Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2209B67B2111EFADC8D3A0762E951A.roa
File: 8B2209B67B2111EFADC8D3A0762E951A.roa (raw, json)
Hash identifier: k7ffFsQNiNHf5xF6pOjPfbOZj04eYnm+P2eb6V+gB8Q=
Subject key identifier: FC:52:5A:3B:67:68:E3:33:6D:65:90:60:20:C2:EB:B4:2F:0F:5A:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F356
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2209B67B2111EFADC8D3A0762E951A.roa
Signing time: Wed 25 Sep 2024 09:35:47 +0000
ROA not before: Wed 25 Sep 2024 09:35:43 +0000
ROA not after: Tue 30 Sep 2025 09:35:43 +0000
asID: 211392
IP address blocks: 154.84.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62294 (0xf356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:35:43 2024 GMT
Not After : Sep 30 09:35:43 2025 GMT
Subject: CN=66f3d973-13d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:de:eb:06:93:04:3f:1a:d0:3e:75:c0:fb:
f5:f5:57:58:67:df:60:65:65:81:1e:2a:64:1c:28:
14:21:d0:96:9f:1d:d6:81:92:46:8e:28:4e:6b:63:
16:56:b2:a1:07:5b:ad:d1:3c:3c:08:71:b0:d7:b6:
7b:9b:33:b5:b8:cc:c4:7b:2f:ab:88:13:9a:90:4c:
00:67:b6:72:d1:3e:b5:50:cb:36:a8:87:70:42:23:
5d:87:2a:68:c2:a3:9c:ff:e2:69:25:d1:de:05:16:
1b:e1:09:2a:fb:97:0d:52:30:3e:98:cd:74:c2:63:
5f:43:5e:3d:f3:bb:23:d4:76:b2:12:48:19:35:ee:
fa:8d:42:bf:4d:bf:ae:e4:eb:a6:c8:36:de:4e:8a:
57:37:59:8f:90:a3:c4:bf:d8:01:97:59:49:fc:d5:
f7:c7:ab:b2:78:28:59:5e:ef:f3:a6:43:80:cf:c1:
a9:0e:8f:9f:5d:42:87:b7:f1:5d:28:f7:47:8b:76:
be:90:18:18:ef:16:46:ea:3e:73:e3:bd:bb:34:c6:
4e:56:ed:62:38:ee:10:4b:ea:f7:da:8b:c6:82:d8:
40:e7:ef:5d:31:66:4a:94:bd:9b:bc:3c:43:cb:8a:
8f:00:7c:d5:7f:5a:b9:23:a7:ce:1c:79:72:e8:8b:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:5A:3B:67:68:E3:33:6D:65:90:60:20:C2:EB:B4:2F:0F:5A:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B2209B67B2111EFADC8D3A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0/23
Signature Algorithm: sha256WithRSAEncryption
69:88:2b:47:02:cd:8b:2a:9b:df:e4:f1:96:50:90:ac:4c:3c:
ca:ef:b4:b5:c9:a5:67:ef:7b:93:1a:cb:2b:92:3a:10:79:01:
30:6a:1b:88:49:23:88:c7:8c:15:da:7b:c2:a9:6e:86:37:51:
d7:6f:4d:b0:54:c8:f3:73:14:2f:1b:ef:80:16:f3:e0:a5:98:
cd:14:f9:8a:91:3c:a5:61:b1:f1:41:47:03:7f:d9:e5:0a:d4:
0c:5c:cd:f0:e8:5f:51:4b:90:61:fb:db:a8:05:0b:8c:ec:1b:
09:5c:dc:aa:20:f5:12:82:d2:0e:d9:58:20:83:de:86:d7:40:
f5:8b:94:7c:4b:2b:62:54:5b:cc:50:45:9b:a6:be:e4:b9:5e:
8f:30:a6:fd:6a:3d:50:32:05:bd:f1:b9:03:69:57:a1:91:f9:
60:92:05:31:87:30:11:9d:36:f1:ba:91:c2:20:12:7a:36:42:
0e:f9:d5:84:30:e5:ac:2c:35:87:7e:10:c1:05:f3:88:44:d1:
a9:cc:88:bb:2f:ca:bc:48:5c:b3:bf:69:c4:8f:b8:d4:71:67:
15:8f:11:42:01:36:69:06:ff:68:24:76:c5:8f:7a:00:64:66:
31:29:72:7f:19:83:de:4c:d7:b2:ba:3c:79:25:7e:fc:ab:22:
a3:3d:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org