Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E90C0C8A92011EFA2B73E86762E951A.roa
File: 9E90C0C8A92011EFA2B73E86762E951A.roa (raw, json)
Hash identifier: 5muv9nUbRCCri6ToDBSKjSMrwg1ZHXqjP/dZtyzwoio=
Subject key identifier: 51:7B:AB:45:1D:E3:FD:BB:24:8A:BE:3E:A5:29:CA:F7:B5:AF:FA:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011161
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E90C0C8A92011EFA2B73E86762E951A.roa
Signing time: Fri 22 Nov 2024 22:25:04 +0000
ROA not before: Fri 22 Nov 2024 22:25:00 +0000
ROA not after: Tue 03 Dec 2024 22:25:00 +0000
asID: 62240
IP address blocks: 154.195.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69985 (0x11161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:25:00 2024 GMT
Not After : Dec 3 22:25:00 2024 GMT
Subject: CN=674104bf-4aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:21:f7:17:37:ed:59:f9:45:02:c5:22:36:
93:c5:9a:91:86:8f:5e:6d:aa:b7:25:e3:fb:f1:95:
03:dc:65:b5:97:48:ff:09:1a:2b:fc:c4:db:cd:6d:
32:5f:24:c3:84:8f:68:a6:45:73:e2:a6:ac:e6:1b:
7c:ca:2f:15:82:02:61:7c:70:89:44:86:5b:27:bd:
08:2a:4f:b4:6f:d8:2b:52:50:f0:62:01:70:70:95:
3c:99:14:e4:7a:80:0a:70:d9:aa:07:48:66:d8:38:
4a:55:7c:4d:ab:3b:c1:df:ff:d7:26:a9:fd:f9:7c:
ab:6d:f5:71:15:e4:90:e1:14:a1:39:fc:76:ed:03:
02:b3:59:8d:93:5a:b9:b5:e1:db:95:56:7f:32:a4:
19:9d:31:13:95:31:f2:c8:a7:6f:0b:c1:16:a5:8c:
45:11:6e:bf:32:39:9d:df:c0:99:f5:c5:0c:09:e1:
14:4d:e6:ed:01:a4:e3:dd:97:97:d1:b9:b3:d3:48:
11:e6:42:59:b0:10:fc:cb:92:d4:12:aa:0d:66:00:
3c:a8:08:e8:f3:df:43:ac:6c:d3:da:dd:6c:86:ec:
6e:bc:75:39:b8:5f:db:1f:f2:11:40:e6:6b:a6:8f:
be:63:6d:19:7d:56:1d:89:dd:43:89:0b:6f:22:b8:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:AB:45:1D:E3:FD:BB:24:8A:BE:3E:A5:29:CA:F7:B5:AF:FA:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E90C0C8A92011EFA2B73E86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/19
Signature Algorithm: sha256WithRSAEncryption
70:d5:e7:2b:d8:6b:19:04:be:bb:37:c1:17:a8:1f:dc:74:92:
be:36:37:f5:28:cd:a7:35:ce:ad:2c:c3:b7:ab:5f:8e:8f:1a:
ca:3c:37:79:ce:1d:ae:8f:2c:75:ee:d5:27:b2:df:80:39:d3:
c7:36:11:8d:98:5d:93:be:09:8e:2a:59:5f:48:b4:d6:f5:fc:
81:46:2c:f1:de:90:3d:09:c8:1a:69:a0:47:70:fe:1f:09:1a:
b3:40:17:59:b7:84:c7:ed:e4:f2:97:c0:a5:b7:0a:93:43:3a:
7f:85:f7:cd:6a:c3:c5:fc:6b:2b:4e:8c:94:b2:7a:cc:7d:c0:
ef:d2:e3:47:21:34:8a:43:1d:c3:54:1d:25:fc:9f:01:69:dc:
5d:32:a6:0e:60:5c:ae:30:6f:c6:d7:bc:7f:b2:e4:e2:e7:16:
cb:92:b8:9d:8c:45:03:f8:ab:ef:8d:8f:13:f0:d9:30:3c:ba:
50:8d:05:5d:b0:9f:23:eb:a9:d1:4e:b3:b2:56:70:4c:14:08:
e2:b6:c2:2e:e2:66:63:f9:04:e6:bd:56:b1:87:64:d4:50:cb:
c5:b1:6f:59:00:ac:fe:e7:95:99:ca:10:41:8b:76:e1:86:d7:
aa:6b:5a:7c:8b:3c:e6:43:59:e4:7a:13:bb:83:73:f7:f0:ea:
5f:56:22:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:38 2024 by rpki-client on console-fra.rpki-client.org