Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34595689DA011EF9747FB91762E951A.roa
File: D34595689DA011EF9747FB91762E951A.roa (raw, json)
Hash identifier: UMmCuR6jaPQOybSW2XysQnYPO1cTUBihnu0bWB5LGGo=
Subject key identifier: 8F:27:FE:AF:A6:D3:B6:7E:31:D5:E5:99:A2:F6:77:BB:A3:A8:3A:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34595689DA011EF9747FB91762E951A.roa
Signing time: Fri 08 Nov 2024 07:12:34 +0000
ROA not before: Fri 08 Nov 2024 07:12:30 +0000
ROA not after: Thu 12 Dec 2024 07:12:30 +0000
asID: 394432
IP address blocks: 154.196.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68010 (0x109aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:12:30 2024 GMT
Not After : Dec 12 07:12:30 2024 GMT
Subject: CN=672db9e2-755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:6b:a5:6e:34:89:7a:eb:fd:57:8a:94:73:
29:51:3d:6f:6a:79:a0:5a:a0:7d:5d:32:ed:10:92:
fe:79:db:26:5d:d6:e8:cc:5b:2e:37:19:10:46:46:
a3:b5:ac:43:d3:59:67:d3:7e:8a:b6:77:bc:0e:7f:
4c:4b:6c:1a:c2:ec:c8:81:0c:e3:f6:f0:dc:f7:82:
62:f2:04:e1:b2:c3:41:d3:31:18:55:00:49:b1:39:
98:e8:d0:c1:34:96:06:69:ad:19:db:22:a2:1e:16:
12:5a:56:3e:dc:74:0e:a0:21:49:cd:1b:43:ce:af:
5d:5f:ab:38:44:0e:e1:64:19:84:69:c5:93:2d:65:
82:27:ef:a0:a2:68:2c:08:d2:a2:ae:c5:d3:2e:b7:
47:39:ce:f5:6b:ee:06:a2:84:9d:c9:d9:23:29:ba:
fd:5f:43:cb:6c:55:28:db:8c:d4:40:0e:67:92:dd:
65:22:51:03:b2:ff:fc:81:fe:fd:c7:17:ba:74:ad:
65:1a:78:cc:05:1e:9a:c9:87:40:ce:ee:97:b6:c0:
42:23:b8:88:e4:7b:12:8a:18:f4:8c:01:40:c2:96:
b9:2b:90:fd:bf:0f:4f:b8:55:56:0c:80:74:07:5d:
50:af:d4:c1:fb:5d:e9:6a:36:c5:09:75:2b:db:a1:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:27:FE:AF:A6:D3:B6:7E:31:D5:E5:99:A2:F6:77:BB:A3:A8:3A:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34595689DA011EF9747FB91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.192.0/20
Signature Algorithm: sha256WithRSAEncryption
21:31:68:cb:b8:9a:db:73:dc:62:eb:e2:d0:a1:bf:72:81:93:
27:b0:9a:35:99:ec:1d:cc:1a:72:80:cd:0e:87:5c:30:80:cd:
52:82:83:9e:af:c7:d5:85:f7:eb:3e:bc:18:b0:bb:1b:c2:f6:
ce:0f:0b:a7:ba:ba:14:a0:c3:73:17:84:20:8d:a5:90:c6:78:
ae:ae:6e:7d:df:ba:12:0a:9d:0a:77:fa:77:53:c6:c0:b4:d4:
4c:b1:e8:a3:c6:c2:b1:c5:3c:12:44:97:f3:06:9a:64:72:b7:
c9:49:c6:64:8f:a2:4e:04:3d:20:28:f2:70:50:0b:b4:f9:b0:
a1:00:c4:fc:d6:2c:4f:6f:04:5a:e3:00:fc:15:b2:07:3b:95:
c3:18:f1:dd:59:b1:dd:7b:b6:1f:27:cc:a8:83:70:76:6b:a3:
8d:d6:00:af:65:fe:50:31:1f:54:15:b2:b9:fa:66:e0:41:ce:
dc:d4:5a:cd:56:60:a7:c9:5c:31:22:73:3c:13:97:60:ff:ba:
20:dc:bf:d5:61:c4:49:08:95:4a:94:07:bd:e3:8f:b4:ec:2d:
b3:d8:ad:f3:d9:e2:b9:55:39:8b:4b:0d:e2:f0:10:73:8e:b0:
3c:22:ba:1a:63:bd:52:9a:50:c4:0f:35:1c:f9:10:e8:2e:e8:
75:14:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:39 2024 by rpki-client on console-fra.rpki-client.org