Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B76EA7E3D11EF8E9070AE762E951A.roa
File: CD0B76EA7E3D11EF8E9070AE762E951A.roa (raw, json)
Hash identifier: KvBvUXY6mfT/iXu1ASpmCUp8WrQEysCcjskXsGmiU/c=
Subject key identifier: 57:06:2C:82:1B:0A:20:F9:6D:F1:B1:80:A1:3A:69:0D:34:54:2D:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F498
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B76EA7E3D11EF8E9070AE762E951A.roa
Signing time: Sun 29 Sep 2024 08:35:37 +0000
ROA not before: Sun 29 Sep 2024 08:35:34 +0000
ROA not after: Mon 30 Dec 2024 08:35:34 +0000
asID: 17561
IP address blocks: 154.91.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62616 (0xf498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 08:35:34 2024 GMT
Not After : Dec 30 08:35:34 2024 GMT
Subject: CN=66f91159-2be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:1d:bd:14:29:93:e1:2b:ca:bc:69:9b:80:
e7:c4:54:13:84:af:be:65:06:e2:37:43:d4:c8:84:
89:f2:66:c9:90:69:33:31:77:6e:f3:40:3b:f8:84:
20:af:dd:83:41:04:8d:5b:07:35:31:05:81:7d:65:
6b:18:88:0a:f7:35:fe:14:92:21:fe:e3:be:32:e8:
f3:a5:af:ca:b4:d8:8c:52:dd:21:cb:ab:69:e2:63:
6b:7d:b6:53:25:c3:65:af:47:3d:13:e5:15:54:f1:
ac:90:99:01:80:ea:a4:e8:bd:08:7f:aa:d8:56:3f:
30:3b:cf:30:1f:29:ed:7f:36:27:43:e1:e7:b0:a2:
8b:7c:5d:4b:e2:a6:f6:f8:2d:c0:46:b0:a6:df:4c:
3d:13:42:3a:fa:38:d9:d3:d1:7d:69:d0:a6:d8:85:
9b:1e:83:8d:e5:f8:ac:5d:e7:95:3c:7f:cf:46:d2:
61:3f:01:85:a8:9e:aa:e8:e1:61:8a:ac:c9:09:4f:
1e:7f:72:fa:55:e3:2d:0c:56:73:a8:f5:0a:04:e6:
14:f9:a5:f7:69:92:dc:fa:23:d1:95:07:3c:50:4a:
aa:b3:2d:94:b7:81:88:97:e8:c8:ae:6b:ae:16:6a:
b8:c6:5c:a5:5b:59:90:44:7d:e0:d3:6b:3d:52:7d:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:2C:82:1B:0A:20:F9:6D:F1:B1:80:A1:3A:69:0D:34:54:2D:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B76EA7E3D11EF8E9070AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
48:82:a6:c8:4b:d2:a5:2c:f9:c4:50:a6:47:4f:16:ad:db:a4:
bc:62:92:dd:ec:69:2a:4a:90:0d:a9:63:36:22:c5:99:23:5a:
38:e3:ef:db:99:9e:f3:93:33:fe:aa:ed:10:a4:bc:85:76:de:
67:5a:ce:fe:17:5d:69:70:94:f6:10:2e:36:00:83:07:89:09:
2a:ea:ce:fb:2f:11:97:e6:c0:9a:9a:92:e3:67:bd:46:e7:92:
bc:3b:9a:ec:b9:8e:a2:75:96:d2:4a:ac:3e:a8:0d:ad:07:c2:
0e:7e:b5:95:f1:08:ab:e7:14:d9:d5:5f:da:4f:c0:4c:fa:26:
8a:3f:ac:5d:f3:d3:22:5f:58:72:4e:ea:32:03:5c:cb:76:eb:
28:75:59:70:f6:da:98:76:08:cd:3e:8d:b7:fa:e2:ee:c7:51:
17:ca:6c:e7:74:02:44:7c:ce:82:b1:7d:48:a1:ca:f9:02:d8:
34:d4:a7:3e:1c:84:aa:da:a4:5e:58:5d:ab:37:0f:e1:71:44:
d7:4c:7b:7b:27:ff:73:53:dd:e8:d5:eb:c7:ac:9c:bd:92:16:
88:62:d5:b0:8d:7a:a2:df:79:71:b0:b4:d3:f3:73:2f:09:76:
c5:99:c8:df:e2:94:bf:5c:dc:e6:48:5b:87:37:9a:df:7a:89:
91:a0:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:25 2024 by rpki-client on console-fra.rpki-client.org