Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C53594A86F911EFBAE2B2A7762E951A.roa
File: 9C53594A86F911EFBAE2B2A7762E951A.roa (raw, json)
Hash identifier: RFH5at/18X2yQ2GVdddgeFli+tNcIVsGtb7qscfxZQ8=
Subject key identifier: E5:7A:FB:49:09:80:4A:98:39:BF:7A:3A:F9:B3:EF:6C:19:8A:5C:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FCC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C53594A86F911EFBAE2B2A7762E951A.roa
Signing time: Thu 10 Oct 2024 11:20:10 +0000
ROA not before: Thu 10 Oct 2024 11:20:06 +0000
ROA not after: Fri 20 Dec 2024 11:20:06 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64710 (0xfcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 11:20:06 2024 GMT
Not After : Dec 20 11:20:06 2024 GMT
Subject: CN=6707b86a-1bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:63:a7:29:24:b6:42:8c:ba:5a:e1:0c:1d:
cb:83:c8:3b:54:cc:65:e8:10:32:e9:d2:ed:24:4c:
05:ad:6e:54:95:06:96:a1:b7:4e:e8:a5:09:1b:ce:
8b:86:d0:31:46:0b:46:a7:60:35:0e:49:c1:7c:d9:
ae:1f:1c:53:c2:f8:31:02:e0:9d:4f:35:ec:69:d6:
14:ef:76:8c:72:24:26:23:c4:06:83:35:17:fe:17:
47:5a:0e:5f:28:9c:b0:20:6f:56:73:2f:2c:06:b5:
3c:a0:66:18:47:23:e1:56:60:dd:ff:e9:6e:a3:f9:
15:25:06:4a:8b:b3:f1:c5:b2:6a:d7:b4:e0:6e:d9:
f8:39:7c:7f:80:d4:74:e2:04:5b:db:67:2f:18:ca:
54:6b:c0:e9:94:19:c7:a7:5b:f4:9d:6a:1b:ec:3f:
aa:e9:a5:11:9f:31:86:1d:e9:e8:16:09:12:dd:dc:
a5:f1:a7:18:a9:a9:de:2c:22:b9:27:3e:f7:aa:2b:
2e:3d:43:30:58:5b:79:01:2c:70:6e:01:06:6b:f9:
03:b1:36:1c:ff:e9:dd:8a:56:e2:e7:cf:43:28:8e:
4a:42:da:79:ae:d2:68:3a:9e:55:fa:d6:8d:cb:be:
b2:96:cd:89:74:56:28:ed:f2:8b:2c:2f:d8:56:e6:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:FB:49:09:80:4A:98:39:BF:7A:3A:F9:B3:EF:6C:19:8A:5C:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C53594A86F911EFBAE2B2A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:5f:fd:1e:2b:67:38:64:b4:a2:58:53:7c:a0:62:f8:4b:a3:
9a:57:5f:24:a1:9d:aa:f5:6b:3e:f5:f3:a6:f7:a4:95:22:a0:
e3:0b:e3:b8:97:03:bd:99:31:e6:88:f7:d5:4c:f9:99:62:d3:
38:97:c8:35:1d:61:c2:e7:be:a3:52:77:a8:77:7d:e8:98:91:
4f:01:3f:45:16:c8:97:ec:4f:b6:af:de:ec:96:ca:f8:7d:6c:
54:51:cc:9d:42:2a:aa:b2:d2:e7:52:bb:3f:53:f1:f8:4e:83:
d6:39:4b:93:f8:2a:1c:6f:07:99:14:04:07:c8:34:d8:b8:28:
6c:d4:e7:2b:9c:f3:27:dc:c2:d1:7e:60:4f:43:4a:da:d2:f8:
64:d0:41:e4:36:8a:62:9c:a0:4c:32:e9:c2:7f:8c:ac:a4:98:
1a:58:86:69:ef:1c:5d:76:f2:9c:a7:f6:91:87:04:4b:c5:13:
65:bd:4c:c9:0d:a2:c6:b0:4d:83:8f:2c:9e:12:84:6d:1a:7b:
a5:7b:7c:d4:f5:98:45:20:0c:f8:43:42:d9:c4:53:87:24:24:
8f:a0:76:68:75:c7:b4:46:20:2e:fc:42:01:2a:92:7f:b0:02:
cf:fa:bf:ff:e3:c3:63:fe:e7:a3:a6:65:fe:54:16:c1:0e:48:
ff:0a:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org