Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EE04DC9B5E11EF8E028D53762E951A.roa
File: D1EE04DC9B5E11EF8E028D53762E951A.roa (raw, json)
Hash identifier: auF46m6Ag8mE66n9Mq7ELWyPVoO+VCyZRWrdNXY92vQ=
Subject key identifier: CD:4B:49:33:BE:50:A3:E6:73:AA:45:16:7F:81:27:39:AA:56:6E:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01079B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EE04DC9B5E11EF8E028D53762E951A.roa
Signing time: Tue 05 Nov 2024 10:15:02 +0000
ROA not before: Tue 05 Nov 2024 10:14:59 +0000
ROA not after: Mon 13 Jan 2025 10:14:59 +0000
asID: 7018
IP address blocks: 154.85.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67483 (0x1079b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 10:14:59 2024 GMT
Not After : Jan 13 10:14:59 2025 GMT
Subject: CN=6729f026-8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:c9:ab:fa:68:1a:5c:79:0d:83:e7:e3:29:
59:73:df:2b:64:47:69:36:65:02:db:a9:97:df:f5:
ea:22:42:c3:52:ab:01:9c:91:fb:89:2a:28:7e:58:
83:46:35:6d:f5:1f:83:85:2d:c5:4a:dc:67:98:09:
09:4d:24:bf:5e:33:0b:9c:77:17:41:72:aa:1d:4b:
8e:f2:c2:a4:ab:98:95:b5:51:e5:a6:d6:9d:01:7f:
f6:42:44:57:43:95:0b:eb:57:82:68:87:cc:71:a6:
ad:70:05:97:3b:24:d8:93:69:dd:01:5d:62:49:07:
d0:22:ab:01:a4:ee:23:ae:c7:d6:50:99:8f:87:e9:
cb:45:2b:7a:35:01:1d:b6:cb:46:c7:1c:47:0e:ba:
c1:83:85:6d:63:cb:71:a3:e9:8d:c2:80:29:3d:17:
00:a2:8d:57:5c:7f:45:c9:d0:e7:a5:83:0d:56:a6:
8a:47:5d:00:d0:af:c1:46:02:15:1c:8d:8c:21:9b:
a6:77:77:dc:5d:0c:41:6f:9c:24:56:ce:d9:d5:03:
c2:89:36:5f:19:f1:ba:b6:f4:01:e0:8a:46:ab:4a:
a7:92:a0:8b:ea:c5:76:97:07:dc:48:46:c0:c1:fa:
02:2d:b4:24:ee:9a:6a:c0:d1:41:86:81:d3:04:7b:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:49:33:BE:50:A3:E6:73:AA:45:16:7F:81:27:39:AA:56:6E:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EE04DC9B5E11EF8E028D53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:63:a8:0d:9f:3e:ed:08:53:3c:e4:55:12:7d:10:04:66:a1:
9c:00:67:7c:25:e2:be:a5:bb:b4:c4:e0:38:1e:40:f0:5c:db:
1d:46:e4:1b:49:12:56:8d:a7:44:59:e2:34:c2:da:2c:25:28:
84:37:03:4d:39:76:94:d7:cc:6f:da:a4:2e:00:23:76:d6:7b:
02:8b:f1:79:7e:d8:c2:f7:a0:af:47:20:25:26:53:96:c1:94:
47:19:41:e4:cb:96:cc:e7:25:f1:9d:d2:d0:2c:9f:85:5d:e4:
c7:cd:97:00:3a:5b:c0:d2:14:1e:21:a7:d5:93:89:0e:ed:f8:
a7:67:ee:80:24:cd:dc:87:90:a8:3c:1a:ad:f2:54:da:01:a5:
9d:ac:75:b6:be:ae:51:df:92:ea:84:5d:67:cf:61:38:9a:c9:
2e:de:d2:a9:81:47:80:34:7d:a0:86:03:68:d2:68:7a:3d:8a:
7d:7a:39:e3:8c:85:da:be:7d:20:6c:e9:3f:ae:b5:8b:e7:28:
06:67:41:9a:70:a1:e0:b3:45:6a:a0:a4:e8:6c:cc:89:03:b7:
a0:65:a0:d1:f7:48:18:3b:3a:7f:22:a5:01:3f:72:4d:d7:48:
9a:18:fb:ef:af:4d:1a:b9:23:84:7c:e4:80:50:ad:0d:a4:09:
33:86:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:26 2024 by rpki-client on console-fra.rpki-client.org