Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC8863C911911EF9EE70F91762E951A.roa
File: 9CC8863C911911EF9EE70F91762E951A.roa (raw, json)
Hash identifier: D53mabxMKIvLgMv7lPbTCFGYVgyNF6agQcGjPnQBXsQ=
Subject key identifier: 6E:B0:2B:68:D3:87:E7:4B:87:90:CD:D5:E2:D1:15:2A:37:62:A4:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC8863C911911EF9EE70F91762E951A.roa
Signing time: Wed 23 Oct 2024 08:34:26 +0000
ROA not before: Wed 23 Oct 2024 08:34:23 +0000
ROA not after: Sat 25 Oct 2025 08:34:23 +0000
asID: 135600
IP address blocks: 154.211.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65742 (0x100ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 08:34:23 2024 GMT
Not After : Oct 25 08:34:23 2025 GMT
Subject: CN=6718b512-8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:55:31:ba:2f:56:3a:c0:2b:da:b9:5c:1b:
1b:b8:63:fc:59:64:e8:9e:78:02:52:75:53:7f:47:
82:af:8a:70:c3:3f:6d:f1:9f:de:54:4f:3b:1f:53:
20:3a:dd:67:ff:91:11:f3:f7:c3:ec:0a:3b:58:03:
d4:d2:7b:fb:c3:ae:cd:fc:b1:d9:2a:50:92:2a:f6:
28:93:9c:12:60:3b:cb:b3:23:5c:09:74:c3:a1:c2:
e0:6d:d8:72:c1:04:43:2d:7d:5c:66:6b:b8:92:cd:
28:d6:a1:68:71:28:9a:42:35:41:66:0d:50:ae:4c:
3a:3c:9e:1d:12:81:e6:01:89:f3:11:cd:e2:0e:f6:
93:e0:f8:da:1a:b2:5d:40:26:cd:fb:81:ca:e6:b4:
91:cb:33:59:34:b2:b1:ed:e3:44:89:9c:bf:be:91:
ac:4c:5e:31:57:35:af:ab:0f:e9:b9:f3:c9:a4:d8:
0d:a3:46:ef:72:00:c2:b1:ff:ef:48:e8:41:c3:1f:
b1:d5:c1:88:d5:74:b2:d4:87:1d:76:19:6b:89:05:
3e:68:be:fa:99:4d:2d:84:04:bc:84:77:ad:95:24:
e3:51:ef:c6:d5:c6:c9:5a:8b:b8:b9:90:45:19:d9:
0f:78:f4:b8:18:d0:66:59:74:c2:87:a9:6e:76:14:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:2B:68:D3:87:E7:4B:87:90:CD:D5:E2:D1:15:2A:37:62:A4:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CC8863C911911EF9EE70F91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.184.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:9e:2f:09:19:f6:8b:de:5f:59:19:c0:ea:5d:a5:f7:ae:80:
24:6b:ad:6f:97:19:34:69:60:b7:3d:f2:91:cc:e5:d8:62:a7:
0f:cd:82:02:b2:10:d2:27:74:8a:c6:1c:b2:6f:3a:20:37:bc:
a1:1a:a6:d2:81:42:d9:cc:d0:af:f6:3c:00:82:d5:be:10:93:
6e:32:20:65:11:6f:a7:b6:dc:6f:a3:2e:cf:f2:10:d8:b8:3c:
fb:cb:bf:19:e0:dc:3c:c2:a4:e7:e3:e8:82:87:15:b7:94:a2:
01:a2:e1:4b:a9:81:3b:30:46:7d:60:3e:e4:4d:3f:34:48:b4:
7e:26:df:7d:a7:39:89:26:4f:34:bc:f7:9f:f4:fb:62:3a:63:
4a:ec:f0:d8:7e:c9:2d:55:c5:8e:6b:84:82:9f:8c:e5:09:6a:
3e:ec:a9:b3:de:4a:5f:02:88:74:f3:57:25:7a:d6:ac:a7:6b:
dc:24:cd:c5:d2:ba:0f:0e:82:c8:a9:67:4d:e9:51:46:d1:a2:
e3:26:3f:8c:ea:1d:cd:8f:87:02:5f:07:db:22:a7:bd:ee:56:
60:d4:6f:ff:cd:8c:5e:55:b6:81:2b:f1:f6:7d:73:03:00:ac:
61:35:01:11:9e:0e:a8:bc:6d:db:90:19:2a:bd:ea:e2:ab:88:
c2:2d:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org