Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A62F86AD5B11EF935F4ABB762E951A.roa
File: C2A62F86AD5B11EF935F4ABB762E951A.roa (raw, json)
Hash identifier: 2jxl2pKlgFl8Ut4nxLQCKY0LclSZsEKLPi8ESqAekBE=
Subject key identifier: 6F:9A:CF:A6:D2:C1:20:91:E3:C9:FF:00:1D:E3:7D:48:2B:A9:94:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A62F86AD5B11EF935F4ABB762E951A.roa
Signing time: Thu 28 Nov 2024 07:38:29 +0000
ROA not before: Thu 28 Nov 2024 07:38:25 +0000
ROA not after: Tue 11 Feb 2025 07:38:25 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70887 (0x114e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:38:25 2024 GMT
Not After : Feb 11 07:38:25 2025 GMT
Subject: CN=67481df5-9579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:03:6b:06:ff:02:6c:ed:ec:3f:81:c3:70:
4e:33:ac:e8:03:79:55:e8:4e:ea:a7:f9:58:d1:03:
82:29:03:e8:ab:96:a3:76:66:e2:33:1c:0b:f7:fa:
a7:89:09:f0:c9:c7:50:16:ac:84:8e:5e:6a:a8:df:
51:1a:84:57:03:9e:d9:58:63:93:d2:8c:93:b8:5c:
63:07:9f:91:59:29:2b:4c:21:32:ec:34:51:8c:3b:
37:cf:a7:e3:0a:d8:3c:9c:63:6a:08:dc:da:35:7c:
e4:e5:c6:36:96:4e:66:53:f8:89:79:29:f0:c1:60:
1d:75:21:42:43:1f:76:4f:a8:c0:a6:6c:64:f3:6b:
52:6b:78:0d:f7:d5:ce:97:d5:4e:c6:8c:d7:7f:53:
f6:04:09:39:fb:90:14:cb:9d:21:df:1a:4e:30:c2:
31:8f:98:2f:88:32:b0:36:a6:da:73:14:92:71:c7:
e8:51:5c:d9:d9:24:ae:05:0a:7c:fe:8f:6f:73:f4:
b5:d2:93:c0:db:33:c3:d4:41:9a:5b:c0:0d:b6:84:
3d:36:5e:78:e1:42:c4:3c:2d:ca:9d:dd:c2:02:2b:
73:c9:04:9a:a0:fd:9c:ef:ed:ab:1d:04:5f:a5:df:
0e:f3:3b:8e:1b:0d:40:7a:34:e9:68:cf:4c:ab:55:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:CF:A6:D2:C1:20:91:E3:C9:FF:00:1D:E3:7D:48:2B:A9:94:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A62F86AD5B11EF935F4ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/23
Signature Algorithm: sha256WithRSAEncryption
54:34:37:d5:29:c0:77:80:2a:bc:e4:4d:39:a6:77:e2:cc:5a:
ec:65:83:bc:9f:2d:37:35:54:58:cc:ab:cf:12:6c:63:e1:70:
51:0c:94:f1:d2:b8:7c:af:88:54:7f:f3:47:9e:4f:54:dc:3c:
7e:28:32:0a:52:f8:3c:95:dc:4f:06:e8:01:5f:ae:66:83:d0:
0d:50:77:a8:d7:38:99:74:8d:9c:94:ba:9a:8e:1f:11:ad:2b:
72:5b:e6:14:a3:13:e9:37:29:81:44:31:8d:7a:e2:7c:99:f5:
27:36:3a:33:d9:59:89:c1:9a:be:05:ca:53:78:0d:6a:6f:af:
e1:ec:93:e3:15:76:01:d8:59:c6:d4:a8:64:b8:45:80:8b:32:
44:c1:e5:bc:6c:6b:69:42:1d:ed:ce:8f:37:3e:d3:64:7a:14:
55:7a:18:91:37:20:dd:45:4d:da:6a:26:20:fb:09:40:05:47:
75:c1:08:ae:5b:00:a9:24:56:f4:ec:07:3f:36:28:a9:90:f9:
6e:09:90:e7:37:d0:d7:14:1d:b8:c2:d4:31:82:9d:8b:28:39:
76:83:25:9a:03:58:f7:b6:53:df:7d:f0:e4:2a:cc:ce:9d:79:
69:a7:12:cc:91:72:4c:40:8e:73:32:09:a7:83:0f:ac:4f:8f:
2d:fc:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 14:46:52 2024 by rpki-client on console-fra.rpki-client.org