Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FBDA0C950D11EFA5AEFA79762E951A.roa
File: D9FBDA0C950D11EFA5AEFA79762E951A.roa (raw, json)
Hash identifier: HORzrsz8ZjX0pQOZQn3Ftk1pbcL7FUTyLbPlfFz7MbM=
Subject key identifier: 13:A7:DC:6D:35:D0:79:EC:56:D6:13:B7:AD:73:D2:AE:95:8A:4E:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FBDA0C950D11EFA5AEFA79762E951A.roa
Signing time: Mon 28 Oct 2024 09:20:20 +0000
ROA not before: Mon 28 Oct 2024 09:20:16 +0000
ROA not after: Wed 27 Nov 2024 09:20:16 +0000
asID: 49505
IP address blocks: 154.223.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66217 (0x102a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:20:16 2024 GMT
Not After : Nov 27 09:20:16 2024 GMT
Subject: CN=671f5754-e856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:7b:e6:db:73:51:7c:52:6c:58:5d:02:40:
3f:42:78:68:4e:eb:bc:06:db:16:98:2d:e6:42:c9:
96:d2:f6:4a:f4:31:3b:50:2a:a9:7f:e7:b8:af:7b:
07:96:13:85:68:b8:da:44:76:3d:69:3b:a1:d8:c9:
ec:9b:9d:a7:f2:36:c9:13:49:44:60:d8:ed:51:2b:
88:74:e0:2f:3b:ef:a3:2c:42:c0:3e:0a:fc:eb:ac:
f2:03:4a:5a:c7:48:c7:d7:28:fd:77:de:ae:fa:7f:
ff:3a:0f:56:d3:2f:8d:ed:6d:96:0e:79:b4:b6:a3:
07:1f:04:1f:9d:0e:49:2c:5c:90:95:8d:44:23:8b:
52:02:d2:45:ee:85:66:aa:06:e9:48:ef:a7:25:25:
59:75:b8:be:0f:c4:cf:01:a2:21:29:a8:7d:37:c1:
f8:b2:84:5b:3e:d9:5e:50:08:c9:4f:ed:e2:fc:b8:
42:f8:b0:1d:ed:f0:01:c6:e3:31:1f:5b:c4:65:47:
9c:96:5f:68:00:78:df:82:bb:7d:ad:87:dc:e4:98:
1b:e5:05:4e:1e:7c:ab:e8:1b:b7:23:f6:90:5a:87:
21:44:87:79:39:f2:8d:9c:b0:bb:21:45:9b:d9:1c:
0b:8a:1e:c6:6d:9d:e1:7d:0c:37:44:40:41:45:fc:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:DC:6D:35:D0:79:EC:56:D6:13:B7:AD:73:D2:AE:95:8A:4E:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FBDA0C950D11EFA5AEFA79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.198.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:60:3a:b8:09:57:0b:a4:83:df:63:83:19:d0:ee:bd:96:8d:
20:d8:d5:be:03:04:5f:ac:36:69:4c:be:c2:23:fb:48:5b:74:
25:ca:86:37:f9:6a:98:7b:b1:98:5a:66:51:d7:e8:61:40:1b:
9a:62:f8:9f:63:71:4f:f2:15:96:22:6a:ba:39:56:78:f2:36:
db:a9:f4:76:17:0b:90:97:9a:ff:b8:98:bb:f0:db:72:7f:28:
20:08:c2:64:df:50:51:35:5e:98:cd:0d:27:91:7a:e0:e3:7f:
0a:80:e1:46:7e:be:f1:f4:3c:06:29:9e:86:33:dc:99:88:45:
52:c1:8c:e9:27:24:53:8b:36:e6:b5:c2:ff:31:2b:22:9d:c6:
2e:30:f7:7b:71:5f:3c:a8:9b:8a:be:76:db:3f:d0:d2:0d:97:
e7:1b:5c:ba:07:f3:77:02:69:8f:c6:00:9b:c4:ec:73:94:ca:
1e:06:e3:a4:2c:f4:1c:ef:f8:94:3c:1f:1f:42:c1:53:08:86:
02:b7:44:95:da:89:d7:f2:fd:4b:fe:a7:f1:26:1f:0c:30:7b:
9d:6c:4e:97:95:e6:79:8b:cf:34:dd:33:3f:6d:2a:f4:d3:f9:
26:8b:9e:c0:b6:60:2b:4a:02:7a:0c:12:9a:d6:75:c5:63:12:
77:2c:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:49 2024 by rpki-client on console-fra.rpki-client.org