Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93753F58A0D711EF80560344762E951A.roa
File: 93753F58A0D711EF80560344762E951A.roa (raw, json)
Hash identifier: J2MWk8XN/mimQhXnh1+UJarYRQN0dfpnL1+PigU2eu8=
Subject key identifier: 43:86:C6:5E:33:E0:F2:41:B4:5D:93:8E:03:3D:0E:11:F6:01:37:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93753F58A0D711EF80560344762E951A.roa
Signing time: Tue 12 Nov 2024 09:22:02 +0000
ROA not before: Tue 12 Nov 2024 09:21:59 +0000
ROA not after: Fri 13 Dec 2024 09:21:59 +0000
asID: 138915
IP address blocks: 154.206.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68614 (0x10c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:21:59 2024 GMT
Not After : Dec 13 09:21:59 2024 GMT
Subject: CN=67331e3a-7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:9a:a6:7d:96:9a:23:db:50:a5:8d:7a:1a:
b8:2f:0f:9e:b2:2f:97:17:fd:eb:a1:c5:92:49:76:
91:7e:4c:1b:5c:04:e5:c9:ac:f2:75:63:46:8e:78:
f0:85:60:19:05:8d:f5:53:bf:d0:ea:29:d0:08:ce:
a6:56:f5:95:3c:8b:19:df:87:dc:58:4e:f3:a3:93:
e3:e8:9c:cb:41:10:d2:ee:96:7d:0e:b0:fc:64:a6:
c6:6e:81:fb:25:31:0c:44:ac:c9:1a:c8:d7:4f:eb:
53:65:80:2e:37:21:07:10:d0:2b:d7:15:fe:20:0d:
b7:be:f8:5a:05:62:a8:6c:39:0b:e6:5e:db:86:72:
df:d1:58:7e:86:25:de:4d:df:07:90:78:ca:8b:21:
5a:a5:8a:95:c8:29:6c:c7:33:41:fb:7e:b3:98:c5:
b6:9a:b8:6d:2f:d8:bb:df:71:4a:9e:76:c9:53:e7:
c8:3b:a9:6f:fb:0f:5b:2f:0c:0b:0f:5c:41:af:c5:
a2:cb:8b:cd:f1:84:4f:d0:66:f6:7c:29:b2:69:61:
dc:c4:19:2e:2e:0b:06:a0:db:f5:2f:46:57:c5:e9:
3c:07:01:8f:8b:86:f0:55:0e:33:77:62:03:3c:7e:
e3:3a:ae:28:e1:57:30:24:6a:63:cc:25:8b:40:03:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:86:C6:5E:33:E0:F2:41:B4:5D:93:8E:03:3D:0E:11:F6:01:37:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93753F58A0D711EF80560344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:7a:b0:83:40:c8:21:a1:66:db:94:be:f4:f3:b0:fa:a7:8c:
99:0f:32:7c:fb:58:ef:57:dd:65:7b:d9:8d:24:5e:17:1d:b8:
58:90:03:77:83:a5:1c:76:b6:b5:31:1b:c5:cb:f9:de:48:e9:
85:40:24:40:8e:60:d9:e5:02:26:9b:7f:a3:1a:15:64:3c:b6:
ef:fe:ed:22:15:4e:ba:5f:0c:e2:7f:af:a9:e6:f2:71:88:2d:
db:e5:06:26:ce:91:0a:53:f8:04:9f:e9:fa:97:2f:30:e3:ec:
96:bd:0f:25:74:65:8f:28:39:20:99:81:37:18:84:55:ce:61:
34:69:1f:27:19:ab:dc:76:1b:9c:54:cc:e2:1c:fd:42:0e:09:
18:aa:2a:5b:18:f8:3b:10:b3:2c:59:0c:e1:af:69:f8:2f:91:
56:4a:95:66:5c:e0:b9:be:dd:a6:ae:46:ca:46:f0:d6:0d:cc:
24:a7:25:5c:7a:67:2c:82:27:c6:39:6d:58:55:5f:e6:0a:cd:
02:36:da:ce:e3:a9:41:16:74:26:84:87:24:be:01:d4:17:7c:
3a:be:4e:9f:86:09:ce:55:31:85:f7:1e:3b:70:7c:5e:48:e7:
64:d9:5e:1e:ea:f0:cb:5f:43:28:40:a8:20:a2:f4:d3:c8:07:
a2:d8:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:39 2024 by rpki-client on console-fra.rpki-client.org