Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD31ED40976511EF8A644CBF762E951A.roa
File: AD31ED40976511EF8A644CBF762E951A.roa (raw, json)
Hash identifier: okN644OJG2RyWBehsyjI0M9Mb88fgZLSRuqx+ISsDHc=
Subject key identifier: 0C:F7:9E:94:B1:27:F8:DE:C4:5F:D7:0B:70:44:AB:BD:10:BF:ED:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01047A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD31ED40976511EF8A644CBF762E951A.roa
Signing time: Thu 31 Oct 2024 08:54:02 +0000
ROA not before: Thu 31 Oct 2024 08:53:59 +0000
ROA not after: Sun 01 Dec 2024 08:53:59 +0000
asID: 398823
IP address blocks: 154.209.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66682 (0x1047a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 08:53:59 2024 GMT
Not After : Dec 1 08:53:59 2024 GMT
Subject: CN=672345aa-c616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:19:95:fc:e1:d1:0a:b3:32:04:65:b3:b0:
94:15:f4:66:73:8c:74:d9:30:d8:09:43:d1:42:7f:
46:a7:36:2e:52:df:d9:3a:75:68:9d:e1:1c:2e:27:
6d:2d:f7:44:47:ab:29:12:de:48:f2:0b:aa:f0:c5:
89:69:2e:0c:b5:4b:2e:bf:46:6f:00:e5:19:7d:c3:
1b:01:bd:67:20:24:ce:3d:d6:6b:bd:e8:89:5a:8a:
4d:ea:30:ba:ee:5f:46:14:d7:be:fa:34:82:3f:17:
49:72:19:c1:b0:ed:ad:da:af:f6:c7:b6:43:4a:83:
76:33:d3:56:b5:9f:3b:a2:2f:5a:02:17:13:3e:9f:
86:18:5e:06:e2:41:23:16:90:a4:7e:db:8c:b5:71:
7d:88:8c:4c:f5:68:ef:b6:d3:45:db:15:08:fd:d4:
98:44:16:9e:b0:19:54:ab:97:36:84:b4:82:eb:96:
fd:52:73:f2:2f:dd:dc:73:bd:7e:be:e7:03:f8:b6:
4e:12:79:ca:36:0f:27:56:9a:7e:36:7b:18:86:f9:
33:2c:c5:a8:70:60:5b:4f:ae:06:98:21:c4:45:e3:
9c:65:91:e9:5e:a4:6c:df:4a:07:41:af:72:6b:ee:
64:1f:18:1e:69:1b:81:76:53:3c:d9:6f:53:9f:2f:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:9E:94:B1:27:F8:DE:C4:5F:D7:0B:70:44:AB:BD:10:BF:ED:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD31ED40976511EF8A644CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
38:d5:22:b8:32:07:a1:08:ae:18:df:e2:3e:a0:05:01:0f:e9:
1b:70:ed:97:b3:a8:09:60:ca:28:df:a6:2b:80:21:29:e1:b7:
c2:a3:18:90:0c:bf:ad:e1:c8:35:4e:83:c3:86:c1:3c:45:11:
79:c5:87:1d:6f:c4:65:1f:fe:8a:21:82:2b:fd:93:1c:a6:34:
d9:fe:a6:d5:71:92:8e:06:e0:33:21:51:99:ef:d2:2d:cc:87:
59:c1:60:ee:03:f5:f5:e3:a0:74:dc:d8:30:4c:6a:d4:c1:59:
10:dd:cc:c7:8c:1d:11:9b:12:76:4a:b7:f6:2b:54:a5:ab:c6:
e7:5c:9b:4f:d0:4c:b9:98:85:65:c6:d4:c4:a0:e7:33:a7:c2:
db:ea:1b:1f:fb:97:0b:c0:f1:14:d5:f7:8b:88:ab:29:1a:7c:
1a:d5:3e:b4:a5:a3:88:c2:81:de:ff:ab:ad:96:c3:38:c4:dd:
a5:b0:9e:dc:dd:8e:16:e9:11:3c:d8:32:ed:d9:27:b6:b3:78:
45:ed:45:60:46:83:20:58:1f:b5:0b:61:15:14:2b:7b:98:6a:
e1:49:55:7e:dd:11:31:ff:c6:6d:11:3c:c3:f6:50:11:5a:58:
82:4e:82:db:2f:28:67:7c:74:12:45:7e:2c:38:3c:3b:e7:6d:
02:eb:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:50:41 2024 by rpki-client on console-fra.rpki-client.org