Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBDEAB94A70811EFB6A44764762E951A.roa
File: DBDEAB94A70811EFB6A44764762E951A.roa (raw, json)
Hash identifier: rRSkzwaFpNpdSxhMKhUmIPfOgk9Jh9lmcPX8cbLhHS8=
Subject key identifier: 0A:49:9D:58:40:7D:2B:27:71:D0:6B:63:7E:9D:FA:E5:63:4A:C5:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBDEAB94A70811EFB6A44764762E951A.roa
Signing time: Wed 20 Nov 2024 06:29:57 +0000
ROA not before: Wed 20 Nov 2024 06:29:52 +0000
ROA not after: Mon 02 Dec 2024 06:29:52 +0000
asID: 21859
IP address blocks: 154.202.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69417 (0x10f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 06:29:52 2024 GMT
Not After : Dec 2 06:29:52 2024 GMT
Subject: CN=673d81e4-1db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:91:c4:37:b0:d1:fb:d9:4b:c3:a3:e7:e9:
05:ce:44:76:2d:e8:c0:86:82:83:38:57:9a:16:62:
e4:dd:cc:d3:e8:6e:0f:1f:b9:c3:b8:0f:4d:23:92:
9b:69:c4:a0:d4:50:7a:f9:69:97:29:99:12:b9:58:
41:60:d6:f4:74:71:b8:de:e0:fc:e6:eb:7b:58:c6:
40:8d:82:12:a2:7b:fd:94:94:38:e5:e4:ba:5e:48:
88:db:1c:e8:ab:1e:1b:bd:61:7d:50:94:c3:fa:79:
dd:a0:80:13:9d:8e:83:62:ee:e6:15:18:62:8a:63:
bf:7b:e1:e9:b7:b7:3d:c0:92:42:66:26:bd:66:ee:
23:6e:0e:8a:8c:ad:f1:36:59:13:53:74:88:db:cd:
04:c2:01:b0:2f:53:08:ec:ee:b1:fe:ec:83:1c:ce:
78:d0:39:1c:2e:43:e1:9d:67:5c:2f:d4:55:40:a7:
30:8c:0b:68:be:d3:6e:25:47:0f:96:eb:47:3a:34:
1c:da:e1:6d:7c:89:c9:ad:34:95:42:be:fd:8e:4d:
aa:bf:72:74:3f:a0:08:33:0a:a1:81:5f:da:ee:ce:
9b:ef:48:e8:4f:b5:0e:de:21:56:33:74:14:24:73:
cf:64:b4:5a:9a:cd:f2:51:97:88:6d:6a:64:a4:23:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:9D:58:40:7D:2B:27:71:D0:6B:63:7E:9D:FA:E5:63:4A:C5:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBDEAB94A70811EFB6A44764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.72.0/21
Signature Algorithm: sha256WithRSAEncryption
46:81:39:69:4e:5e:4d:5a:c0:d7:88:d6:b6:44:a7:5e:cd:db:
a1:6e:99:50:2f:27:4f:2c:c9:f6:2b:67:d0:6c:b4:04:63:88:
9a:db:6b:87:78:13:f7:93:b0:4f:48:23:f2:03:9c:43:67:46:
6f:38:8f:5c:57:71:d0:27:ae:bc:82:9d:20:ec:1f:6c:fc:38:
cb:99:43:af:fb:17:49:52:7e:68:df:6a:6b:c4:2f:fe:41:f0:
c1:07:15:00:90:1b:02:b3:51:c2:b2:39:23:52:60:f0:ca:ff:
2e:60:2b:cf:0d:35:06:71:73:45:dc:3a:87:cf:bd:d4:0b:dd:
cf:e1:ac:87:30:ba:c5:16:da:d0:00:3e:db:96:29:07:d5:04:
ac:9d:cf:a9:c5:a3:0c:27:55:5b:42:ca:61:a9:1a:7b:83:e6:
d9:e2:ae:bc:0b:4c:65:bd:cb:2a:81:d7:58:5d:1f:1e:ee:43:
a8:4d:aa:59:82:ed:9a:26:2f:e5:70:61:ad:ee:e0:c4:da:a7:
8a:a0:0c:06:8f:d4:9f:ac:bb:da:62:77:22:f6:a3:c8:58:2f:
5a:0e:7c:58:85:2b:c8:58:05:a3:1a:7f:7b:6b:16:d0:83:9a:
41:ce:53:8d:82:3b:67:da:12:50:de:25:45:16:46:40:6e:cb:
4a:0c:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:10 2024 by rpki-client on console-ams.rpki-client.org