Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A2477406AA111EF90CF5870762E951A.roa
File: 9A2477406AA111EF90CF5870762E951A.roa (raw, json)
Hash identifier: jdNW+/vStTa0aykI/MKEJ895KRSGzehMWO2z5dO2jAY=
Subject key identifier: 71:3D:D1:D8:65:45:4B:C2:42:E9:EB:46:1A:AC:78:6E:66:E3:44:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A2477406AA111EF90CF5870762E951A.roa
Signing time: Wed 04 Sep 2024 09:39:38 +0000
ROA not before: Wed 04 Sep 2024 09:39:35 +0000
ROA not after: Thu 24 Apr 2025 09:39:35 +0000
asID: 63888
IP address blocks: 154.207.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59951 (0xea2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:39:35 2024 GMT
Not After : Apr 24 09:39:35 2025 GMT
Subject: CN=66d82ada-90d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:fc:fb:b6:fe:81:1c:fa:cd:e9:33:9a:78:
32:c9:82:be:1f:58:db:1d:52:a2:e4:30:9e:1f:8b:
3b:97:19:fc:60:92:cd:2e:52:ec:e1:85:5c:56:37:
30:97:52:3c:09:21:5f:2e:ba:e7:0e:12:e3:44:36:
9b:6a:0f:21:90:31:c7:2f:96:e7:5b:ce:20:44:c9:
13:64:bc:0d:74:44:50:a7:99:8b:ec:7f:4b:2d:50:
d7:4d:38:18:67:09:0a:48:1d:dc:99:18:5f:64:6d:
17:64:8f:47:c4:de:4a:9e:19:8d:bd:7f:79:10:8e:
05:b3:b0:94:6f:e5:e1:86:e2:7b:05:aa:66:0d:60:
57:2d:44:c0:7b:46:31:cd:6e:4a:23:dd:66:85:37:
8f:25:6a:9f:35:d2:fc:2e:d1:b1:7f:1a:21:6d:47:
ed:8e:54:c2:a9:5d:48:18:2d:a9:45:c0:3a:43:07:
ed:b8:e6:7c:ad:f6:96:db:f0:6a:f4:c0:b8:bf:82:
87:04:7d:d6:33:9d:01:a5:a9:1a:d7:c0:72:3d:8c:
ab:60:17:14:1f:12:bd:c4:96:1f:1a:26:49:f5:24:
31:28:1d:b9:01:a5:d5:9e:38:82:c6:e0:57:26:1b:
94:f1:14:60:02:76:88:89:66:e7:7d:06:42:58:93:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:D1:D8:65:45:4B:C2:42:E9:EB:46:1A:AC:78:6E:66:E3:44:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A2477406AA111EF90CF5870762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.98.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:98:e6:9c:e8:67:85:54:1b:54:b9:4e:ff:40:34:92:46:7f:
9e:5e:c9:df:e7:85:08:c9:a9:2c:fd:f9:64:64:59:64:aa:83:
c9:2b:5d:9b:fb:ca:8a:4b:25:ff:c1:04:e1:e1:99:ac:cc:3b:
46:07:d6:14:a1:90:29:94:dc:ed:fb:1c:89:19:d3:da:8b:0a:
67:b8:e6:16:de:5c:c8:9d:d0:2d:76:71:ea:a8:87:ea:d4:7d:
92:92:3a:2f:5a:57:73:f0:52:30:2f:e8:ce:1e:7b:bc:e8:c7:
52:fe:a3:11:52:e9:6a:f1:4f:2d:94:f6:a9:5b:27:22:3c:8b:
fb:ae:e3:45:a3:dc:cb:c0:c0:60:d7:8f:15:5c:cb:56:58:cc:
fe:9d:91:a3:33:14:be:39:1d:18:6c:e8:10:92:67:ab:60:5d:
d3:3e:35:24:11:81:42:41:9e:f9:fb:17:5e:a7:de:09:8b:5a:
ac:2f:60:53:7f:8d:41:6a:c0:ce:c7:4f:dd:cd:38:db:6d:b4:
9a:36:13:29:92:57:31:75:98:47:52:94:4d:bf:c3:24:fd:2b:
c0:f4:a1:36:47:27:4d:14:9e:3f:dd:23:68:3e:b7:7a:da:25:
8e:8b:8a:ec:c3:8f:1f:40:6b:71:13:e9:bf:71:fe:ff:7e:0e:
01:67:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:48 2024 by rpki-client on console-fra.rpki-client.org