Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5C6C10A8E011EFACDE5679762E951A.roa
File: 8E5C6C10A8E011EFACDE5679762E951A.roa (raw, json)
Hash identifier: Gxs7ZaqfF4T2QYYfW0ZQ4EqA5uuL9XJJinTuz4M49Ho=
Subject key identifier: B0:F2:67:C1:DD:7F:EC:D3:C5:FA:AB:6C:95:E3:12:DD:2A:93:BF:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01108D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5C6C10A8E011EFACDE5679762E951A.roa
Signing time: Fri 22 Nov 2024 14:46:29 +0000
ROA not before: Fri 22 Nov 2024 14:46:25 +0000
ROA not after: Tue 03 Dec 2024 14:46:25 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69773 (0x1108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:46:25 2024 GMT
Not After : Dec 3 14:46:25 2024 GMT
Subject: CN=67409945-6cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:7b:15:9a:2a:aa:c4:42:03:15:cc:c7:f9:
98:09:bc:55:89:a6:8e:9e:20:f1:de:78:31:af:6b:
a5:bb:da:99:bd:e9:dd:a9:72:c0:61:f3:45:49:f5:
f7:e1:4e:55:41:59:88:0b:cb:67:1c:66:09:16:fe:
dd:03:d2:97:07:c3:bf:2a:dd:d9:98:a7:ea:04:3d:
8e:1c:6c:c6:e4:04:b6:51:84:3b:d8:0e:5c:b6:a8:
20:f7:d7:f7:d8:02:34:b5:9b:d6:0d:4e:0a:05:e0:
a6:a2:df:05:0e:04:2d:e5:49:d1:33:65:86:cb:9b:
49:ba:d0:1b:d1:78:4d:2e:5e:89:e1:25:70:24:90:
d1:69:79:9f:cf:a7:be:7d:b2:e8:b4:ec:2d:45:34:
db:01:ed:38:06:e6:b5:5a:d5:74:5f:18:d0:ea:8c:
4b:a5:0d:c2:98:d0:63:a3:0f:05:59:0a:57:c3:aa:
db:66:00:7d:7b:13:c5:6d:2b:06:15:78:c3:b0:c5:
5f:ae:86:7d:39:8c:48:05:3d:7f:40:30:2c:81:30:
2f:9c:b7:c3:38:4f:45:8f:c8:d0:7b:61:60:5e:7e:
e0:9c:f2:58:ed:ce:5b:81:54:bf:9b:a8:3f:58:49:
b2:ed:74:0f:44:58:70:cb:09:9c:cf:63:68:d3:08:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:67:C1:DD:7F:EC:D3:C5:FA:AB:6C:95:E3:12:DD:2A:93:BF:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5C6C10A8E011EFACDE5679762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2e:17:7b:02:56:f1:38:4c:f5:3a:5f:0c:e4:39:65:2e:7f:
18:b7:cd:79:4b:f8:7d:18:38:ed:b6:02:e9:e8:2b:d2:ff:b9:
ed:fd:9a:37:d0:f7:93:31:c9:ac:30:03:be:03:64:0c:bb:11:
b3:77:0a:be:d3:79:12:76:b8:13:ba:ab:79:62:54:02:32:97:
27:16:0f:0e:11:ff:59:58:2c:49:7b:98:4f:b4:a3:38:ec:fa:
87:c2:77:5c:48:7f:49:50:c1:f1:d8:bb:64:a7:50:2a:ce:96:
d1:41:a1:a3:1c:bf:df:48:4f:de:99:6f:aa:8f:a6:32:81:a0:
26:04:06:7f:2c:44:a5:3a:9e:ab:39:4d:42:38:88:41:44:b5:
b8:a3:d2:a7:d0:d6:e1:8b:12:ff:61:85:a0:80:0f:80:56:a0:
11:e5:61:d7:0d:1c:55:eb:d5:dc:5b:32:2d:a7:5d:63:56:69:
1c:03:b3:13:bd:96:15:0c:83:be:16:59:bb:62:3c:d7:4c:12:
db:11:eb:4e:58:85:5b:29:17:aa:6b:89:66:4e:e0:d8:e6:3f:
f3:47:d6:ad:11:20:94:5a:9c:f1:6d:04:00:dc:f1:14:ba:4d:
08:02:6d:9f:17:c8:49:78:18:cd:ad:63:0f:af:63:03:4f:c6:
e6:26:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:35 2024 by rpki-client on console-fra.rpki-client.org