Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E01996A32C11EF845838A9762E951A.roa
File: C7E01996A32C11EF845838A9762E951A.roa (raw, json)
Hash identifier: 3Z+z7drpVQ7M/F9Ulm/sHpaN9RaIfnOssEkPHyWqEps=
Subject key identifier: F7:8C:6A:FB:DB:4F:FA:AC:A5:22:C3:63:72:B4:A2:21:9E:FA:AB:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E01996A32C11EF845838A9762E951A.roa
Signing time: Fri 15 Nov 2024 08:37:00 +0000
ROA not before: Fri 15 Nov 2024 08:36:56 +0000
ROA not after: Tue 17 Dec 2024 08:36:56 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68944 (0x10d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:36:56 2024 GMT
Not After : Dec 17 08:36:56 2024 GMT
Subject: CN=6737082c-8a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:1c:c4:8d:a8:ae:cb:49:22:d9:11:ce:ec:
98:27:68:ce:c4:c5:f7:a2:59:90:b5:52:17:e5:8c:
7b:a0:c5:77:12:d0:50:7f:d9:84:c6:e7:f1:fc:9b:
6b:71:f9:32:96:64:04:f6:29:80:07:11:12:56:ea:
6b:47:3c:fc:8e:73:46:b3:81:a9:05:96:3d:cf:72:
2d:8e:56:5a:ea:35:10:4f:ea:3f:d7:5e:98:d8:d6:
4d:5b:89:61:2d:1d:22:2e:9a:0b:db:11:b6:b7:36:
02:ea:4b:cd:77:b4:98:db:d8:8b:4d:2e:1e:a7:a3:
88:c0:5b:c8:25:cb:73:ae:79:03:a8:e4:ae:02:eb:
af:b8:30:bb:c7:8b:3e:53:40:ac:ed:d6:19:84:f9:
45:ca:b6:0f:dd:f1:b6:c9:53:31:da:43:69:d7:50:
e3:15:df:46:f9:92:cc:ab:f2:33:c8:a2:25:ba:31:
c6:e8:95:63:53:b0:54:6a:24:bf:d1:86:d2:3e:1b:
ef:b7:cb:82:22:96:41:ba:5b:2b:56:bf:63:44:77:
53:a6:14:bc:d4:30:95:ac:a6:af:28:c0:f1:ed:99:
ef:e0:39:79:99:5d:1f:61:de:f8:90:37:1f:76:66:
ae:40:fa:d5:5c:49:e0:bf:c3:6a:76:d9:5d:62:7c:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:6A:FB:DB:4F:FA:AC:A5:22:C3:63:72:B4:A2:21:9E:FA:AB:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E01996A32C11EF845838A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:80:5f:df:c2:45:50:22:0a:86:ac:4d:21:87:09:bc:d6:1e:
fb:23:a0:53:a2:f4:b0:08:7f:81:89:b4:ff:32:21:9e:ea:62:
7f:fd:8d:51:a3:8a:a1:b9:84:f7:97:9b:7e:f1:43:78:6c:f9:
95:87:14:31:40:d5:1a:46:d5:07:44:a8:5c:45:e0:2c:0a:2f:
16:91:2a:42:59:ad:70:43:9c:45:4d:6b:c3:d1:b1:2c:27:20:
6e:9f:02:1f:8b:d7:52:94:ad:fe:fe:9c:78:b8:53:e4:86:95:
62:49:fe:a1:ce:ac:ef:59:7b:9b:ed:b3:e0:7e:d5:49:ab:b2:
c6:d0:4f:20:1b:9e:00:a9:7c:aa:a3:f2:45:53:09:be:35:a6:
00:56:7d:bf:3b:22:8c:4e:2e:ed:dd:21:f3:d5:57:e3:4e:8d:
ab:0e:40:02:52:71:d6:12:d3:01:06:26:7e:35:08:a9:d0:67:
df:86:10:12:d9:3f:43:7f:ac:4a:0c:89:36:38:97:b2:da:91:
fc:d5:76:35:9c:aa:4e:f8:3e:1e:b5:86:aa:35:7c:94:83:04:
a5:2e:34:3f:26:54:1d:99:00:98:35:78:85:f6:f6:b1:29:98:
d8:79:ff:df:83:d6:a3:c1:9f:1f:d8:d6:53:be:5f:6f:48:76:
1a:80:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org