Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F96F6AA44011EF9853D462762E951A.roa
File: C9F96F6AA44011EF9853D462762E951A.roa (raw, json)
Hash identifier: 90FANrqfJMn4BgTwoP1JdewwuSVP4Dx9p5mkQxOv7Io=
Subject key identifier: F2:83:07:F1:77:9D:C8:12:8E:25:8C:CB:01:0F:8C:12:C5:A5:7C:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F96F6AA44011EF9853D462762E951A.roa
Signing time: Sat 16 Nov 2024 17:32:45 +0000
ROA not before: Sat 16 Nov 2024 17:32:41 +0000
ROA not after: Sun 22 Dec 2024 17:32:41 +0000
asID: 18779
IP address blocks: 154.203.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69051 (0x10dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:32:41 2024 GMT
Not After : Dec 22 17:32:41 2024 GMT
Subject: CN=6738d73c-a271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:da:9f:00:5c:8a:46:f2:e4:d4:a2:8e:d9:
11:4e:3a:0c:cb:1b:a1:88:29:cb:f0:13:2e:81:26:
1d:ef:ec:c5:d6:18:cd:0a:13:5f:bd:3b:de:87:b5:
dc:54:dd:0c:38:04:4d:57:1e:22:fa:dd:a0:4a:bf:
ac:61:51:d3:77:f7:fd:33:8a:4c:61:8e:da:a8:1d:
b0:6c:f6:53:7b:40:4f:ba:ae:21:76:22:ce:00:ba:
a5:4c:e0:38:0d:76:1a:5b:76:73:c2:99:b2:39:b2:
a7:1e:61:64:d3:5e:02:00:50:92:6f:2c:94:6a:6f:
df:4a:7f:d8:55:12:63:30:52:42:43:7c:1a:d5:4a:
e8:9c:65:31:c6:a9:38:00:0a:10:16:9c:94:40:c9:
a8:85:ad:e1:73:01:6b:31:19:66:1d:0f:9c:e6:e3:
ca:f1:fa:f3:ae:2a:42:1c:1c:dc:00:db:29:dd:2f:
20:ee:cc:27:41:fb:a2:d7:ab:00:de:39:5a:cb:cf:
83:26:6e:62:0e:80:26:19:91:2e:87:cb:03:19:4b:
aa:44:8e:87:10:5c:d2:3b:d7:93:f6:dd:df:5b:82:
3f:73:c3:33:23:0c:f9:3b:07:05:d8:ea:72:e6:f1:
27:d8:13:8f:40:5f:20:cf:58:07:c9:d5:48:f4:5d:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:07:F1:77:9D:C8:12:8E:25:8C:CB:01:0F:8C:12:C5:A5:7C:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F96F6AA44011EF9853D462762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:86:0f:c3:ec:03:f1:09:89:a8:d3:f9:e3:57:c8:c9:7e:a6:
89:80:aa:3b:11:22:05:a8:45:14:f5:02:03:c3:cc:d1:68:c8:
4d:8a:7f:77:2a:34:cd:c8:bf:5f:93:e3:73:e8:62:87:4e:bd:
66:40:20:71:80:24:78:a8:aa:7d:65:ee:37:a5:91:b9:a6:1b:
16:3d:70:98:8b:50:f3:cc:66:27:d9:80:13:51:e2:32:26:29:
27:79:33:03:cb:67:eb:24:4f:ee:0c:35:79:98:dd:91:a1:fe:
b2:1d:b0:8b:78:89:6a:0a:28:a4:c9:1d:b8:a3:49:0b:8f:d6:
0b:96:9e:74:6d:09:8b:e7:ad:36:7b:15:17:a3:87:bf:56:2d:
18:39:5f:b2:c9:20:d1:c6:8c:b3:6e:11:76:63:e6:5e:4d:cc:
44:2b:7f:48:94:07:bc:8b:40:3f:2d:2d:66:71:8b:26:57:3a:
76:aa:27:2b:5d:d8:7a:2b:e5:9d:c7:3f:63:aa:60:c0:8b:8c:
2f:22:19:6e:56:d0:c3:70:57:3d:9c:fb:eb:e0:3a:10:e1:70:
eb:2d:a0:c2:b8:32:96:0f:82:1f:96:48:e2:7c:54:6f:49:7d:
71:a1:fd:6c:9f:2c:05:87:a6:27:bd:d9:f1:c8:1e:2a:ef:58:
a1:3b:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:06 2024 by rpki-client on console-ams.rpki-client.org