Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9921943692DD11EFBAF67DA9762E951A.roa
File: 9921943692DD11EFBAF67DA9762E951A.roa (raw, json)
Hash identifier: XKQNDJL6mFCKWwsk6ZHUqPFpJnyXka5W1iQ4N4LAbog=
Subject key identifier: 62:20:5B:ED:2C:25:B8:2E:9F:80:2E:3C:E2:3F:3E:9F:E1:18:F0:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010230
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9921943692DD11EFBAF67DA9762E951A.roa
Signing time: Fri 25 Oct 2024 14:29:53 +0000
ROA not before: Fri 25 Oct 2024 14:29:49 +0000
ROA not after: Sun 01 Dec 2024 14:29:49 +0000
asID: 44559
IP address blocks: 154.209.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66096 (0x10230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:29:49 2024 GMT
Not After : Dec 1 14:29:49 2024 GMT
Subject: CN=671bab60-56dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:05:c7:c4:c7:3d:19:b3:98:6d:19:f1:f3:
45:b9:95:76:c4:eb:3f:41:61:f2:f3:84:84:65:e8:
b4:e0:6c:eb:22:b0:e0:98:d2:dd:88:09:4a:1b:9b:
2a:78:df:94:6f:b3:f6:87:b5:36:d9:cb:bf:50:1f:
97:4f:0c:6e:0d:22:22:99:1e:af:95:fd:80:19:c8:
2c:0f:1a:30:f5:b8:a0:99:1a:22:c7:36:2c:47:ba:
98:a5:93:d0:32:cf:ec:ae:ad:ac:0d:f5:83:79:22:
a7:8a:31:66:f3:9b:f6:f7:b1:48:2b:0f:c9:6c:d2:
e1:80:de:b4:f5:48:24:6b:4a:cb:c7:73:46:87:9c:
86:0f:c7:e2:ea:ed:3e:f9:2d:4e:30:cd:c5:95:62:
5b:21:1d:9f:bb:28:15:ba:0b:b1:26:6f:1f:c5:7e:
90:e5:eb:45:4b:b5:e4:84:73:96:75:0d:17:c9:f9:
e7:5b:43:e8:65:2b:73:26:64:00:ca:19:1b:06:6b:
45:80:d6:07:7a:a8:db:50:46:a7:46:01:ca:74:28:
6f:fb:a5:5b:61:5b:d0:43:dd:02:b7:d8:26:a9:ab:
8e:71:d1:1b:11:39:52:7e:e9:40:11:e2:54:83:cf:
8f:21:55:d3:99:72:37:5c:30:a5:23:5c:87:4c:b2:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:5B:ED:2C:25:B8:2E:9F:80:2E:3C:E2:3F:3E:9F:E1:18:F0:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9921943692DD11EFBAF67DA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.132.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:db:11:36:b0:2a:25:34:02:7a:69:6a:d2:3f:c4:04:0b:0e:
1b:21:1a:e1:3a:3a:ca:33:64:37:64:65:b1:d7:eb:a0:08:4a:
8e:e6:9b:e5:ff:1e:0d:b9:2e:b4:b3:40:11:fa:35:1a:6a:8f:
1e:77:85:a5:85:c0:d2:e9:13:82:4e:49:2a:b4:d4:a1:28:04:
b5:f2:4c:aa:04:18:23:0d:22:8b:95:f7:64:e3:8b:0f:c1:69:
ea:cd:ce:a2:24:3a:ba:33:95:ab:12:a0:75:91:b7:b9:0c:76:
15:80:d6:96:4f:2f:4b:83:c9:0b:ea:53:8b:6d:fb:68:3c:a8:
1c:a7:ee:95:47:36:d8:ba:93:66:f4:ba:99:6a:50:8c:f9:06:
8b:1c:b4:4a:d9:c2:c0:2b:c9:d9:a5:99:24:95:9c:52:94:ef:
8f:85:98:c3:82:b7:5a:4d:8e:16:a0:bf:08:85:f4:a4:60:cb:
93:73:d8:b6:14:7c:e6:16:b6:f9:1d:4b:b0:10:ba:88:d3:7d:
4d:9d:a2:68:ca:6c:8d:b1:a0:9c:6f:9b:06:ae:8a:f9:58:a7:
18:95:9d:a1:56:6a:a2:4c:e2:47:f7:86:04:d9:ca:9b:28:97:
04:96:e6:9d:95:03:a0:fb:26:eb:f0:a9:ff:86:71:f2:d0:40:
94:5e:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org