Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D637157E9D1611EFA27757A6762E951A.roa
File: D637157E9D1611EFA27757A6762E951A.roa (raw, json)
Hash identifier: 3Vv0YX+TNqsDaT22+ktcqmZ6nlwdOnCXu31EcuIljKQ=
Subject key identifier: F2:C6:31:82:58:16:2F:28:A2:AE:3D:6D:20:2D:6E:70:0F:F6:CE:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010951
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D637157E9D1611EFA27757A6762E951A.roa
Signing time: Thu 07 Nov 2024 14:44:48 +0000
ROA not before: Thu 07 Nov 2024 14:44:44 +0000
ROA not after: Wed 05 Nov 2025 14:44:44 +0000
asID: 133448
IP address blocks: 154.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67921 (0x10951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:44:44 2024 GMT
Not After : Nov 5 14:44:44 2025 GMT
Subject: CN=672cd260-690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:de:50:27:41:65:09:c2:a5:f5:31:84:db:
4b:23:3f:13:11:8e:eb:ce:eb:98:c5:7c:ec:ae:70:
e2:5a:3a:3d:41:15:f8:7f:9c:74:c9:9e:44:0a:7b:
bd:9b:c8:da:86:a3:ee:2d:91:0e:bd:55:be:81:70:
f3:97:1f:30:db:00:0c:74:ba:a6:93:a5:84:fe:c6:
f9:29:9c:d0:bd:59:7c:3a:7f:d8:63:be:0c:45:c3:
26:b4:fc:d3:06:cc:94:d6:b7:fb:20:53:bc:2a:a4:
2f:e2:b4:2f:62:b6:db:ef:88:cf:20:4d:6d:1e:b2:
5f:bc:d7:56:4c:62:c8:76:b3:ce:e4:f4:a2:61:39:
39:b5:5c:5e:3d:7c:68:2c:46:ad:44:eb:35:f0:35:
35:38:1a:84:b5:8e:77:93:7e:aa:17:f3:c7:a8:2c:
e6:d7:9b:ce:ad:8c:a5:ea:e9:14:b4:cf:ff:5e:08:
72:d2:7c:1e:be:2e:9b:3e:18:f0:f9:5d:41:e3:d9:
22:12:0f:26:59:ef:56:cd:d3:f9:4c:d4:9b:b9:ca:
00:64:97:1c:23:ea:a0:94:24:56:06:a8:52:e1:25:
f0:66:25:64:f7:5b:ad:c4:db:91:f7:5c:07:cc:a7:
00:df:b9:5f:6c:b1:42:79:d2:fe:61:80:b7:ae:e7:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:31:82:58:16:2F:28:A2:AE:3D:6D:20:2D:6E:70:0F:F6:CE:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D637157E9D1611EFA27757A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
33:51:6a:f4:3a:ab:0e:c2:c0:af:5e:2c:55:15:5a:e7:e3:c9:
a4:6b:25:19:3b:d8:0a:97:9f:cf:2c:f0:35:e7:32:f9:98:e8:
e5:a9:c2:c4:24:f1:7e:7f:70:cf:1b:5b:c5:02:51:2e:e5:04:
e7:82:93:26:ca:58:3c:14:7c:e2:30:e3:f2:28:bc:23:ba:8e:
3c:91:d9:6e:a7:1a:ac:ee:e3:12:96:57:2e:0d:0e:ad:8a:2e:
7e:44:61:f3:57:da:2f:c4:ea:33:f1:a9:0b:ad:4b:db:24:ce:
b7:46:6c:38:36:88:98:02:9c:dc:d6:0d:93:a2:ec:0f:61:af:
db:14:df:3d:dc:7f:6f:4a:f7:fa:7a:6f:a4:ce:6d:fa:f8:ca:
e7:78:4a:bd:dc:70:d1:b1:0b:50:66:3d:2c:49:5b:64:4e:32:
da:c2:ad:72:31:3f:cd:20:4e:f6:33:34:ac:1a:09:8d:aa:de:
20:0f:89:bd:0e:c2:5f:5b:72:c0:e7:f3:da:a6:1e:90:b0:4b:
4c:1d:58:c6:a9:80:66:5a:3f:ed:2f:37:56:64:bb:5b:9b:b1:
1b:c3:fc:8c:3b:1c:6f:cd:8d:65:90:c6:ce:2a:04:d0:e8:44:
42:0b:0d:1a:cf:38:9b:30:0b:07:48:f4:c1:81:4b:9c:38:af:
9e:b3:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:48 2024 by rpki-client on console-fra.rpki-client.org