Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C7F1C49B8211EFAEA42DB0762E951A.roa
File: B3C7F1C49B8211EFAEA42DB0762E951A.roa (raw, json)
Hash identifier: vMmvqQzPNeW2EL7Z/9QuId1gm+JQe2EHsVtj6OsZbHI=
Subject key identifier: 9D:2B:05:95:46:CB:1A:76:72:4F:A6:A4:BB:85:B2:A2:39:DE:E9:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C7F1C49B8211EFAEA42DB0762E951A.roa
Signing time: Tue 05 Nov 2024 14:31:54 +0000
ROA not before: Tue 05 Nov 2024 14:31:45 +0000
ROA not after: Mon 20 Jan 2025 14:31:45 +0000
asID: 135097
IP address blocks: 154.220.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67577 (0x107f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:31:45 2024 GMT
Not After : Jan 20 14:31:45 2025 GMT
Subject: CN=672a2c5a-8a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:69:fe:ec:1e:30:e2:5d:28:24:ca:8d:bc:
87:cc:e7:07:35:0c:c2:64:aa:57:dd:f5:b5:60:8f:
78:55:8d:52:df:c5:43:24:de:37:17:ab:08:22:26:
4a:cc:0b:05:d1:84:09:25:c7:ba:85:5d:fb:95:b8:
03:1f:44:3a:e3:06:12:86:22:82:79:37:9d:e7:d8:
8a:5b:4e:59:ee:47:76:a2:e4:6e:0b:cd:12:83:77:
fe:6b:0f:5c:be:ea:f1:96:74:15:b8:f1:b4:10:5f:
06:40:50:1e:90:c1:c3:27:53:84:9a:d2:db:91:72:
53:3e:8f:14:5a:d4:36:0e:d4:bf:5e:0e:57:d2:75:
4d:1b:4a:e7:5e:51:e9:76:96:ae:ab:d5:9f:69:4f:
74:39:a5:ec:7f:31:e3:3e:83:f9:1e:8f:a9:cb:5f:
91:15:5c:3c:59:be:9a:28:1a:d8:5e:ae:06:b7:4a:
46:bd:ab:2f:ae:2c:78:33:b9:78:ee:19:5f:04:c6:
47:0d:53:2c:60:f1:3c:d2:ae:39:63:9a:78:2e:a2:
69:53:9b:59:fe:b6:82:e1:01:76:56:ad:45:11:03:
ce:78:2e:36:72:4b:b7:9d:e2:34:55:be:11:d4:d3:
8a:77:7b:60:59:e9:49:d0:24:09:1d:6b:8a:a8:4a:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:05:95:46:CB:1A:76:72:4F:A6:A4:BB:85:B2:A2:39:DE:E9:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C7F1C49B8211EFAEA42DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:71:76:22:76:ad:a0:16:28:d6:d0:dc:ec:b7:86:0e:26:7a:
7c:e0:a6:3b:c9:ac:1b:2f:8f:3f:b6:fa:6e:ff:62:6e:73:ad:
f6:8d:7c:4d:2e:3d:6f:97:35:0c:7c:d0:61:1f:dd:58:4a:9f:
09:bd:9d:61:82:1c:f5:a7:7d:8c:7d:fb:aa:90:21:37:2b:bb:
5c:98:13:7a:59:0b:db:a5:79:cc:88:ae:65:8b:2c:09:42:42:
20:61:88:2d:30:13:7b:77:0f:8a:75:e8:70:8b:25:13:59:0b:
44:20:29:7b:3c:3a:83:ee:db:fb:4b:d6:ee:ea:4a:8f:66:a6:
23:5d:79:e6:02:cc:79:fc:2b:db:cd:a6:7a:92:ed:7a:3e:34:
a4:05:a4:23:72:c1:62:dc:d5:6a:73:09:27:f1:80:40:34:02:
34:1f:16:1d:11:b9:9f:cc:04:5e:43:73:e8:dc:98:ad:98:6b:
bb:b8:7b:ac:e9:80:1a:c9:83:99:78:d8:69:13:8b:2b:ee:48:
d7:19:3b:ec:05:9a:d4:51:89:c7:ca:6d:c8:26:65:9d:d0:5e:
dd:30:9f:78:f6:f5:25:78:d6:64:b4:66:5c:95:df:3c:3d:e6:
61:82:1b:15:cc:96:94:73:f9:0b:bd:7d:d7:ed:77:dd:31:68:
a7:0c:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org