Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C446C704AD5D11EF8E05CC49762E951A.roa
File: C446C704AD5D11EF8E05CC49762E951A.roa (raw, json)
Hash identifier: 1VitU0cFRfLreaK5sDmoRI3tJXZrBE3jiBNWDNzYlO8=
Subject key identifier: 17:0B:B9:36:95:FE:B0:FE:73:5E:86:F5:35:61:2D:06:7E:65:06:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C446C704AD5D11EF8E05CC49762E951A.roa
Signing time: Thu 28 Nov 2024 07:52:51 +0000
ROA not before: Thu 28 Nov 2024 07:52:47 +0000
ROA not after: Tue 11 Feb 2025 07:52:47 +0000
asID: 9009
IP address blocks: 154.95.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Jan 2025 00:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70901 (0x114f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:52:47 2024 GMT
Not After : Feb 11 07:52:47 2025 GMT
Subject: CN=67482153-8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:d5:a9:79:71:53:29:1d:0a:1b:c2:c3:57:
14:ff:20:8e:f4:70:af:eb:5d:24:49:41:7e:f0:14:
98:f8:19:dc:4d:7b:e3:51:9a:6d:3e:6f:83:54:09:
6e:2f:8b:e1:56:ba:6a:d1:31:58:e5:b5:67:ad:48:
b9:ac:63:6a:d7:cc:d1:99:e5:f5:8c:08:48:2d:91:
34:6e:53:e8:26:eb:5f:15:26:dc:53:8e:09:84:f9:
4d:13:d8:f9:c7:7f:0c:2a:85:1c:09:19:fa:32:f2:
66:9e:97:f1:65:27:11:1b:3f:de:ef:fb:2f:6d:1e:
ed:19:fb:0e:56:8a:88:15:a7:52:75:c1:4f:57:66:
0a:bf:dd:2b:5c:32:a9:94:95:b6:a1:4b:8e:b8:64:
48:07:82:c7:85:dd:4c:e6:15:c8:eb:d8:0f:f4:1c:
e6:e7:56:ae:66:ae:a4:51:69:a4:89:2f:a2:2d:70:
f5:86:fb:8d:e0:9b:4f:a7:c9:35:1e:6e:14:13:09:
a2:36:c3:38:17:17:19:aa:e3:7f:98:1e:23:c8:1f:
6c:45:17:6c:c0:d6:02:43:4a:e4:e7:0e:30:28:58:
94:a5:a7:fe:f3:36:46:23:bd:28:26:84:ea:41:6b:
d5:9e:7f:f9:87:6a:3b:d1:59:1e:1a:c7:85:c2:a1:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:B9:36:95:FE:B0:FE:73:5E:86:F5:35:61:2D:06:7E:65:06:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C446C704AD5D11EF8E05CC49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.36.0/23
Signature Algorithm: sha256WithRSAEncryption
41:99:f8:da:36:29:04:a7:f6:b9:1d:93:71:2d:f7:40:78:15:
05:c0:1a:44:60:f3:cc:65:58:25:4f:be:ec:a3:f8:bf:b5:7c:
7c:34:86:7b:5f:ff:b8:5d:33:b2:da:23:25:aa:bd:06:ed:6b:
e7:6e:ea:f0:cc:62:41:6e:d5:c3:e0:e4:59:5d:b4:12:23:4e:
d1:44:aa:0b:30:d0:3d:29:02:15:62:78:93:68:35:6e:9c:6a:
8d:e3:ee:90:e8:92:c7:be:b9:90:33:9d:0a:a7:21:f3:05:71:
86:46:d8:83:c5:5c:54:b0:8d:89:28:f6:00:f5:0b:b7:1e:c9:
92:9d:8c:61:b3:1b:ba:41:0e:08:36:4c:52:24:c5:0c:ac:7c:
52:ee:4a:33:c4:e5:b7:80:e8:92:46:69:14:7e:28:65:5e:84:
3b:df:f8:d6:e3:d8:69:24:81:f8:f8:32:c9:9d:29:8f:e4:37:
8d:be:e2:06:0d:d9:81:a3:de:84:07:9d:67:c2:66:fb:c9:9e:
c5:d0:c0:33:95:f3:7c:6a:e8:c5:1c:16:63:8d:02:0d:f8:b0:
9e:de:2b:ca:96:4e:03:5e:59:9c:13:f0:68:61:d9:03:66:e9:
68:ab:6e:33:20:a2:96:5a:57:30:52:11:1c:bf:55:1d:c5:e7:
ce:7f:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 13 07:50:14 2025 by rpki-client on console-fra.rpki-client.org