Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB22AAEA19311EFA930F18F762E951A.roa
File: DAB22AAEA19311EFA930F18F762E951A.roa (raw, json)
Hash identifier: pF3GBoee3RZINOXNsHcfMrKqq/49zu7EAkskkqwCbgE=
Subject key identifier: 42:26:DF:2D:C2:1E:62:C9:63:EA:4B:95:CE:04:A0:B0:82:08:58:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB22AAEA19311EFA930F18F762E951A.roa
Signing time: Wed 13 Nov 2024 07:49:47 +0000
ROA not before: Wed 13 Nov 2024 07:49:44 +0000
ROA not after: Sat 07 Dec 2024 07:49:44 +0000
asID: 138915
IP address blocks: 154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68767 (0x10c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:49:44 2024 GMT
Not After : Dec 7 07:49:44 2024 GMT
Subject: CN=67345a1b-629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:13:46:82:1d:2b:f8:64:48:83:92:70:03:
f8:0c:1a:26:aa:e5:cf:c0:7f:26:66:35:1e:d5:6c:
b7:32:12:ed:80:fa:4b:9f:c9:f9:5c:92:4d:d1:3a:
12:5b:01:66:53:d7:59:a4:23:ab:8e:ca:d2:cb:78:
fe:77:2e:4c:0f:aa:f4:0c:8b:0e:c1:3a:97:03:06:
c8:e8:20:9a:c6:39:be:40:e8:63:52:9f:a6:a0:2c:
b8:ad:b9:b0:00:e5:4a:66:82:eb:61:8e:6a:27:05:
30:f8:d8:4a:b0:5d:9e:98:8b:fa:8b:4b:7e:2b:d4:
14:10:2c:f7:a0:8f:68:14:ac:96:39:14:04:c9:da:
a0:70:ec:72:be:5a:24:98:83:77:61:1f:57:d0:2b:
49:e1:48:44:7c:d4:5e:12:d9:a5:3a:11:f9:65:73:
a2:21:43:17:98:26:f1:dd:35:40:cb:59:3d:76:fc:
30:77:cf:aa:5f:03:ff:56:9c:fc:c8:d9:bc:71:cf:
7e:07:5e:cd:9c:83:5d:49:d7:61:a9:ee:ec:d3:78:
6f:25:22:d9:14:68:13:5b:61:f6:08:5e:71:f8:96:
5f:4c:54:22:c4:80:96:fb:38:a8:4f:79:b3:17:87:
a8:c1:76:e0:e1:9a:cb:a8:49:e1:53:2b:b8:ef:e5:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:DF:2D:C2:1E:62:C9:63:EA:4B:95:CE:04:A0:B0:82:08:58:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB22AAEA19311EFA930F18F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.56.0/23
Signature Algorithm: sha256WithRSAEncryption
21:e6:7e:07:3c:81:2c:ec:28:d8:8d:c9:fd:ae:e5:a5:90:9a:
ef:d8:66:f4:5a:04:ee:0c:1f:29:e9:0e:f5:44:07:cf:2d:75:
d9:09:e4:77:19:1c:e6:59:bc:00:c2:fb:73:01:d3:c6:a2:7c:
9a:1f:4a:be:3c:9c:8d:43:57:ac:c2:04:3b:1b:9d:09:2a:ba:
c3:22:52:51:c7:7d:76:e0:ce:8f:fc:17:1d:5c:b8:f9:fd:73:
ca:2b:f4:ec:6a:37:57:a6:2d:68:1f:1a:09:78:58:11:1e:7f:
ee:52:78:fc:b8:c5:4b:20:8c:2d:03:70:14:bb:db:27:54:a9:
4a:b6:bc:fb:53:6a:a1:3d:74:35:5b:b7:50:05:3f:6b:8c:aa:
29:d0:80:78:99:e7:03:42:44:26:3c:c7:6a:25:2e:64:f5:af:
4b:f2:0b:a5:80:b2:63:5c:1d:75:d7:87:1e:da:53:67:3a:2f:
ee:cc:48:a2:78:8e:68:e4:a8:f3:b7:5c:38:15:cc:ab:f4:b0:
85:65:e9:d0:d1:c8:70:1a:4b:08:c2:df:b9:7c:54:b5:75:32:
3d:93:9b:4a:09:eb:2d:dd:22:d0:dc:16:f6:6b:2a:c8:87:98:
98:fd:20:d5:6a:d2:45:0f:bf:0e:e7:cd:41:73:eb:08:b1:f3:
e0:1a:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:49 2024 by rpki-client on console-fra.rpki-client.org