Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90966A6E9EB111EF9EBE00BA762E951A.roa
File: 90966A6E9EB111EF9EBE00BA762E951A.roa (raw, json)
Hash identifier: c1bJJ+NTnS6xPlKekf6wOn++e+edbGJ00/SEz9AqfQU=
Subject key identifier: EA:42:52:C3:B2:DC:BA:93:61:F3:1E:37:B7:6D:8D:28:71:5A:C9:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90966A6E9EB111EF9EBE00BA762E951A.roa
Signing time: Sat 09 Nov 2024 15:44:56 +0000
ROA not before: Sat 09 Nov 2024 15:44:47 +0000
ROA not after: Tue 13 May 2025 15:44:47 +0000
asID: 26617
IP address blocks: 154.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68139 (0x10a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:44:47 2024 GMT
Not After : May 13 15:44:47 2025 GMT
Subject: CN=672f8378-eb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:fb:d3:65:de:57:a1:2b:42:a2:ad:c3:61:
85:20:1a:a2:f8:3d:fb:d4:d6:5f:09:fe:28:1b:f4:
88:eb:d0:dc:39:d1:bf:82:7e:fd:74:d8:ac:8a:64:
b5:90:72:27:50:25:6d:81:cd:48:bd:22:1b:df:8b:
ec:9c:f2:39:d9:0b:ce:5f:49:23:17:a3:37:19:08:
4c:f1:61:c1:a9:ff:82:11:4e:6b:a2:14:00:e7:08:
94:bf:44:65:98:cd:a1:40:ec:98:2d:f8:b6:42:7a:
b7:d8:61:21:d9:c2:f0:19:32:e0:80:13:71:b4:ae:
bd:a2:bd:43:71:f0:7b:60:27:6b:eb:7c:14:19:2c:
e7:e1:43:c1:b9:27:08:70:89:a7:23:41:cd:64:8f:
49:82:c0:a7:ee:4d:87:11:63:77:f2:eb:4f:a4:2d:
fa:14:4d:1c:e9:34:09:5a:91:80:ef:ed:86:22:05:
1b:8c:b3:aa:95:4b:69:8d:e1:dd:38:c1:10:6b:72:
6d:47:99:38:98:2e:6e:2f:5f:e1:89:9b:74:82:1c:
b4:a6:0a:03:b9:cc:eb:4e:8b:3f:3a:b0:a0:c5:4f:
5b:ba:b4:45:36:2a:ce:79:fb:72:36:e7:fa:b7:b1:
3a:64:78:d3:36:ad:20:ae:9a:b9:a5:2b:3a:8f:d7:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:52:C3:B2:DC:BA:93:61:F3:1E:37:B7:6D:8D:28:71:5A:C9:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90966A6E9EB111EF9EBE00BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ed:51:85:c1:97:a3:2b:db:c6:4a:ca:94:a8:b6:b4:dc:b6:
4c:7a:b5:e3:a9:59:a3:e7:cf:b0:95:f8:c2:04:c6:3a:1b:38:
83:45:4d:22:a0:d4:74:02:97:b2:7e:45:4d:7b:7a:fe:af:3b:
77:f0:c7:aa:40:e3:b8:c0:8f:2e:74:ac:6f:e0:cf:52:03:e1:
bd:3b:60:8e:17:04:2f:46:99:12:ae:8c:8a:95:dc:58:dc:1a:
01:fb:93:2b:2b:a0:5c:5a:e3:cc:70:8c:3b:8b:9c:4a:26:9e:
15:45:84:c8:e2:05:0f:9b:c0:7c:30:05:48:6c:34:29:39:ca:
43:b0:03:2e:40:35:ec:ba:b0:bc:a1:9d:d2:10:db:42:6c:35:
e7:2f:e3:84:03:42:f3:cb:da:2d:c3:19:7b:e0:35:93:9e:1f:
fe:9e:aa:1c:b8:fa:dd:95:30:e0:26:32:82:18:46:b2:65:33:
b5:54:25:dc:5c:a2:80:a0:45:96:c3:ea:e3:c5:36:38:6c:bf:
a3:fd:90:cb:7a:5a:46:e3:68:0c:57:66:81:65:36:0b:21:0f:
9f:90:53:8b:23:f3:84:d4:54:01:9c:9c:27:dd:e3:1f:c4:25:
5f:79:8a:b3:e7:98:89:35:9a:d5:fa:98:e5:5a:e9:56:3f:db:
93:a4:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:57 2024 by rpki-client on console-fra.rpki-client.org