Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F38C3289B7811EFB863F070762E951A.roa
File: 9F38C3289B7811EFB863F070762E951A.roa (raw, json)
Hash identifier: lwHghbnfL+4m10WLaoDHuXauYSdvK6uwcPtXKqS0H+w=
Subject key identifier: CD:29:60:4D:FA:B9:54:DC:83:F2:BA:EE:47:68:B3:61:9C:71:FF:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F38C3289B7811EFB863F070762E951A.roa
Signing time: Tue 05 Nov 2024 13:19:44 +0000
ROA not before: Tue 05 Nov 2024 13:19:40 +0000
ROA not after: Mon 13 Jan 2025 13:19:40 +0000
asID: 5065
IP address blocks: 154.212.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67549 (0x107dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 13:19:40 2024 GMT
Not After : Jan 13 13:19:40 2025 GMT
Subject: CN=672a1b70-c1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:52:19:ac:8b:57:aa:ed:d0:f6:43:1a:b7:
ab:b7:79:ad:9c:81:0d:46:a5:61:34:2b:e5:5c:81:
db:d2:75:a6:ec:f0:45:9d:8e:d7:c2:29:c4:44:c9:
73:7c:2b:bc:1f:88:77:e0:e2:1e:a9:54:fe:a9:92:
7a:16:c3:85:d8:0b:6c:49:e3:ef:96:52:07:d3:46:
26:a3:2c:d0:1d:83:ae:f0:0c:0a:76:03:0f:76:58:
a2:64:4f:92:62:53:2e:b2:7f:3b:9e:6f:f9:55:0e:
96:c5:35:c6:47:34:2b:5a:44:c3:3a:6b:4d:fe:2a:
91:fa:1d:98:70:0a:07:8c:ba:89:cb:10:17:38:9b:
1a:ed:2a:67:97:87:40:c6:eb:33:72:4f:98:e3:3c:
bb:0c:cb:cb:2a:be:21:82:0c:9a:3a:55:7d:da:cd:
1b:36:4e:fe:6d:33:9e:08:79:18:b4:ea:10:8e:cc:
81:f7:a4:af:e2:61:c0:ef:01:2c:bd:91:7e:9a:1c:
59:32:78:13:42:6f:d3:a7:a3:79:70:1e:40:e3:b3:
2b:c4:ac:52:65:7c:4e:ff:53:5c:97:87:05:a8:01:
7e:23:fb:4f:77:04:47:e6:35:81:72:9f:f3:89:6a:
c4:5e:5a:a3:cd:86:98:fb:08:96:40:0e:a4:b5:93:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:60:4D:FA:B9:54:DC:83:F2:BA:EE:47:68:B3:61:9C:71:FF:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F38C3289B7811EFB863F070762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.20.0/22
Signature Algorithm: sha256WithRSAEncryption
17:59:91:af:89:25:e7:3e:bb:4c:07:bb:6e:6b:53:8b:ed:a2:
35:29:ff:f8:de:70:23:e5:15:86:65:c9:26:61:83:e6:37:e9:
7a:4d:36:42:05:db:63:29:a7:76:ac:a8:ef:ff:f5:e2:a8:cd:
57:fe:bb:ec:b0:83:15:7d:6b:02:5b:03:ec:ef:69:a0:32:2f:
6e:61:d8:a0:9d:42:bd:c8:d0:73:46:e3:5c:fa:85:9f:dd:d2:
c3:a4:e6:e6:1b:c4:b3:37:fc:80:eb:64:2b:d5:e7:30:d6:d0:
6a:60:0f:b8:50:ba:8d:56:f8:f6:6a:dd:dd:f7:4f:7e:5d:4b:
a0:be:7c:b3:b3:e5:7e:b8:37:69:90:b7:da:12:63:34:a2:6c:
46:7b:b2:f0:b7:0e:d3:37:9b:8e:b8:4b:54:dd:cc:2a:f6:4d:
53:6d:d5:35:24:ec:ee:8d:81:e1:98:73:25:aa:28:03:fe:ea:
79:ef:85:2d:bf:9e:4a:52:2f:97:4b:b4:53:e3:a1:b1:a0:42:
75:d3:08:46:d4:a2:cc:4f:b1:f8:df:ac:61:fd:b5:b4:2c:f1:
58:fa:9f:44:b4:06:31:42:65:02:5e:07:3d:8a:ab:66:56:88:
36:a6:ec:2f:ac:2c:45:aa:ce:b6:82:1f:38:08:34:29:3d:43:
a2:8e:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:59 2024 by rpki-client on console-fra.rpki-client.org