Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7408A0A73D11EF99FA8AAC762E951A.roa
File: CB7408A0A73D11EF99FA8AAC762E951A.roa (raw, json)
Hash identifier: yeSvux2n1XmM4haFoj3pDcpRHrluVn8svtutg4+ig6k=
Subject key identifier: AC:DA:F3:D1:A9:B5:ED:24:75:0D:9B:B7:56:4F:31:16:66:76:33:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7408A0A73D11EF99FA8AAC762E951A.roa
Signing time: Wed 20 Nov 2024 12:48:52 +0000
ROA not before: Wed 20 Nov 2024 12:48:48 +0000
ROA not after: Sat 30 Nov 2024 12:48:48 +0000
asID: 142062
IP address blocks: 154.212.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69545 (0x10fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:48:48 2024 GMT
Not After : Nov 30 12:48:48 2024 GMT
Subject: CN=673ddab4-a2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:2a:e9:c2:9b:a3:16:0c:b3:2f:16:73:2f:
89:b8:c7:fa:bc:16:83:2a:f2:b7:15:70:cd:f9:44:
6a:59:94:a1:2c:59:97:f1:0c:49:82:58:e2:a2:84:
39:eb:06:6c:0e:01:c6:51:6b:d9:c6:2b:e4:d2:0a:
6a:47:bf:42:2e:6d:46:01:a8:e5:b3:e8:c8:0a:ac:
ac:6e:50:64:12:df:f6:32:60:ff:89:e6:64:6e:76:
3f:b5:5c:9f:29:b7:e7:9d:9b:54:d3:e7:21:d2:b6:
e3:e0:69:95:9a:b9:50:63:5e:a5:c8:ba:d1:c9:b3:
2b:49:66:b8:a3:9f:2e:96:e9:89:7e:ec:e9:8f:56:
df:81:5e:c6:a5:c0:55:9b:aa:cd:03:39:22:89:5a:
04:6f:f8:1b:e0:bf:21:ed:4d:28:0a:3b:2d:86:5c:
92:62:83:98:e0:2f:f0:95:e6:97:4c:3e:05:62:fe:
61:7b:7c:05:d7:d6:69:36:ec:81:8b:5c:db:2b:c1:
d3:e4:1e:94:c0:3e:26:0d:12:8b:ec:11:d4:c5:87:
10:5a:ed:63:e8:d3:c4:0e:af:51:19:d1:75:ab:d4:
69:84:f9:74:56:c9:7b:5e:d5:38:d6:98:7a:d9:3b:
67:70:f9:20:8e:51:cf:3f:c8:e7:51:ba:bf:ab:60:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:F3:D1:A9:B5:ED:24:75:0D:9B:B7:56:4F:31:16:66:76:33:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7408A0A73D11EF99FA8AAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2e:0e:46:c0:9b:43:35:3d:d6:09:4e:9f:2a:80:27:86:fa:
99:69:5d:96:47:eb:c9:ad:4d:91:30:eb:1b:4f:45:14:d4:90:
1d:7e:66:26:cf:42:db:74:24:60:70:37:1a:32:aa:8d:e9:48:
fb:bd:72:81:ff:3d:24:85:0f:55:2b:36:c2:8d:20:ef:70:3b:
a3:54:9e:82:e2:82:fa:52:38:f4:f9:db:70:5b:a7:46:d1:fb:
c6:3f:05:34:89:6f:12:58:24:b4:72:08:c3:14:dd:4e:dd:f0:
40:08:72:8d:1d:f8:0c:b3:f8:5a:4b:b8:82:d5:f5:bd:1a:1b:
cd:90:17:8b:7f:1f:d9:73:d2:f5:30:d6:22:85:b3:0f:a2:fe:
87:67:3c:56:d5:5f:7c:f7:16:43:66:d4:17:78:f7:31:86:12:
f2:64:78:a0:c4:aa:ec:ed:b0:6f:e2:d1:ce:bc:26:6a:33:f9:
e2:78:93:42:ac:c7:ae:9e:f7:45:52:37:ed:22:88:ca:35:18:
2f:99:50:73:15:4c:d1:05:01:f5:11:6b:a3:e1:e9:58:d8:b4:
c1:28:a1:83:9d:73:3b:65:85:02:44:50:2a:54:ef:aa:b4:67:
39:24:3f:32:8b:1c:f8:7a:40:78:6c:57:8f:b6:62:19:f8:f3:
db:d8:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:25 2024 by rpki-client on console-fra.rpki-client.org