Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEAD834A9D111EF9D1EEC66762E951A.roa
File: DCEAD834A9D111EF9D1EEC66762E951A.roa (raw, json)
Hash identifier: vMwVvLzEnX60xbqGi8xjcE2ZJJWirYZZ1blcEQXnSEs=
Subject key identifier: BB:F2:A5:3F:35:3C:EF:A0:F5:85:85:56:82:BC:0E:F2:55:FE:4E:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011226
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEAD834A9D111EF9D1EEC66762E951A.roa
Signing time: Sat 23 Nov 2024 19:33:49 +0000
ROA not before: Sat 23 Nov 2024 19:33:46 +0000
ROA not after: Tue 03 Dec 2024 19:33:46 +0000
asID: 62240
IP address blocks: 154.195.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70182 (0x11226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:33:46 2024 GMT
Not After : Dec 3 19:33:46 2024 GMT
Subject: CN=67422e1d-76b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:1b:db:c3:dc:6c:da:f5:75:ca:b7:56:d3:
4a:98:cf:ab:b7:07:7a:2a:d2:cd:ec:61:82:20:5c:
d4:85:66:b2:ed:72:a5:4a:e1:d2:f1:10:ef:cb:e9:
83:8b:c4:bf:bf:30:cf:e6:bc:ae:73:d8:ce:4b:ac:
6c:5f:96:e9:0f:08:5c:ab:ef:ca:b8:d3:33:52:92:
0a:88:de:16:30:08:53:b5:c7:44:41:1a:81:58:12:
19:23:cb:74:3b:a3:70:be:84:a4:6c:13:c1:0c:a1:
64:f3:dd:86:94:db:85:51:37:76:27:64:a6:62:b6:
30:a7:04:86:42:2e:7d:69:0c:c4:62:7c:a8:ef:89:
0b:ac:3e:2d:71:f7:89:ae:25:e6:32:b8:38:46:a2:
a8:5d:31:98:72:cc:76:d2:34:4a:f6:0f:86:a4:8f:
2b:1f:a5:2d:10:2e:1c:3d:4f:05:99:17:b0:fe:56:
31:31:29:ed:15:3b:0e:76:b6:06:0c:f0:b7:f1:12:
99:fb:14:0d:9a:67:89:b5:2a:2c:3a:53:79:eb:79:
e8:cf:3e:5b:6d:05:9d:46:c3:5b:ee:06:3c:57:ac:
17:83:53:16:6a:a0:cf:dc:10:e3:d5:62:a4:74:23:
ec:f7:0a:a3:f9:41:c7:34:b5:29:f3:f6:17:bc:7d:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:A5:3F:35:3C:EF:A0:F5:85:85:56:82:BC:0E:F2:55:FE:4E:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEAD834A9D111EF9D1EEC66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e3:cb:be:26:e8:c4:0b:e9:a3:28:86:7c:63:8c:1a:da:10:
ff:9b:a8:70:8c:d5:9f:93:a8:19:27:0d:6f:76:46:6d:14:54:
46:1c:80:f0:92:02:89:c9:53:9b:1d:c3:5a:8f:14:99:e8:32:
26:2e:4d:3e:f3:a8:6e:4b:11:0d:57:14:5e:29:cb:50:ac:41:
54:0c:dd:2b:20:17:01:bd:e2:1a:25:bb:40:bc:c9:87:65:7d:
2a:09:bf:f8:52:6d:84:7d:49:fa:e8:2c:f3:ab:85:12:be:af:
27:84:b9:4c:34:a4:f8:b1:de:df:01:cc:40:75:5f:94:cd:90:
62:16:89:ae:d8:d0:64:b4:64:39:bd:f5:8a:4f:62:88:ef:60:
c5:1a:18:94:b7:b5:c2:61:af:b6:6d:01:eb:c8:70:c8:36:a6:
e9:f3:f1:49:6c:54:f8:a2:45:35:25:4f:80:ed:eb:65:37:28:
2b:13:6f:8a:59:18:c3:9a:a5:09:66:28:f3:3a:c8:30:8f:0b:
b3:2e:92:8f:05:43:b3:5e:69:24:84:64:d4:b3:50:04:7b:dd:
57:81:90:0c:34:12:e3:5c:47:ae:0d:b1:79:18:94:f9:39:2b:
f3:8b:69:f1:5f:4b:d8:a8:94:eb:26:43:1c:b5:68:f6:7f:a5:
10:c4:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:49 2024 by rpki-client on console-fra.rpki-client.org