Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0199AEAA4C511EFA5E897AF762E951A.roa
File: B0199AEAA4C511EFA5E897AF762E951A.roa (raw, json)
Hash identifier: iPlQyLJay0HS8HHKnfw9eDp8tmX463Lc2/nBflLL2ZU=
Subject key identifier: 0A:6B:45:31:E7:C3:5E:E9:75:50:9E:21:97:9B:38:DA:52:D0:23:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0199AEAA4C511EFA5E897AF762E951A.roa
Signing time: Sun 17 Nov 2024 09:24:04 +0000
ROA not before: Sun 17 Nov 2024 09:24:01 +0000
ROA not after: Sun 24 Nov 2024 09:24:01 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69250 (0x10e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:24:01 2024 GMT
Not After : Nov 24 09:24:01 2024 GMT
Subject: CN=6739b634-3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:dd:16:86:4e:d8:65:9c:1c:27:cb:c5:33:
52:c9:42:54:44:a5:81:01:3e:fe:90:fe:4c:3f:71:
bc:9b:a2:74:31:b4:4b:2c:46:7e:12:dd:ed:6c:12:
9a:ed:ab:2b:8f:ba:ed:2f:91:41:b9:45:a1:b2:1b:
57:99:2d:53:ca:8a:99:c1:c2:67:3b:d2:d6:0d:cb:
69:c5:47:8e:78:aa:18:71:c2:4c:55:20:81:df:36:
f8:ee:5a:d8:ef:03:c6:b8:f3:e9:5f:87:0b:0f:44:
97:6c:b7:f1:3a:c7:e2:24:8b:fb:9f:a0:42:f4:59:
85:f3:f0:5a:0f:ea:36:30:6f:e3:5b:a9:77:28:94:
a3:dc:aa:2b:3b:98:37:aa:94:7f:71:cf:54:38:c5:
a5:c8:4c:f6:71:3b:fd:3a:39:30:1f:67:8f:51:2d:
96:8a:a2:fd:80:f2:1b:8d:e6:64:71:e7:8a:50:fe:
85:a1:cd:e3:f7:c1:c4:c4:ca:f9:85:e7:44:e3:e6:
1b:e7:7e:5c:0c:a0:df:c5:22:b3:1d:9b:d1:75:d5:
5f:0e:83:ce:27:8e:8e:d6:61:41:61:5f:12:a0:2c:
ee:e8:88:a4:fe:56:c0:4d:83:05:a7:65:dd:57:eb:
2e:18:82:98:b5:bc:17:22:af:60:2b:10:93:32:af:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:45:31:E7:C3:5E:E9:75:50:9E:21:97:9B:38:DA:52:D0:23:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0199AEAA4C511EFA5E897AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c4:09:7b:84:f5:0e:3f:f9:ba:e9:d8:3c:a6:ab:db:5d:53:36:
b9:fa:5c:bc:2d:1d:a4:c5:3c:5c:6d:e1:4a:23:5b:59:0b:db:
c4:aa:ed:fc:f5:f1:c4:ae:93:20:3e:c5:41:ff:38:44:d5:46:
93:b0:1f:c1:ea:c8:8c:9b:53:2b:c1:c0:37:e9:af:4b:1e:35:
ac:9b:23:9f:1e:ce:80:12:12:20:e7:11:68:a9:8c:d5:ad:66:
cb:c4:ee:db:56:da:82:41:cc:6b:78:85:7f:9c:18:c5:32:a9:
8a:09:51:36:f5:c5:32:53:8e:fa:2e:90:6d:cc:f6:0b:1f:06:
86:53:42:92:e8:21:bc:68:e6:e2:05:fd:ba:e6:ec:87:03:e7:
a3:3d:cc:b8:3f:bf:79:e5:72:90:0b:5a:be:5c:44:50:de:04:
5c:23:5b:99:fb:f3:01:5e:6f:91:b0:b6:4d:82:3b:11:6b:5c:
e1:de:c1:fb:66:ae:9c:97:2e:ce:96:4e:86:89:9d:76:88:39:
26:1f:3f:fd:22:e5:db:99:d8:a2:d3:0f:5e:e9:f1:bc:7a:b4:
f6:42:13:d0:4a:6b:5b:e6:d0:79:04:63:78:ea:66:e1:93:0b:
b1:be:6b:1c:2b:53:ee:8a:8d:93:f9:dd:aa:fa:a3:f6:10:f1:
d5:74:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:38:23 2024 by rpki-client on console-fra.rpki-client.org