Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA911D4A8EB11EFAA0A3DBF762E951A.roa
File: CCA911D4A8EB11EFAA0A3DBF762E951A.roa (raw, json)
Hash identifier: iCS56Yd3XEueZMXauYydV2NRV/DvGuq00LhSOi60cfs=
Subject key identifier: DC:43:CA:BD:E4:48:53:70:5E:02:D4:51:63:7B:52:3E:91:DB:FC:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011115
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA911D4A8EB11EFAA0A3DBF762E951A.roa
Signing time: Fri 22 Nov 2024 16:06:58 +0000
ROA not before: Fri 22 Nov 2024 16:06:54 +0000
ROA not after: Tue 03 Dec 2024 16:06:54 +0000
asID: 62240
IP address blocks: 154.195.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69909 (0x11115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:06:54 2024 GMT
Not After : Dec 3 16:06:54 2024 GMT
Subject: CN=6740ac21-918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:30:d8:0c:ad:c4:23:10:ff:ae:07:2e:99:
d1:8d:6c:5e:48:c9:f1:4e:52:a3:4b:61:f3:39:ca:
b9:e7:3e:12:11:bb:92:82:81:7d:a9:43:c7:15:f8:
fa:3f:51:77:59:eb:60:96:be:ab:28:4f:d6:91:46:
6e:15:2e:7d:0f:dd:89:d8:a1:6a:b0:54:86:01:37:
79:24:c9:f1:0b:ea:b2:a9:95:a6:69:21:0b:1d:02:
42:d4:c7:00:2a:6e:0c:1e:b8:ce:a1:4b:11:bf:74:
55:5d:ac:7d:0e:d4:ff:de:71:7f:8f:71:78:79:48:
c7:e9:0c:8e:49:8e:27:c7:7c:94:01:a7:ea:00:cf:
12:50:55:b8:12:63:43:74:8a:96:52:4b:f8:1a:c2:
e4:a7:04:d5:bd:3f:e8:59:7e:e8:fc:e4:65:2d:08:
bc:7e:a6:18:41:f2:bd:82:9c:ef:88:cb:58:56:c6:
b5:c9:df:55:73:ad:e5:54:9e:b2:03:7f:ca:d8:7f:
03:fb:80:07:10:fc:c3:48:f4:c9:55:f5:6d:fe:c0:
cf:6d:9f:3f:8a:61:c6:af:4d:bb:18:e7:43:99:61:
a1:92:f4:3a:61:e6:1c:fe:bc:71:29:cd:63:7a:fd:
38:ee:c9:ea:2a:4a:b5:87:7a:75:62:2e:37:5f:0f:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:CA:BD:E4:48:53:70:5E:02:D4:51:63:7B:52:3E:91:DB:FC:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA911D4A8EB11EFAA0A3DBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.133.0/24
Signature Algorithm: sha256WithRSAEncryption
92:72:8a:e8:7c:11:a4:14:24:34:7a:9d:a8:79:67:9f:22:ee:
6d:48:89:48:3e:64:c9:48:96:d0:21:cf:1c:d8:fe:b3:44:99:
86:5b:d7:63:8e:59:62:35:ac:31:64:c9:c3:aa:ca:a3:86:0a:
29:0a:5f:8e:20:e6:fe:ea:e4:8e:db:61:c2:f3:5e:b6:c6:d8:
e2:a3:11:e5:90:0e:e4:3c:2f:a0:e3:6e:57:b7:7b:09:a2:57:
37:e0:cc:c8:d4:46:6c:b1:db:11:4b:e9:e8:56:f0:ef:b8:e9:
fc:d9:be:13:06:75:c6:c0:c4:33:70:ae:33:2d:4e:2e:7d:4c:
34:a6:75:bc:fd:91:da:53:47:53:c2:eb:a8:d5:ac:cf:db:70:
69:50:9b:0b:e5:35:84:2d:6b:80:69:0c:67:c4:85:df:8f:b4:
f7:2e:cf:72:0e:52:41:87:f7:fc:b1:60:04:9f:ee:4c:a5:05:
83:f4:7b:d5:54:64:89:e4:6e:a3:30:c1:27:25:0a:48:c3:bc:
52:93:0b:59:2e:05:ee:f5:6c:5d:30:7e:de:80:1e:20:71:30:
6c:06:5c:00:1a:40:ae:55:bf:74:3f:08:78:ce:74:58:1d:c9:
de:ac:40:29:6c:d5:b5:f0:98:57:29:5e:45:e5:23:ba:2b:a4:
8f:52:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:47 2024 by rpki-client on console-fra.rpki-client.org