Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94609144A8CD11EF803FD583762E951A.roa
File: 94609144A8CD11EF803FD583762E951A.roa (raw, json)
Hash identifier: RkXoK3sraq/5wL8o7IY662R4ZDUCr0z1Tzr962Th/MY=
Subject key identifier: 77:A5:C0:2B:38:9D:B1:FB:11:F5:31:38:A7:9B:A8:11:A5:F0:D5:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011017
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94609144A8CD11EF803FD583762E951A.roa
Signing time: Fri 22 Nov 2024 12:30:38 +0000
ROA not before: Fri 22 Nov 2024 12:30:35 +0000
ROA not after: Sat 30 Nov 2024 12:30:35 +0000
asID: 137443
IP address blocks: 154.223.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69655 (0x11017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:30:35 2024 GMT
Not After : Nov 30 12:30:35 2024 GMT
Subject: CN=6740796e-d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:a7:c7:4b:f0:ca:9f:e7:44:b3:0d:70:e6:
e7:76:e2:7a:9f:ce:50:7c:83:8b:86:f0:cf:09:68:
42:2a:4d:af:a1:74:7c:9d:95:db:13:d2:14:6c:03:
64:fc:0a:a8:22:35:4d:a7:8c:f8:38:f3:76:4b:30:
19:8e:b2:74:4f:af:e6:41:00:5b:dd:b5:3d:ca:13:
7c:01:a1:14:dd:a6:d2:be:9a:7f:16:0a:0d:24:89:
a8:9b:ee:8c:07:80:f7:5d:9d:f9:38:f8:2d:d4:b9:
17:22:b5:6c:04:82:98:e9:e5:5c:7c:53:bd:bd:3b:
e4:ab:d3:81:c6:c2:48:35:b4:da:bf:73:87:c6:96:
6f:f2:14:8c:e2:44:52:ca:fc:2e:8f:35:ed:69:e3:
39:32:a0:41:68:0b:93:89:69:7e:da:41:6d:4c:0a:
b3:20:47:cc:3a:94:04:4f:21:b2:93:b3:bc:ce:f6:
b3:84:8c:44:da:a0:3d:a8:7c:0d:61:68:90:59:7b:
0a:5a:65:b9:bf:1d:e9:84:86:73:32:e8:9c:19:f1:
a1:cc:92:b0:de:aa:f5:f0:e2:d4:89:f6:ea:70:48:
ae:52:88:0d:c2:29:d9:04:20:88:12:ec:9f:88:92:
0e:ae:ec:02:24:4e:e5:e2:84:d1:8f:bf:ab:18:97:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:C0:2B:38:9D:B1:FB:11:F5:31:38:A7:9B:A8:11:A5:F0:D5:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94609144A8CD11EF803FD583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.182.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e5:eb:ec:94:a3:53:f4:87:1b:07:6f:4e:88:fd:93:e5:14:
c9:f2:aa:ca:b7:28:24:33:91:43:ef:9a:a9:db:b2:52:b2:32:
f8:89:0a:e9:1d:8a:a0:dd:4a:61:d1:58:0c:9a:92:8c:42:c9:
9e:e8:9b:3c:6c:8b:33:95:f7:69:87:ab:ee:d8:9c:ce:9b:3c:
cf:a1:f3:20:33:b5:23:ea:cd:bd:81:c6:f2:be:5d:33:73:c1:
47:0d:3c:42:56:e3:ae:db:36:86:f4:8d:41:51:8e:fa:c2:f6:
0e:8f:29:9b:80:27:0d:62:34:54:7c:ba:7d:67:a2:8b:8c:d9:
b0:c4:4c:c3:64:76:93:92:56:cb:c7:b5:b0:c7:e9:84:49:b3:
df:c6:6a:14:6b:e3:11:50:51:e4:dd:29:17:07:d5:49:e0:c5:
a0:2f:fe:e2:d0:18:89:fa:61:3d:a9:5a:1e:7e:fa:0c:6a:a4:
37:6e:65:d3:b8:c0:30:6b:ab:33:da:2f:82:62:bb:75:39:d5:
0a:2f:96:c3:57:2a:3c:e0:24:1d:a0:a6:21:4b:11:33:6a:af:
5e:73:ba:17:7f:e5:e0:a0:e6:93:bb:8a:8f:c5:fc:17:93:84:
e3:de:1c:12:15:96:9a:7d:a8:12:f4:34:3c:b4:3d:b9:80:c8:
b4:de:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:36 2024 by rpki-client on console-fra.rpki-client.org