Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D70050AA65011EF8AB49360762E951A.roa
File: 9D70050AA65011EF8AB49360762E951A.roa (raw, json)
Hash identifier: BRmhHwKUTbI7OGR1lMFKo0M/cOG8EFM2kV1GaibR8M4=
Subject key identifier: 16:0D:14:F6:6A:6B:2B:ED:66:5F:46:05:ED:FA:8D:96:B4:15:E2:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D70050AA65011EF8AB49360762E951A.roa
Signing time: Tue 19 Nov 2024 08:31:04 +0000
ROA not before: Tue 19 Nov 2024 08:31:00 +0000
ROA not after: Sat 23 Nov 2024 08:31:00 +0000
asID: 149014
IP address blocks: 154.223.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69410 (0x10f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:31:00 2024 GMT
Not After : Nov 23 08:31:00 2024 GMT
Subject: CN=673c4cc8-7297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:d9:1a:7d:b1:5f:66:fe:21:39:2a:31:81:
fb:fe:11:86:34:71:d6:74:5c:a5:96:9b:6d:85:55:
0e:8a:71:39:fb:a3:0b:8b:51:11:64:56:73:d6:d2:
e8:98:e1:64:90:ca:12:21:ea:5b:4c:21:73:8c:a4:
d2:08:b8:14:96:22:ae:88:6d:6d:75:ae:ac:eb:40:
8e:32:66:92:e0:1b:ee:02:52:a7:9d:d4:ae:7b:31:
d0:23:f3:87:0a:2f:0a:6b:e2:f4:08:69:99:fd:af:
2e:54:16:90:77:80:28:9d:4c:14:23:e8:63:eb:88:
2f:25:82:2f:74:10:ac:0e:a1:d5:a5:f4:5f:5b:de:
0f:35:c2:53:41:c4:b3:6e:70:21:04:9c:6d:dd:60:
df:0d:4a:f4:66:a3:27:a1:fc:ef:7e:af:61:78:2c:
64:21:f6:7d:76:49:9a:ec:bb:f5:83:55:49:46:68:
aa:42:b0:f8:a6:ba:4e:74:53:1f:e4:e2:3b:1d:be:
cb:a0:1d:1c:aa:ad:d9:ca:53:bb:32:c3:50:27:0b:
e9:ed:65:03:fc:80:4b:06:a7:ed:79:10:75:bb:a8:
ff:e6:a1:c6:13:c3:98:81:4c:1a:b2:3f:45:09:f0:
6f:20:ef:5c:d7:35:04:99:d5:08:04:00:aa:43:f6:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:14:F6:6A:6B:2B:ED:66:5F:46:05:ED:FA:8D:96:B4:15:E2:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D70050AA65011EF8AB49360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:69:65:76:26:59:70:ee:ef:27:d6:93:6a:14:22:24:f2:a7:
80:bd:28:08:9b:d5:3f:7c:26:e4:75:ba:64:15:a1:db:50:7d:
f7:63:e6:92:0b:5d:ca:9c:2e:eb:c3:95:3e:4c:fd:4f:ef:fd:
f4:28:6e:17:e4:26:f2:78:c3:6e:f3:b3:c0:a7:c6:c7:4f:5f:
1a:31:0d:ff:88:06:c3:84:55:de:73:5e:29:90:96:5e:ef:c1:
21:83:b2:2b:c3:c7:66:2c:9e:69:16:84:87:08:5a:99:fc:d3:
2c:27:35:d0:cc:a7:13:0f:c0:fa:60:23:c1:e7:05:4a:72:93:
c2:9c:38:c1:68:23:65:35:91:d7:ce:b5:c8:28:c0:01:e5:bc:
0a:17:16:59:4d:e2:8a:df:18:7b:55:4a:19:2e:9e:b2:e8:6e:
97:a2:19:63:54:d0:e0:a6:90:e0:34:47:d6:5e:76:7f:48:17:
eb:10:51:cb:23:58:a2:58:9e:3a:a9:e8:c6:a8:c7:5e:ee:c4:
58:5b:27:4e:2b:2f:19:b2:3d:80:3e:f9:84:04:c5:06:d7:5a:
1a:80:b6:ff:65:9a:89:92:66:9b:47:20:49:15:b1:ed:1b:01:
32:9e:20:6a:25:78:9e:9f:44:a1:11:c9:3d:48:95:0d:03:eb:
31:f1:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:18 2024 by rpki-client on console-fra.rpki-client.org