Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974910D696B511EF9BCEDF67762E951A.roa
File: 974910D696B511EF9BCEDF67762E951A.roa (raw, json)
Hash identifier: r35aho8XA+ETSEWT3cy4gOuAHxfubiVyh9acfNygJvE=
Subject key identifier: 32:C0:9A:B5:CB:47:15:D8:80:CF:06:E6:90:24:E8:42:0B:36:A9:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974910D696B511EF9BCEDF67762E951A.roa
Signing time: Wed 30 Oct 2024 11:53:34 +0000
ROA not before: Wed 30 Oct 2024 11:53:25 +0000
ROA not after: Wed 11 Dec 2024 11:53:25 +0000
asID: 138915
IP address blocks: 154.203.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66593 (0x10421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:53:25 2024 GMT
Not After : Dec 11 11:53:25 2024 GMT
Subject: CN=67221e3e-63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:bb:3a:d2:92:b1:37:72:e4:01:25:60:2c:
41:01:f0:c7:b9:ac:5b:ed:1a:0f:ea:12:c3:ac:a9:
f8:f1:4d:e1:13:21:04:6e:a0:bc:c6:2d:9e:7f:a5:
bb:bc:e3:2a:ea:3f:24:d4:f9:ef:91:0a:6e:23:e8:
b0:fe:cc:de:d7:10:86:f8:c8:ed:87:23:7d:4f:ed:
dd:31:3a:ed:a9:43:6f:ae:e8:13:42:aa:4c:ed:05:
e0:46:1c:16:82:3a:ad:0c:6c:a5:3a:3a:ee:4f:ed:
60:ad:58:5a:95:52:31:52:3a:96:1e:56:59:1e:a6:
38:ca:a6:84:f2:55:b5:16:d2:58:f6:00:12:60:d4:
e7:a3:aa:d6:f5:35:56:b7:c6:fd:65:8b:98:18:7b:
6a:75:4d:eb:4f:f1:d8:81:91:95:08:ef:93:c5:56:
96:5b:31:cf:08:c8:1f:57:6f:c9:bf:ea:2e:5c:34:
89:55:ae:1f:97:d0:a1:36:f2:8e:7e:50:d6:36:82:
d5:61:f5:6e:c1:2e:b6:9c:b5:f1:68:47:43:f7:c5:
34:31:18:ea:0c:53:a8:7f:26:21:19:8a:19:5c:ab:
54:95:cd:a1:85:07:62:c8:f7:d2:f3:67:bc:e8:a6:
f5:a8:7a:82:fa:52:a8:cb:30:56:22:84:10:e8:e4:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:9A:B5:CB:47:15:D8:80:CF:06:E6:90:24:E8:42:0B:36:A9:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974910D696B511EF9BCEDF67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:39:74:9e:ec:d9:4a:32:fb:af:c1:48:b1:43:3f:22:6a:53:
3f:03:42:0f:4c:94:8f:c0:56:53:70:ae:e4:cc:28:be:3b:50:
b3:d3:86:5b:28:69:f6:11:0d:58:f8:19:44:78:77:19:a2:94:
0c:26:91:cc:0b:1e:72:7e:f3:cf:9a:29:6e:9e:7b:4d:4e:cd:
61:fc:19:fb:9d:ee:8b:d9:e9:03:b1:c9:4c:71:7f:95:b0:a5:
a7:51:4e:20:45:dd:13:8f:83:87:fa:27:61:de:11:28:cd:77:
5f:73:62:e5:61:3f:13:97:b9:d4:35:a0:c8:12:c3:4c:3f:76:
26:6c:c8:ee:b5:3d:bf:8b:e6:c6:a5:ef:49:d8:dd:40:ea:c5:
9e:98:62:a3:6d:e3:2d:36:2f:df:12:6c:dc:3d:ab:b3:0c:67:
18:f8:ce:59:bc:a4:07:aa:14:35:e3:c6:3e:3b:8f:76:4e:3f:
95:c3:64:be:39:45:68:f4:f4:80:7c:10:06:c7:27:1d:ce:55:
af:a8:c2:a5:9b:31:6c:99:30:01:ac:67:95:4a:eb:fa:4f:78:
41:b7:ad:ed:34:d9:83:ac:fa:e7:cd:3c:5a:1f:69:dd:91:af:
87:a6:44:a0:e2:99:fd:db:71:25:1d:66:67:3f:d9:92:9a:af:
10:0c:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:40 2024 by rpki-client on console-fra.rpki-client.org