Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9457B9D6725711EF97EEBB65762E951A.roa
File: 9457B9D6725711EF97EEBB65762E951A.roa (raw, json)
Hash identifier: AWTkoEWvfgSY/IfQJLtug01aeFMAZ9dKZQcI4fPbo58=
Subject key identifier: 10:1F:BF:14:6E:8B:C3:12:4B:33:C4:48:5A:5B:FD:A4:AD:22:9D:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9457B9D6725711EF97EEBB65762E951A.roa
Signing time: Sat 14 Sep 2024 05:09:55 +0000
ROA not before: Sat 14 Sep 2024 05:09:51 +0000
ROA not after: Tue 31 Dec 2024 05:09:51 +0000
asID: 17561
IP address blocks: 154.217.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60884 (0xedd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:09:51 2024 GMT
Not After : Dec 31 05:09:51 2024 GMT
Subject: CN=66e51aa3-99f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:55:38:0b:00:d2:50:9b:23:71:39:71:a7:
5f:7e:53:e2:ed:8e:6e:d6:0f:84:21:59:3c:92:a5:
58:11:36:c4:1e:ec:90:27:98:7b:12:38:4a:b4:81:
db:2e:64:d0:69:35:2a:d7:77:1f:c7:ca:3a:db:18:
7e:70:7c:30:b3:f5:6e:0a:cd:a7:33:f7:7d:2d:2e:
fd:0e:23:07:c2:46:6b:03:f1:5a:8d:86:0c:bf:cd:
e0:78:54:02:30:74:0c:fa:11:69:5b:54:70:5f:c1:
32:ec:50:68:4a:13:85:07:00:31:7c:1c:f6:2d:c4:
97:aa:07:cb:a2:a8:77:b6:62:77:92:ea:0d:42:20:
32:8f:fd:fe:fb:2c:a0:a7:aa:07:5b:6b:b1:b1:81:
ae:6f:d1:65:f1:cc:34:02:9f:ec:ff:25:bd:3d:f9:
e9:64:10:1f:98:84:ac:e6:2a:18:d1:81:e4:f8:1b:
89:54:43:ee:90:00:af:59:02:15:0a:e2:5d:02:1e:
99:1b:82:b5:b5:6b:2d:84:c3:38:1b:51:c4:7e:ea:
ae:79:8b:10:eb:0c:12:63:98:d2:15:47:e6:80:02:
68:da:9d:66:95:8b:75:03:16:2b:c2:03:7a:7b:1a:
8f:58:7d:aa:6f:c3:27:6b:b8:af:11:c8:3f:a2:dd:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1F:BF:14:6E:8B:C3:12:4B:33:C4:48:5A:5B:FD:A4:AD:22:9D:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9457B9D6725711EF97EEBB65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.64.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:61:46:c1:63:c2:d5:0b:aa:ff:90:7c:c4:31:15:18:ab:55:
54:b1:61:0c:62:15:55:cf:f8:62:3b:d9:8a:07:0a:59:69:28:
09:7f:0b:ba:54:2f:ec:ac:0e:58:7f:f9:7b:fb:b2:27:c4:d0:
9e:bb:21:a2:02:69:d3:0a:50:05:14:bf:8a:31:ab:c8:2c:20:
e0:fc:e6:64:02:92:f6:38:11:a6:e0:6f:4e:b5:02:01:00:01:
fd:ce:ae:b5:d8:2a:f3:3e:ad:18:a2:0c:44:49:ff:71:5b:39:
7c:c8:24:ca:a7:11:9f:53:62:c9:f3:e1:17:78:9a:76:eb:be:
3b:72:5c:01:9b:e7:27:9d:c9:32:2a:37:d5:60:5a:8c:de:ac:
01:0c:18:c3:3b:43:e7:a6:d2:44:82:68:94:03:d8:81:c4:95:
14:02:17:d8:7d:35:9c:96:9b:88:ce:30:f6:8d:a1:12:19:f8:
52:66:c8:3b:13:e4:42:b6:83:44:e7:41:40:15:d2:fb:06:94:
70:64:30:94:78:f6:b4:d6:60:1a:d5:14:69:e0:08:8f:31:1a:
a4:ae:17:0d:9d:a4:a8:3a:f8:de:68:a1:80:dc:6d:e3:ce:4c:
8f:2a:43:87:ad:2d:3e:36:80:3c:37:9e:4b:32:1f:b9:6a:fb:
c8:91:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:16 2024 by rpki-client on console-fra.rpki-client.org