Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8590458A44D11EFB1FBC7B1762E951A.roa
File: A8590458A44D11EFB1FBC7B1762E951A.roa (raw, json)
Hash identifier: r/zf76M3ENKVDSP6O+/muH3sObz/rtmctw8C9/5W3BE=
Subject key identifier: 51:11:F5:55:50:96:08:AE:D5:25:D0:A7:36:DC:2A:18:4C:13:E3:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8590458A44D11EFB1FBC7B1762E951A.roa
Signing time: Sat 16 Nov 2024 19:04:52 +0000
ROA not before: Sat 16 Nov 2024 19:04:43 +0000
ROA not after: Mon 25 Nov 2024 19:04:43 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69125 (0x10e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:04:43 2024 GMT
Not After : Nov 25 19:04:43 2024 GMT
Subject: CN=6738ecd3-8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:1e:54:9d:8d:b5:3d:7a:f9:35:ae:fc:a8:
e4:6c:07:39:35:d7:16:cb:e4:80:de:88:7a:b1:b2:
1c:d8:df:5b:92:b3:ec:7d:09:7b:47:d3:ba:aa:02:
0c:2e:e6:52:e4:0b:67:bb:d4:ef:b8:87:2f:d6:00:
f5:62:20:b4:d2:64:58:e2:16:c5:e2:13:e9:39:ac:
ee:20:c6:27:ed:db:65:35:03:ed:25:9a:cf:fe:84:
dc:d1:1f:69:07:d9:46:df:2f:e6:c0:b3:43:48:68:
cd:f9:9c:ab:c7:9f:4b:08:1b:e5:91:5c:39:27:91:
48:b9:65:7b:ee:81:45:ef:55:c3:87:f5:b1:d1:8a:
2c:0d:49:1c:24:69:e1:50:6c:cd:61:c2:60:a0:e7:
af:ca:68:ef:cd:ff:18:80:0b:b7:ba:de:de:5f:bf:
6e:2c:2c:74:13:76:89:d9:6a:89:63:25:37:8f:07:
97:37:97:ac:3b:d9:ca:b4:b3:d1:a7:8a:ce:c2:d1:
6c:4f:50:79:23:d1:29:2e:ae:22:d0:af:91:aa:87:
6d:2f:21:33:55:be:9f:03:af:f5:fa:05:ae:9b:66:
cc:fb:db:02:6b:3c:9b:2e:c8:89:c7:fa:8b:56:05:
0f:31:fa:82:24:09:d8:61:8f:83:77:de:25:fc:cd:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:F5:55:50:96:08:AE:D5:25:D0:A7:36:DC:2A:18:4C:13:E3:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8590458A44D11EFB1FBC7B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/23
Signature Algorithm: sha256WithRSAEncryption
06:51:61:53:ff:ea:71:02:b2:c6:ff:ab:bc:12:04:cf:e8:5d:
32:02:95:32:eb:67:5a:b8:71:22:43:d8:9f:d1:8f:45:78:64:
99:7f:63:9b:f4:16:10:3f:5f:9f:96:ee:76:8d:59:97:53:e2:
d3:44:7f:8b:4f:ef:46:fd:fb:f9:f4:ed:84:33:e7:1a:4e:ea:
e8:e5:79:b0:81:1e:02:bc:ed:ba:48:4b:ef:1e:b8:e7:f4:46:
f7:fd:b8:78:66:4f:7d:f2:07:3d:6c:35:61:18:47:f1:93:78:
34:5f:0f:d7:c2:43:74:95:77:ef:d3:ab:92:fe:3c:d9:8e:2b:
d2:f0:b9:e0:ed:94:27:d1:1e:1e:12:8e:ba:87:4d:6a:76:59:
ff:a7:73:fa:86:88:6f:a8:35:0b:d6:b1:aa:50:f1:90:d1:a8:
54:ae:96:4e:e3:37:f8:f0:98:74:31:85:83:9d:29:05:29:31:
c7:0a:86:ca:6f:0e:32:0d:28:df:b9:2b:d6:68:52:60:9b:ff:
5e:98:0c:1f:1a:cb:ba:61:e2:eb:9c:88:89:de:d5:a6:27:db:
ed:b4:43:4c:d3:1c:ce:76:92:20:31:7d:cc:be:b1:95:5f:57:
c8:4f:e3:66:8c:34:7f:be:0a:b7:d4:f6:b8:3e:63:be:f3:44:
91:9a:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:00 2024 by rpki-client on console-fra.rpki-client.org