Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CBFB23AA311EFBD18D994762E951A.roa
File: C65CBFB23AA311EFBD18D994762E951A.roa (raw, json)
Hash identifier: AL9kPqFIGkXcYv8aptQiAjuA+ngSvSyy/P2xumByFh0=
Subject key identifier: 5E:A8:12:1E:3E:F2:E6:9B:4B:30:B7:09:61:C0:CE:8E:AE:2A:4B:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CD8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CBFB23AA311EFBD18D994762E951A.roa
Signing time: Fri 05 Jul 2024 07:54:15 +0000
ROA not before: Fri 05 Jul 2024 07:54:12 +0000
ROA not after: Tue 07 Jan 2025 07:54:12 +0000
asID: 63199
IP address blocks: 154.207.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52618 (0xcd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 07:54:12 2024 GMT
Not After : Jan 7 07:54:12 2025 GMT
Subject: CN=6687a6a7-275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:2d:d8:e0:29:1b:e0:ca:73:c2:e6:05:52:
a8:0b:93:31:e7:99:38:98:f4:b6:e7:5e:8e:6f:73:
74:58:0f:71:dc:b6:55:3a:fb:6d:68:c2:46:9d:d8:
67:6c:03:75:ab:5d:5c:9a:36:b3:02:1f:60:f3:03:
a5:72:da:08:bf:00:97:fe:86:68:37:f2:89:3a:c0:
ed:79:04:bf:3e:14:6a:6e:f2:83:a2:c0:6d:92:d1:
64:62:9d:c5:c7:bc:d9:6b:2b:ad:68:b4:61:15:7c:
3e:3c:d1:60:c7:20:2c:fc:f7:df:8f:98:54:bd:aa:
9f:c1:2a:75:3c:b3:e5:cd:c5:8c:29:e0:33:08:20:
81:99:6f:f0:0a:8f:4a:48:fa:2c:38:29:51:ac:ac:
62:74:ac:93:6a:fb:04:a4:ef:4a:0e:60:12:c2:48:
a3:a7:8d:f9:d8:2d:dc:2b:88:73:6c:90:60:9a:44:
25:8b:86:07:49:65:ff:0c:8d:fa:a4:02:15:43:de:
3e:63:ce:15:81:3d:33:0d:c0:59:a1:72:87:47:15:
0f:91:fc:ea:ec:29:57:b5:61:ed:91:69:f8:7d:8c:
ee:ca:4e:a1:6c:69:18:bb:63:5b:c1:3d:be:19:21:
5a:39:4e:be:e7:75:ea:81:81:bc:83:51:87:5d:e5:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:12:1E:3E:F2:E6:9B:4B:30:B7:09:61:C0:CE:8E:AE:2A:4B:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CBFB23AA311EFBD18D994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.112.0/23
Signature Algorithm: sha256WithRSAEncryption
19:c9:4d:41:5f:00:5b:ce:2e:5b:91:38:6f:47:06:94:d8:6b:
4d:0d:bd:c2:c6:7d:87:97:6c:9a:63:80:f1:f3:37:8b:e1:8d:
b4:89:1c:cd:ad:b0:c0:79:d8:90:d3:33:51:08:18:a7:77:1d:
2e:89:74:14:84:75:de:7d:3b:ac:10:87:55:45:23:40:3e:c6:
3f:b5:40:b3:b2:a3:48:ca:4f:a8:7f:0e:82:dc:68:eb:69:6c:
87:db:87:ff:58:7d:56:8e:e6:78:be:6f:c0:88:0e:9b:c5:05:
46:76:a1:a2:f2:19:0b:a3:79:77:1a:19:bf:46:38:83:1a:6b:
3c:36:34:f1:a1:61:70:ad:9b:5b:eb:91:55:99:f3:2f:f5:4e:
f1:0e:40:a6:16:83:ae:bd:a4:1d:82:fd:73:85:8c:87:26:6b:
67:09:cc:bf:ce:bd:ab:b5:3c:d0:0c:81:2d:64:06:e6:6f:41:
74:82:75:18:bd:8d:f5:96:89:56:29:be:1a:8f:c0:cb:67:bb:
f4:7b:f0:82:5a:aa:a7:03:4c:76:a2:a9:a8:4e:73:aa:1f:0a:
a1:86:0f:25:a2:ff:46:79:60:74:6e:af:b2:cb:5c:23:10:ff:
c9:f6:63:6d:38:c8:20:1a:42:db:65:9b:b9:b5:09:0d:1f:3a:
ed:40:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org