Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F181DD9296B211EFB8481C57762E951A.roa
File: F181DD9296B211EFB8481C57762E951A.roa (raw, json)
Hash identifier: VS9OefjS41rlOIHJcmr2wYlSdAusVMs244AO46Plrwc=
Subject key identifier: DF:16:41:20:95:99:3B:9B:CF:F0:E2:78:BC:35:34:6A:8C:D3:72:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010407
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F181DD9296B211EFB8481C57762E951A.roa
Signing time: Wed 30 Oct 2024 11:34:37 +0000
ROA not before: Wed 30 Oct 2024 11:34:33 +0000
ROA not after: Wed 11 Dec 2024 11:34:33 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66567 (0x10407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:34:33 2024 GMT
Not After : Dec 11 11:34:33 2024 GMT
Subject: CN=672219cd-af45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:db:70:4f:52:d4:f0:f4:fb:26:6b:48:13:
19:93:9c:31:55:f7:a3:ca:9d:f3:85:9d:89:16:ed:
32:01:a6:ab:da:ee:fe:4e:f1:53:7b:35:48:64:0e:
4e:e2:d5:d3:da:88:f8:1e:ac:c6:3d:4d:ce:96:d1:
90:26:10:0b:23:0a:2b:23:d4:f1:f7:56:4e:d5:b5:
23:5b:59:1e:18:7d:3a:b0:85:c6:cd:5d:f1:5b:f0:
bc:3c:47:4b:50:44:be:8a:77:2f:3a:91:89:ec:6f:
ad:3f:c0:f3:53:48:92:80:af:2e:3a:84:3a:af:a4:
91:b8:e8:01:85:a9:da:ec:69:2e:43:36:82:51:53:
10:9e:06:76:72:ee:76:36:a4:96:87:13:71:7b:d3:
77:95:a1:95:f9:7b:8f:de:97:b3:b3:f6:d1:ee:49:
cc:13:36:73:dc:01:48:a0:d2:1d:36:3f:b6:39:27:
aa:b4:e8:ab:02:66:6d:10:63:6a:ec:4b:75:a5:35:
54:aa:a0:1f:e1:81:d0:85:e4:e9:07:3c:30:91:8c:
d5:4b:dd:92:ba:49:2e:5f:77:e5:ff:ce:6b:c9:62:
1c:84:82:4c:5b:83:af:eb:dd:a2:85:83:cd:18:5d:
65:5a:8b:5e:f9:8d:4d:61:c4:d1:bf:2f:32:46:22:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:41:20:95:99:3B:9B:CF:F0:E2:78:BC:35:34:6A:8C:D3:72:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F181DD9296B211EFB8481C57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0/23
Signature Algorithm: sha256WithRSAEncryption
85:03:23:b4:68:a9:47:ef:67:66:66:23:ff:ce:da:78:48:01:
c8:8c:0e:68:31:70:e6:3f:75:27:1f:50:e5:80:b8:1c:21:70:
a6:51:fa:a4:48:30:35:6b:b9:f3:ca:0d:4e:7b:89:e1:fe:f4:
04:72:6d:d9:90:6a:53:d2:8e:92:de:d6:a1:90:f1:83:e9:13:
93:94:7b:cb:5a:3e:cd:34:b4:76:78:86:33:72:82:09:31:ba:
a1:38:58:05:91:d0:e8:8f:69:f9:52:06:21:6b:29:cd:6c:cb:
46:58:23:bb:66:30:81:83:07:d0:a8:7e:48:ed:f0:8b:e7:2c:
ea:34:e3:96:3a:3e:83:20:95:e3:0b:a6:b6:ba:89:ed:80:f1:
c4:91:1a:a0:ff:9b:13:e2:51:6b:ef:4d:bd:41:9f:ff:a9:c6:
45:9f:06:23:bd:51:09:34:c3:e6:8d:19:d4:18:a8:32:24:16:
2a:7c:bb:83:c0:a2:a7:7d:3f:90:fe:02:a7:6a:0e:3f:8e:b6:
59:8e:56:f0:16:d8:d7:78:34:d8:43:9b:fd:df:11:fc:1e:d6:
a1:cb:8f:11:ba:07:d5:59:91:31:e6:bf:21:52:4a:20:24:cf:
95:bf:47:f9:c5:4b:c2:8b:4a:1b:70:f7:a1:4a:f4:49:65:14:
a3:39:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:53 2024 by rpki-client on console-fra.rpki-client.org