Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8733ADB8976511EFAA0818BF762E951A.roa
File: 8733ADB8976511EFAA0818BF762E951A.roa (raw, json)
Hash identifier: FW0Zz/Ph0fZtJvO6h0PcMGzJaCGJYFhIigbS5ux9B0k=
Subject key identifier: C2:28:54:D5:70:1B:AE:E9:78:37:8A:6B:17:00:EE:56:A3:57:7C:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010478
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8733ADB8976511EFAA0818BF762E951A.roa
Signing time: Thu 31 Oct 2024 08:52:59 +0000
ROA not before: Thu 31 Oct 2024 08:52:55 +0000
ROA not after: Sun 01 Dec 2024 08:52:55 +0000
asID: 398823
IP address blocks: 154.213.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66680 (0x10478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 08:52:55 2024 GMT
Not After : Dec 1 08:52:55 2024 GMT
Subject: CN=6723456b-937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:9c:c2:a1:cd:65:67:1d:0f:ab:8d:21:ea:
19:3d:f2:38:a6:98:3c:f6:83:06:d5:bd:f9:30:bc:
59:a8:16:68:0d:e8:2e:94:30:b8:b9:a0:8d:02:3c:
b6:c8:25:32:2b:ba:3b:4b:a4:2c:71:64:1a:11:8d:
4b:66:4a:33:34:b7:89:98:a2:f2:ea:ce:11:48:b4:
26:7b:2d:44:e5:18:c4:80:59:19:01:e4:f4:f2:7a:
f1:01:41:95:4a:ac:e5:ec:56:99:c9:10:de:81:5e:
44:11:c9:25:5b:97:e7:6e:85:07:a4:7f:ae:e5:e6:
95:71:ff:ac:98:6f:0a:98:75:e5:68:26:a8:7e:3d:
e1:de:c5:24:26:8c:88:08:18:7b:dd:88:73:21:ba:
7d:4f:5e:d8:20:a9:6d:55:56:e2:14:c8:28:54:a0:
84:df:da:c8:5e:a0:99:eb:cc:b3:71:0b:6b:e4:b8:
bf:e9:a5:94:54:23:06:71:07:39:a7:86:9d:38:3d:
39:a9:63:96:29:bd:d4:c1:8e:05:88:ab:6f:28:20:
21:fd:9d:2f:79:73:de:ee:05:da:ff:0d:b6:d5:42:
f8:a4:27:94:cc:28:4b:4b:bf:39:b0:86:8b:a7:a6:
a6:fe:a1:d1:e6:45:ae:67:bb:e9:e6:74:2f:4a:08:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:54:D5:70:1B:AE:E9:78:37:8A:6B:17:00:EE:56:A3:57:7C:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8733ADB8976511EFAA0818BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
55:50:28:dc:c2:6f:2f:48:a8:e4:50:ab:6a:61:fe:6b:ac:a9:
ef:7b:ed:58:21:d0:ba:7d:97:87:44:45:bf:44:b9:42:c4:98:
ad:26:bb:e8:0c:31:59:9d:c1:77:36:d2:6f:26:4a:01:49:46:
2a:b6:de:48:bb:a9:df:c0:b3:cd:19:3c:cf:b4:74:5c:63:4b:
12:4d:76:65:8e:e5:3c:a8:04:00:e7:a3:e1:2c:3c:f1:34:fc:
90:ad:3c:49:1b:6e:dc:86:13:46:45:d6:cd:64:91:a0:71:8b:
6c:e7:21:19:85:3b:1d:60:12:f6:03:7b:f1:a9:81:51:e3:4e:
b5:a9:54:83:00:51:83:c5:b1:81:8f:b0:a2:cf:3d:26:df:d6:
56:14:e2:3e:16:b1:7c:fa:6e:a9:e9:f8:04:4f:34:54:f1:e9:
60:66:a4:76:95:e3:d8:c1:e4:c9:bd:cb:72:f2:a6:df:b4:c2:
02:a5:d3:62:15:cd:a2:ad:cc:e2:fa:51:fa:07:ee:b6:e9:e1:
c3:67:ec:65:cf:65:39:8a:d3:08:c7:65:f1:6b:ea:a8:47:1b:
9a:d7:e8:3e:6e:bd:59:cc:25:be:1b:c5:94:cc:1f:c5:a6:9f:
cf:e6:5f:a9:88:14:38:bb:4a:90:fb:a9:92:7c:d5:33:d1:a5:
0d:79:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org