Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322BDEC3DCA11EF9324DE56762E951A.roa
File: F322BDEC3DCA11EF9324DE56762E951A.roa (raw, json)
Hash identifier: wk3dGrlQAv26VRt2OtXGC0lFaqq0R8qIyVXt2anvL64=
Subject key identifier: 28:76:75:46:F1:FB:F6:04:D8:88:7E:5A:58:9B:81:D9:40:C1:49:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CF84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322BDEC3DCA11EF9324DE56762E951A.roa
Signing time: Tue 09 Jul 2024 08:12:14 +0000
ROA not before: Tue 09 Jul 2024 08:12:11 +0000
ROA not after: Mon 02 Jun 2025 08:12:11 +0000
asID: 137263
IP address blocks: 154.86.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53124 (0xcf84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 08:12:11 2024 GMT
Not After : Jun 2 08:12:11 2025 GMT
Subject: CN=668cf0de-42bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:f8:36:00:27:ea:3d:46:ec:a4:47:90:b1:
6b:bd:cd:ff:b3:0a:52:b2:a0:04:31:cb:02:5a:41:
80:07:42:70:35:75:a6:d3:41:c3:21:b4:a5:01:43:
5f:1e:6b:0d:39:5d:47:62:b4:ea:70:2b:f7:ec:b8:
36:87:8f:8f:c2:ce:35:c3:33:3d:e8:b0:88:61:23:
10:67:77:7d:63:36:b9:ce:0e:dc:6d:c6:8a:a4:e6:
da:4a:d6:4b:6c:f9:80:55:7e:66:cb:50:88:75:1f:
a5:26:68:a0:fe:25:21:73:9f:db:84:b1:bb:ea:bb:
49:6f:ba:d3:59:e6:33:da:f7:ea:f3:78:35:dd:bd:
64:6e:ee:be:ca:b7:28:ab:44:60:0b:2f:29:c1:49:
0e:2e:62:eb:4c:f6:4b:fe:26:ba:6b:4f:07:10:76:
eb:64:c6:c6:61:35:17:06:9b:22:15:8c:27:bd:d8:
94:81:44:9e:d4:6f:58:90:15:5a:16:cf:b4:86:37:
e0:ec:26:95:54:f3:c0:32:bf:ce:b6:99:14:68:b7:
1e:86:c2:76:09:f8:9d:f8:f4:85:36:54:92:5f:7c:
d2:f5:60:33:7f:4b:26:96:97:67:e0:bf:69:91:38:
89:9f:13:a4:6e:1e:e0:8c:63:0e:00:e3:19:0a:8c:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:75:46:F1:FB:F6:04:D8:88:7E:5A:58:9B:81:D9:40:C1:49:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322BDEC3DCA11EF9324DE56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.4.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:e8:da:b1:89:98:f9:90:9d:49:ea:95:2c:d5:2b:72:6f:da:
0f:db:ad:49:f8:cf:c2:94:92:75:7a:6b:fd:ec:0d:90:0d:54:
60:a4:bc:62:43:59:18:00:d9:37:f9:3d:7d:8c:37:c7:e3:5b:
bf:70:0b:08:aa:c7:92:1a:57:92:90:51:83:e4:72:5f:d4:27:
be:0f:15:bd:ce:5d:55:42:1d:6a:c0:c0:3d:ea:c3:ae:74:85:
cb:ee:67:83:dd:78:83:72:10:57:5c:5f:17:b6:ed:46:30:0d:
16:0a:c4:2e:79:49:c6:00:28:d4:b8:00:0c:6f:3b:40:97:bc:
16:59:82:b4:b5:63:9a:8b:22:8c:e8:47:d6:81:18:f6:63:3c:
02:d3:22:14:ee:57:f9:16:fc:3d:7f:96:95:df:c4:79:1e:dc:
cf:8c:21:15:c2:ac:ab:2b:6e:7b:42:4d:c6:3f:ab:7c:11:09:
d0:25:87:09:b0:5b:ee:a9:3c:94:8c:c9:1c:63:03:96:b4:61:
a2:01:ea:d5:36:fb:26:76:78:ae:9d:26:e4:61:03:5d:a1:e8:
53:f4:8a:28:cf:30:d0:60:6b:83:ad:22:12:a7:2e:47:51:d1:
24:5c:2b:3f:ac:6c:ac:e4:61:1a:8f:4d:af:bd:59:5b:c1:43:
0c:6d:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org