Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E835AA0385B11EFB4F72AA9762E951A.roa
File: 8E835AA0385B11EFB4F72AA9762E951A.roa (raw, json)
Hash identifier: lPa6IplWhgVu6WxLIYtUglITOt0tW7WmxeMmtiszy4w=
Subject key identifier: 25:70:4F:67:3E:26:10:11:64:5D:65:CE:2D:36:ED:91:45:16:84:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CB4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E835AA0385B11EFB4F72AA9762E951A.roa
Signing time: Tue 02 Jul 2024 10:12:16 +0000
ROA not before: Tue 02 Jul 2024 10:12:12 +0000
ROA not after: Fri 04 Jul 2025 10:12:12 +0000
asID: 139065
IP address blocks: 154.194.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52046 (0xcb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:12:12 2024 GMT
Not After : Jul 4 10:12:12 2025 GMT
Subject: CN=6683d280-6654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:c4:5f:9d:a7:13:e8:ba:1b:55:1e:4e:17:
62:0f:e7:39:28:67:07:00:93:19:84:9e:4e:e0:03:
77:c7:50:4e:38:bc:4a:dc:4e:20:88:d0:1f:0d:be:
a5:cb:91:32:67:f6:2f:c6:df:90:17:ab:bb:69:f7:
fd:62:79:7b:41:19:3d:c0:1b:88:64:55:a7:4a:77:
e8:7a:6f:2d:d8:44:ee:e3:66:91:0b:e5:c3:59:79:
49:2f:19:e8:c8:2c:8a:7e:c1:76:58:ce:5a:85:3a:
22:96:4c:e2:41:4f:f6:4a:66:a7:90:98:2a:c8:9c:
84:7e:2d:bb:8d:aa:b2:cb:a6:fd:e7:40:31:f3:7a:
d0:43:82:a5:ab:a4:e8:d6:2f:05:d7:12:40:6d:cb:
e1:b0:de:93:6e:50:0b:42:e2:e9:5d:12:e2:33:e9:
30:ca:e8:ed:a8:d0:5c:ec:56:c6:e2:99:39:e0:38:
49:da:4a:4e:c6:88:f2:60:27:fb:9d:9a:e6:db:e8:
32:6b:89:45:d0:cc:78:f1:11:16:93:29:6a:51:41:
1b:75:1c:96:10:57:72:6d:fb:56:87:38:a5:92:51:
30:fe:2e:df:67:3d:56:c4:2c:6a:26:20:3b:99:d1:
e1:ea:16:02:62:5f:53:a6:e6:05:63:df:26:b8:51:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:4F:67:3E:26:10:11:64:5D:65:CE:2D:36:ED:91:45:16:84:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E835AA0385B11EFB4F72AA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:83:8e:84:2c:a6:6e:bc:f5:03:30:56:c7:8c:8e:64:56:90:
c6:c3:86:9a:8b:ce:dc:25:af:f1:b7:99:d9:96:b5:e5:92:1b:
77:c9:b4:88:f9:78:7f:95:3e:b0:92:67:1c:ef:f7:05:71:8f:
26:e1:f1:8f:08:b5:5b:55:df:f7:f5:8b:ad:7a:37:99:51:7d:
7c:36:15:b2:09:ae:7a:8b:99:a6:a1:f0:1a:15:ab:43:60:9e:
f3:b3:0d:2f:b3:3b:6d:a2:7b:bf:86:f1:f0:e2:98:77:85:71:
2f:5f:6a:ef:0f:92:6b:c7:b5:bc:ed:b8:c1:26:57:f4:61:b0:
67:c0:f5:ad:d9:d0:0a:d8:4e:5b:f5:48:ff:01:06:73:5b:84:
79:eb:ee:21:c2:8e:30:51:ab:39:1b:09:d5:46:00:21:9d:78:
b6:bb:cc:fe:4a:88:27:7c:42:6d:f8:35:c4:63:a4:d6:b2:91:
60:2b:82:92:78:fb:40:f6:09:b3:19:65:3c:63:41:22:2f:f4:
58:0e:f7:20:c8:0d:7f:a4:27:25:f6:e1:4e:70:1b:09:67:9c:
d4:5d:65:38:67:e9:f5:97:63:22:8f:62:8e:2c:15:b6:a5:57:
1d:0d:51:71:31:20:49:fe:64:81:12:f4:53:8f:76:51:38:73:
d0:c8:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:54:33 2024 by rpki-client on console-fra.rpki-client.org