Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C5470B2A33A11EF97A9C181762E951A.roa
File: 8C5470B2A33A11EF97A9C181762E951A.roa (raw, json)
Hash identifier: BQMIq0UPYrl6hpGBSVQuxApOnjZDg/YLBXOx0FHNFis=
Subject key identifier: D4:E0:55:E5:39:13:7F:3E:EF:1B:82:B9:49:3A:72:39:AB:09:A0:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C5470B2A33A11EF97A9C181762E951A.roa
Signing time: Fri 15 Nov 2024 10:15:33 +0000
ROA not before: Fri 15 Nov 2024 10:15:29 +0000
ROA not after: Mon 25 Nov 2024 10:15:29 +0000
asID: 7018
IP address blocks: 154.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69016 (0x10d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:15:29 2024 GMT
Not After : Nov 25 10:15:29 2024 GMT
Subject: CN=67371f45-1854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:38:86:85:38:d0:8b:8e:ad:8a:03:7d:38:
27:df:ac:9e:48:21:0c:3e:fc:d7:7b:50:80:06:9a:
cf:74:13:9a:92:9f:52:b6:d6:00:11:94:19:22:fa:
e5:c9:c0:e3:00:32:eb:7f:68:c7:67:8b:5b:67:87:
8b:7a:e7:4d:08:57:4d:10:91:4b:2e:09:cf:06:42:
53:37:dc:80:62:22:40:1d:95:d3:6e:a0:ba:87:f0:
ac:de:1b:30:0a:c6:17:14:b8:98:7e:dc:83:15:35:
a7:20:39:06:db:52:c2:28:2a:6e:cb:f7:a7:b5:5e:
94:c3:a3:c6:68:d2:20:de:6d:2a:96:2d:36:c8:4f:
a2:70:5c:58:e1:94:d6:e9:1f:3d:92:ac:5b:7b:90:
91:f8:40:4c:e8:72:a7:0d:e6:91:9e:a8:89:c5:e0:
dc:98:28:ee:1d:1a:7d:a8:1b:49:94:c4:63:a2:45:
30:b3:0b:e4:3a:d5:c6:0a:ab:37:53:a0:2f:94:82:
5f:76:9b:47:52:77:55:f7:d4:34:7b:fd:89:be:dc:
09:cb:5d:6c:d6:fb:df:be:7c:e2:1c:c7:03:f1:65:
0a:af:34:95:e2:69:57:99:24:a8:fb:e3:b5:0c:02:
2f:d2:eb:d4:3e:01:80:af:76:8d:19:f6:01:32:eb:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:55:E5:39:13:7F:3E:EF:1B:82:B9:49:3A:72:39:AB:09:A0:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C5470B2A33A11EF97A9C181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
19:45:cc:36:8c:72:97:0e:32:7b:83:0c:63:8b:e5:65:d4:b2:
73:c7:a4:f3:30:b1:c5:b8:ec:2c:ab:2d:30:5b:f1:7b:9f:fa:
58:11:01:5c:be:4e:2f:f8:98:39:f4:aa:7d:49:81:2f:06:7a:
01:67:ad:14:6e:49:81:b5:60:6c:67:cb:86:f7:de:8c:4b:f8:
7c:b1:16:4b:e4:3b:49:2c:9d:d9:5f:8b:0c:a5:1b:a8:39:e6:
5a:81:45:e5:a1:66:13:4d:15:c0:60:1c:eb:0b:f1:f3:d4:19:
06:c6:93:af:92:4f:15:91:e5:16:84:ac:90:76:2c:ce:92:e3:
a2:23:53:fc:5e:de:78:17:7f:57:9b:5e:cc:5e:04:51:57:38:
a0:a8:3e:3d:c3:e2:9a:25:4a:d8:66:57:18:94:5a:24:65:63:
78:a1:f3:3b:2d:2f:6f:8a:cf:c4:eb:1d:89:7d:5c:23:b5:86:
ef:7e:6d:31:27:fe:1b:05:76:79:e2:2b:b9:07:22:ea:a6:82:
55:fc:26:35:64:06:82:59:26:4c:f2:55:8a:c4:6f:83:80:74:
e2:87:9e:ad:57:f9:63:fc:86:6b:12:79:df:80:18:ee:ef:32:
35:88:1a:35:95:01:71:5b:89:79:f5:31:77:20:6d:27:b9:a0:
c9:95:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:15 2024 by rpki-client on console-fra.rpki-client.org