Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18729C4983011EF9B2661BD762E951A.roa
File: C18729C4983011EF9B2661BD762E951A.roa (raw, json)
Hash identifier: An6MBCPYUZFA/+GNTGlzt4+e0cbtN8Vcqe6kvQn6g+0=
Subject key identifier: 2F:D3:6B:C4:94:AF:58:E8:39:BF:2A:1C:93:2F:74:8F:6F:DF:0A:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18729C4983011EF9B2661BD762E951A.roa
Signing time: Fri 01 Nov 2024 09:07:44 +0000
ROA not before: Fri 01 Nov 2024 09:07:41 +0000
ROA not after: Mon 13 Jan 2025 09:07:41 +0000
asID: 135377
IP address blocks: 154.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66729 (0x104a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:07:41 2024 GMT
Not After : Jan 13 09:07:41 2025 GMT
Subject: CN=67249a60-e292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:eb:64:b4:82:d4:cf:ce:15:69:33:55:f2:
28:c9:ee:eb:a7:b0:4a:10:cc:bb:25:c3:26:19:c6:
af:44:8f:22:49:35:a4:63:ee:72:f7:da:9d:8d:3d:
fd:b3:93:ff:98:4b:45:09:eb:50:99:b9:29:31:13:
ea:0d:d8:1e:5e:11:14:e7:55:e0:ea:ec:13:c5:8f:
06:2b:38:7d:00:aa:fc:f5:7a:42:5f:5f:c0:e4:0a:
5a:b4:31:f4:30:c3:a9:15:e2:1a:8e:fe:0e:d5:fe:
a5:04:dd:3b:19:a4:1e:f7:62:40:65:2c:0f:1b:7c:
9c:9d:08:fa:e4:41:a9:17:8b:c0:85:8b:b8:a1:4c:
6e:ec:d0:df:ae:c4:b3:06:55:86:fc:24:c9:a6:3a:
80:8b:9a:41:bc:7c:ca:b7:a5:0b:fa:2e:98:c2:a4:
0a:79:0c:a7:9d:e8:05:95:9d:b8:58:50:d3:a8:45:
18:4d:37:f8:88:b0:4e:3f:85:0a:0f:56:7b:ba:1e:
f5:20:08:4f:77:d1:48:29:10:a4:46:dd:3b:3e:66:
d1:b1:87:4e:f0:9f:df:60:e6:39:f7:d5:c4:f1:13:
56:3d:0a:70:5e:7a:25:2b:14:a0:7a:29:41:20:55:
fa:e7:0d:fb:b2:76:5f:fa:d1:8c:21:5f:b1:d3:80:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:6B:C4:94:AF:58:E8:39:BF:2A:1C:93:2F:74:8F:6F:DF:0A:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18729C4983011EF9B2661BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:d1:10:94:73:05:99:ee:cb:49:b5:26:43:3d:e5:18:0e:7b:
79:4e:08:bc:fe:dd:5c:e0:a3:bb:b7:09:2e:f1:da:53:c6:d9:
b9:d9:ff:c7:36:fd:0b:3b:8b:83:ff:a5:d3:84:5b:8b:48:bf:
ca:dd:73:99:57:c7:a6:5e:aa:e7:5a:1b:37:f4:d6:65:f3:54:
34:b5:a0:54:b3:64:a5:9f:14:2d:f7:c4:d4:4c:9e:c7:24:a9:
82:e0:e9:65:61:4b:cd:93:e8:c8:0a:6b:02:43:59:12:24:5d:
b1:e8:0f:ac:41:ee:36:b5:a7:75:3f:60:e0:e8:ec:3b:46:d3:
b0:79:62:12:23:f6:89:17:1d:43:43:0a:ee:55:08:0c:72:ff:
a2:94:69:fb:4b:7f:ac:b1:37:8b:6a:7a:9e:8f:33:82:89:1d:
0a:22:11:98:79:2c:90:86:66:cf:7e:13:84:1d:cb:86:7c:d0:
18:5b:a0:f2:66:b3:fd:a1:dc:f1:62:a2:50:96:81:cc:28:f4:
f8:14:d8:9d:ad:af:fb:1b:35:a8:8a:91:00:47:b4:dd:fc:73:
70:66:b1:a7:16:b8:8f:3b:b0:50:94:97:0f:72:05:2a:45:8f:
4a:1f:b9:f6:59:5a:49:eb:fb:5f:c5:ff:05:b2:52:ed:6a:03:
aa:12:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org