Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D711B8C49EAF11EF8A1663AF762E951A.roa
File: D711B8C49EAF11EF8A1663AF762E951A.roa (raw, json)
Hash identifier: z0zIlmqpHDl0RY3DcgRz2XflJ+FKsOCH/HgRB5Vd+LA=
Subject key identifier: 33:56:94:3A:ED:BD:F8:7B:7B:DF:90:56:8E:33:31:33:36:C8:F9:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D711B8C49EAF11EF8A1663AF762E951A.roa
Signing time: Sat 09 Nov 2024 15:32:34 +0000
ROA not before: Sat 09 Nov 2024 15:32:30 +0000
ROA not after: Thu 12 Dec 2024 15:32:30 +0000
asID: 398823
IP address blocks: 154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68135 (0x10a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:32:30 2024 GMT
Not After : Dec 12 15:32:30 2024 GMT
Subject: CN=672f8092-8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:ea:66:67:20:36:d9:34:2a:dc:f7:e3:7e:
77:35:86:ff:01:9a:24:c3:40:0c:b6:6f:9a:9c:40:
82:3c:cf:f6:d4:f0:7e:8d:31:eb:80:50:ad:43:17:
d2:93:ce:62:02:59:99:bc:e1:17:65:84:83:28:d7:
d9:d4:a7:d1:6c:12:11:ab:eb:7c:df:37:8f:e5:46:
77:7c:59:0e:06:17:55:36:06:65:47:6f:75:4e:c6:
87:68:0d:b6:21:a3:ec:60:04:fd:55:cb:b9:fb:5d:
39:6f:9e:c3:3d:d1:56:66:d4:06:81:c5:68:dc:15:
36:a7:f9:df:fd:95:81:eb:4e:6c:da:b3:d2:3c:8d:
92:fd:33:91:5b:06:4a:31:dd:79:4b:b6:f6:82:4b:
30:57:b4:5e:43:21:57:c8:26:4e:2f:86:85:a4:0f:
19:1b:7b:fb:f3:58:63:bb:b3:9d:0d:85:27:d6:01:
74:6e:df:a3:fc:11:b2:0c:96:a7:a5:bd:63:03:33:
72:fa:e8:b5:f9:5a:e6:d5:a6:36:96:19:7a:7f:43:
3d:c4:59:74:3c:5c:9d:4c:77:05:17:fb:34:56:98:
be:9e:7e:fa:89:91:dd:c6:7e:ea:11:97:19:47:37:
11:3d:a2:cc:c8:1d:6b:e6:e3:69:ee:65:7d:40:c7:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:94:3A:ED:BD:F8:7B:7B:DF:90:56:8E:33:31:33:36:C8:F9:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D711B8C49EAF11EF8A1663AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:2a:77:8c:65:82:4c:c5:00:ae:cf:ee:48:34:39:86:57:1f:
46:40:08:0d:e1:89:92:78:21:0b:76:5e:a3:d6:9e:7d:5d:0f:
9f:2a:c3:a2:95:51:b9:40:7a:9f:1a:cf:ff:64:05:6c:5f:08:
61:ec:a3:86:ef:02:9c:6e:11:d7:af:8a:9f:97:18:b4:76:37:
e4:d1:1f:7d:b9:96:57:4d:0a:89:9d:51:84:a8:99:16:10:83:
d5:3e:f7:81:72:26:7f:a7:41:b5:58:bd:53:c2:22:36:6b:3c:
a2:ca:e6:69:6f:96:58:aa:15:1c:10:80:b6:99:6a:19:9d:02:
49:5f:c1:5d:55:84:3f:62:4e:c6:fb:7c:a6:92:89:4e:48:7b:
c4:6b:e2:1a:9d:30:0b:b2:d6:de:29:ca:fd:55:9f:dc:25:33:
25:25:3b:37:7b:54:6b:e9:b5:0f:8f:c2:27:4a:f8:26:78:8f:
64:8e:33:c6:41:a4:a0:5f:6d:bc:23:13:02:73:63:0a:b1:43:
6e:0d:af:0c:07:f4:ab:d2:26:e8:76:f1:45:5a:de:b5:bd:22:
4d:a7:62:b4:c9:28:48:3f:e5:12:e5:2f:84:3a:1a:62:9c:a6:
ca:b9:a7:e0:e4:57:b0:5e:e5:6c:97:9a:9f:7c:10:2f:64:ec:
c7:9d:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:26 2024 by rpki-client on console-fra.rpki-client.org