Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F9B46827E011EFBE2036F87CDC24C2.roa
File: D1F9B46827E011EFBE2036F87CDC24C2.roa (raw, json)
Hash identifier: CwI6uJoKdC3Zj75IO+xSkxWhxpOE3gg1mAYXKRSZpaA=
Subject key identifier: 39:A9:7E:81:7A:62:3C:8D:7F:F2:05:57:70:0D:58:16:B8:36:24:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F9B46827E011EFBE2036F87CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:53:22 +0000
ROA not before: Tue 11 Jun 2024 10:53:18 +0000
ROA not after: Mon 12 May 2025 10:53:18 +0000
asID: 140951
IP address blocks: 154.196.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49592 (0xc1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 10:53:18 2024 GMT
Not After : May 12 10:53:18 2025 GMT
Subject: CN=66682ca2-95c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:ac:17:b8:87:67:8f:78:34:06:14:6a:b8:
d6:4b:c3:07:a1:01:97:7f:12:0e:ee:5b:b9:ea:d1:
6d:f2:72:30:99:38:31:65:75:07:be:99:2c:8c:bb:
b7:11:ae:ef:e1:7e:fc:5d:a7:1d:ef:79:8a:d3:7d:
96:0f:c2:8f:f9:c4:c4:55:9a:7d:0c:9e:c5:be:77:
22:a2:c5:bf:f7:89:49:0e:8c:e7:c7:65:60:b3:d7:
0d:04:00:d5:8c:9f:fc:55:61:44:96:06:77:77:12:
a2:c1:dd:9e:95:80:4c:73:42:4c:cc:41:f3:05:52:
4c:b6:02:53:d0:2a:7c:e7:43:e1:ce:03:5d:63:8a:
e0:f4:c1:da:84:41:b9:50:74:2a:0e:c2:c1:79:89:
8b:c0:00:58:97:f7:fc:b0:14:1b:4c:67:27:d1:38:
c5:47:8a:90:80:09:2c:4a:9b:9c:87:03:6d:fd:75:
39:58:7e:c1:d9:e6:83:95:5d:30:73:1d:31:14:e4:
3a:d6:78:6e:d7:99:11:b2:6e:76:f6:a3:07:e5:02:
fc:4b:a7:0a:52:d3:37:a0:ac:b9:1f:a5:49:71:bc:
66:da:ca:6a:b2:b3:d5:e6:70:55:ff:d2:ea:1a:00:
ba:c7:81:b2:37:2c:31:69:8f:31:8b:af:4f:2e:f5:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:7E:81:7A:62:3C:8D:7F:F2:05:57:70:0D:58:16:B8:36:24:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F9B46827E011EFBE2036F87CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.252.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:6e:41:c8:f0:0b:70:25:f4:88:03:c2:a8:ba:dc:b7:b3:de:
dd:4b:82:56:48:56:8a:d5:97:7b:4d:f5:18:dd:37:80:fe:8e:
08:aa:43:da:0f:60:3c:93:f8:15:7b:c3:e2:59:35:c7:8e:8d:
4b:6b:6a:10:50:60:31:2f:47:52:ae:eb:b9:c4:6e:bd:f7:27:
1b:d2:32:d9:a6:76:be:bf:cd:c7:88:a2:ab:57:a1:41:c8:3c:
e0:df:be:29:dd:2a:06:76:82:fc:45:3a:1d:56:78:51:4f:f6:
18:38:65:c5:58:d6:da:70:6c:74:07:2b:55:7d:f1:fe:b2:73:
0a:be:16:3e:f5:38:72:8c:cb:ea:a8:da:4e:64:11:ea:e7:c3:
7d:d9:c9:15:b9:fb:2e:d9:bf:b8:13:81:8f:85:bb:45:cd:e5:
a8:39:d2:af:5c:a0:67:ca:5d:be:6c:f6:76:25:f5:8a:5e:28:
bf:d0:e3:fb:27:7c:9d:ca:d3:f1:8f:14:21:cd:e8:09:2a:4f:
c9:a4:eb:ed:aa:59:fc:70:19:ac:f7:6b:5f:86:8a:ef:ec:ef:
85:d7:5d:03:7c:98:81:91:03:86:50:bd:44:75:56:b9:9f:fa:
99:de:82:2b:cb:d1:e4:d4:58:54:f1:37:f6:88:6c:54:c3:f5:
77:b2:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:26 2024 by rpki-client on console-fra.rpki-client.org