Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5787946A75411EFA9D4E0BC762E951A.roa
File: D5787946A75411EFA9D4E0BC762E951A.roa (raw, json)
Hash identifier: TRenoOCaI7I+zN+fDnvBuU4KtR5vWdBByniXJvsH4l4=
Subject key identifier: FC:A1:6E:B1:EB:50:08:07:B5:97:DF:8F:24:FD:21:D8:33:28:1C:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5787946A75411EFA9D4E0BC762E951A.roa
Signing time: Wed 20 Nov 2024 15:33:47 +0000
ROA not before: Wed 20 Nov 2024 15:33:44 +0000
ROA not after: Sun 01 Dec 2024 15:33:44 +0000
asID: 139880
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69593 (0x10fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:33:44 2024 GMT
Not After : Dec 1 15:33:44 2024 GMT
Subject: CN=673e015b-2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:b7:95:f5:2b:c3:05:62:64:6f:d6:e7:86:
57:25:b1:a8:d5:0e:28:5c:ac:59:f0:e8:83:20:76:
99:ee:55:bd:1b:5a:88:d7:92:29:ed:e9:a9:64:80:
c9:ef:60:c8:85:65:1e:8a:45:a7:b8:ce:2a:57:ce:
d2:50:76:8e:b1:d2:c1:22:c3:e1:ed:88:b1:2f:1a:
64:2a:80:51:4b:57:f0:36:a0:66:66:26:0e:4d:bf:
b5:8b:39:09:45:f1:9e:6a:07:de:d5:7d:1f:b0:ee:
36:21:f2:25:02:9e:f9:83:7f:73:cb:7c:cb:79:2b:
6c:5e:98:a2:be:31:6d:7f:84:7d:c3:89:f9:74:f2:
88:3e:07:01:c1:5f:31:31:50:b5:76:85:88:dc:eb:
97:0d:76:40:85:87:e7:46:19:a9:94:9c:7c:9d:36:
d8:e9:08:24:22:20:69:23:e8:64:70:87:5a:b9:72:
ca:8d:b0:51:7c:2b:5f:3b:6a:30:e1:fb:af:3c:9b:
5e:6b:7b:90:e9:db:4b:d6:7a:fb:ac:15:b9:07:c0:
7e:18:3b:87:c9:cf:20:57:2e:d5:f7:9b:eb:02:1b:
ba:56:fa:73:cd:4e:1f:fe:22:26:9e:f0:b2:eb:81:
5a:5f:2b:60:4b:56:37:82:8e:60:c5:a4:4a:7f:63:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:6E:B1:EB:50:08:07:B5:97:DF:8F:24:FD:21:D8:33:28:1C:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5787946A75411EFA9D4E0BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
86:fd:bb:1c:5d:0f:52:15:92:4d:48:73:7e:ba:dc:0a:fe:7b:
22:41:fb:79:c8:95:4d:a3:32:04:c2:c1:c2:a8:68:ef:79:b4:
11:23:de:48:5b:f4:97:91:80:1c:da:fe:cd:de:0c:fd:07:34:
b9:c0:6a:8a:9d:79:3c:2f:b8:36:ce:30:5f:2c:a2:3c:3e:d7:
de:7f:c1:52:df:dd:5c:72:8c:d7:93:b1:d9:68:39:7f:f8:e9:
4b:f8:18:06:f1:a7:f3:13:37:9b:76:6e:48:17:65:72:c2:1a:
f4:8b:e8:a5:18:de:fb:6b:ea:97:8d:5d:2c:65:cf:ec:a8:3a:
98:9f:88:91:86:b6:a6:83:2d:40:c4:e8:0b:e6:6a:ef:5b:fd:
fa:c3:94:2d:5f:c5:bd:22:a1:e4:0e:95:87:5d:b6:8e:ce:bf:
b2:33:68:2f:b4:37:6f:4c:ef:f9:57:f3:04:48:31:60:89:81:
7f:2c:b8:b1:cd:c2:da:52:dd:41:38:17:85:99:23:67:8a:1f:
e0:15:85:fb:df:db:b4:5c:01:8a:14:0c:a3:fb:e2:e3:c8:d4:
a1:15:73:9e:3e:66:82:23:4a:31:f9:40:df:c9:58:14:89:c4:
56:29:5a:95:2c:99:c8:a2:d5:81:78:f1:88:4c:eb:c6:f7:24:
10:6f:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:54:45 2024 by rpki-client on console-fra.rpki-client.org