ec:6f:f4:9f:43:94:0e:1c:85:aa:c2:3c:fe:cd:
6d:f2:61:ec:8e:cf:60:03:7c:22:94:67:1d:58:20:fa:f4:35:
0e:9e:a5:1f:00:f3:93:4c:06:3c:fd:7f:c6:2d:f3:4f:2b:8b:
30:6d:82:f5:9c:a9:5b:94:c3:20:51:3c:fd:b9:2a:cd:7e:2b:
99:3f:b5:49:35:92:d8:c9:fa:5b:62:49:19:0d:02:ca:1b:d3:
08:ac:fe:bf:e0:6f:6c:83:05:77:83:0d:a7:06:27:6a:8f:b3:
fe:a1:1b:43:2d:ce:3f:e6:92:53:d2:bc:96:92:12:1e:6c:1a:
4a:fd:e1:0d:49:37:52:f4:e5:f8:45:eb:a4:1f:4e:66:20:33:
f7:4e:ae:60:93:dd:90:7a:03:98:2b:28:dd:33:84:1b:6a:9a:
58:e2:48:81:09:e6:f3:f2:d2:c3:68:fc:0b:57:2f:43:ae:e7:
74:6a:bf:a4:59:13:77:b8:59:6a:3a:77:3b:0d:07:ff:74:91:
bc:6e:eb:87:31:02:ef:9c:cd:4b:b1:2a:dc:fa:8b:70:89:7b:
69:1b:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org