Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B881768632B911EF976319A4762E951A.roa
File: B881768632B911EF976319A4762E951A.roa (raw, json)
Hash identifier: 5GuQjuD28npovv9/JJRCwiELxyiQmD3+ftTZg0JO664=
Subject key identifier: C9:A1:6A:5E:80:03:82:F8:FA:FA:3A:DF:2D:37:EA:63:61:C9:64:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C643
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B881768632B911EF976319A4762E951A.roa
Signing time: Tue 25 Jun 2024 06:11:12 +0000
ROA not before: Tue 25 Jun 2024 06:11:09 +0000
ROA not after: Fri 03 Jan 2025 06:11:09 +0000
asID: 40065
IP address blocks: 154.88.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50755 (0xc643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:11:09 2024 GMT
Not After : Jan 3 06:11:09 2025 GMT
Subject: CN=667a5f80-828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:1b:53:bc:99:d1:ed:6f:83:3b:b1:82:00:
ed:74:08:24:93:78:13:23:9e:54:c5:7a:c7:b0:32:
66:fa:00:c7:bc:5f:b0:0d:f7:44:5c:34:da:ad:3b:
d9:ac:59:7e:19:65:11:93:87:fe:a2:eb:ca:b3:1b:
18:ab:4b:79:e1:82:3e:85:c0:52:12:2b:4a:2f:1a:
cd:f5:b9:5c:8b:45:3a:5e:f9:fd:12:59:ec:a3:1d:
fe:ba:83:4c:4b:ae:26:3e:2a:fb:35:49:8a:d0:d1:
b1:a4:c0:e3:25:08:84:c9:13:73:7f:9c:d6:62:38:
64:65:99:84:e4:21:5f:0b:ff:e9:6e:e2:15:55:d7:
cd:2b:f0:e4:a5:f3:5f:69:c8:85:ac:66:e1:4a:61:
c4:f2:fc:0d:1a:3c:43:77:9f:c7:08:9e:8e:5d:27:
cc:26:d2:0a:19:fc:58:cf:8f:51:9b:fa:bf:ba:aa:
5d:8e:6f:a9:e6:f6:4e:8e:2f:9b:17:47:cc:57:c8:
71:d4:3b:8e:45:52:8e:6b:1d:ed:a6:e0:08:74:23:
90:35:bf:28:ba:61:bb:ef:53:eb:13:e6:52:f4:6c:
5c:6e:76:22:78:cd:06:74:6b:5f:ad:7e:0e:55:ee:
4a:bd:00:32:74:d0:85:96:03:5c:0c:83:78:94:d9:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:6A:5E:80:03:82:F8:FA:FA:3A:DF:2D:37:EA:63:61:C9:64:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B881768632B911EF976319A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.24.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:5e:18:e2:6b:52:bb:56:5c:f6:35:e6:4f:85:cf:0e:3f:c1:
aa:bb:c0:ef:73:ca:71:e8:9b:5c:d3:75:d7:b8:37:0e:fb:6d:
54:15:6d:4c:77:46:52:3c:d5:9d:ae:63:4e:f4:9a:94:c3:77:
ca:eb:7a:c9:48:20:d8:18:f1:1c:eb:41:50:b3:11:59:96:6d:
fd:65:ea:4a:a0:f6:81:4a:c9:12:54:5a:05:40:f8:0e:9d:48:
11:57:ed:bd:75:35:f4:57:35:7d:07:4d:3b:ae:a4:64:bb:85:
4a:64:da:cf:ba:17:82:31:bb:41:d8:82:dd:56:3a:6b:9b:0a:
7d:d1:e0:4a:58:ea:9e:d3:00:eb:27:f7:95:0e:46:61:32:50:
be:92:99:9b:b1:6a:38:15:f4:d5:f5:47:82:24:5d:f7:4a:64:
8e:12:43:07:7e:cc:1c:b2:b1:ad:a2:79:3b:21:95:cd:1f:6d:
41:86:86:e5:16:9b:1f:c2:4f:3a:0f:40:7e:f2:f5:ab:78:f4:
11:91:d4:ea:0b:c8:e0:29:0a:3e:a2:89:95:aa:3c:33:63:90:
e3:c1:97:c8:e8:1f:ec:ba:69:7c:13:8b:b8:32:33:2f:ac:44:
cf:ce:21:8d:f8:bf:72:24:e3:70:e6:c2:4b:c9:24:99:4b:68:
93:da:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:43 2024 by rpki-client on console-fra.rpki-client.org