Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1896C30AD5D11EF8ABC124A762E951A.roa
File: F1896C30AD5D11EF8ABC124A762E951A.roa (raw, json)
Hash identifier: GbRZagYD74O48u4EZXbuxuWO6tSWLiAiGmIFvrwL+6Y=
Subject key identifier: 64:27:22:10:89:B2:8B:9F:C2:C0:72:32:CE:F5:8D:65:F1:55:AC:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1896C30AD5D11EF8ABC124A762E951A.roa
Signing time: Thu 28 Nov 2024 07:54:07 +0000
ROA not before: Thu 28 Nov 2024 07:54:03 +0000
ROA not after: Tue 11 Feb 2025 07:54:03 +0000
asID: 9009
IP address blocks: 154.95.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70903 (0x114f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:54:03 2024 GMT
Not After : Feb 11 07:54:03 2025 GMT
Subject: CN=6748219f-6b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:c1:d2:4c:37:f4:36:b6:a3:62:25:b4:e7:
f3:71:a9:5d:99:0e:04:54:9e:7a:4c:ee:cd:68:88:
b7:c6:75:59:33:a3:42:f2:17:74:22:7b:7a:14:63:
d2:37:4d:7c:fe:6b:ea:60:17:e8:bb:8c:55:74:7c:
9f:00:1b:a5:4d:7f:7e:3b:78:ca:00:dd:35:8e:8d:
dd:22:2d:03:24:c4:71:87:d6:f5:4a:6e:2e:0d:71:
d3:7e:bc:78:2c:11:3d:5b:99:42:27:dd:9e:de:09:
a5:c0:53:0d:58:63:bf:a9:f9:9a:e9:77:c8:06:2e:
f4:d9:a8:e9:3e:7f:af:85:14:67:73:b1:6e:c4:fd:
ce:fc:ba:eb:4d:05:7f:61:a3:eb:52:6e:c0:2b:a7:
0c:9e:8c:d6:97:ba:f1:0a:3f:79:49:cb:c8:0d:88:
3a:ef:f6:ce:73:2c:25:90:5b:97:f5:df:b0:fd:1f:
8a:db:55:97:6d:d8:1f:a2:ae:9f:0e:b8:16:4d:fd:
39:7b:c9:e2:ee:9d:3b:2d:14:d8:c1:71:5f:d7:73:
23:4c:e7:7c:3c:b7:93:5b:80:37:2f:45:3f:c9:18:
9b:00:a5:1f:23:52:4a:be:82:99:e4:08:f8:38:2c:
2f:ea:d6:22:5f:9d:76:96:92:a5:c1:56:ef:05:94:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:22:10:89:B2:8B:9F:C2:C0:72:32:CE:F5:8D:65:F1:55:AC:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1896C30AD5D11EF8ABC124A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.38.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ca:86:0f:6d:34:9e:97:0c:55:ea:f0:dc:23:f8:b0:de:2f:
7a:19:b2:e1:a8:fb:82:ed:73:08:52:e0:fd:04:6d:49:8f:d9:
19:a4:30:42:6d:40:c5:66:fa:e4:b4:5f:a9:01:3c:21:46:1f:
e3:ba:3b:cb:d1:25:77:a4:82:4d:c4:ce:af:6c:66:36:82:03:
20:cb:1b:e5:92:8c:06:3d:9b:8f:8c:35:1f:b9:ee:85:5b:a6:
96:96:dd:b7:24:cc:3d:9b:d9:79:12:b4:c9:26:3d:1e:35:a1:
d0:63:97:d4:9c:2e:59:28:e4:a7:bd:ba:71:8c:cc:3f:59:17:
c4:75:45:64:a9:75:58:d6:77:9a:92:87:52:11:75:55:08:90:
a2:1f:9e:82:e7:67:f6:39:0c:00:5a:39:8c:94:1a:e0:d5:80:
ea:46:33:97:aa:ec:b7:64:b2:96:49:b0:ea:9e:be:e4:9e:0b:
26:e4:75:21:e0:3b:c2:b0:b6:5e:16:9a:4c:00:9a:8c:78:69:
f1:04:60:36:95:d2:03:de:e8:8d:ae:01:61:28:bf:56:35:a3:
f3:5c:6e:43:4c:72:19:8f:eb:0d:0e:27:93:85:7b:ad:43:85:
76:e2:17:71:b9:41:01:b3:f6:3f:9a:d9:84:54:42:1c:c7:cc:
b0:32:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 14:47:07 2024 by rpki-client on console-fra.rpki-client.org