Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32A98846A5F11EF8DF61A4E762E951A.roa
File: F32A98846A5F11EF8DF61A4E762E951A.roa (raw, json)
Hash identifier: yYyVuyLEnC6TxqiBwn4jX/H0I70aoVWpSHkQfUZLw08=
Subject key identifier: 4F:A7:FA:34:05:CB:1B:1D:50:C7:F7:B3:08:D4:F2:78:79:28:F2:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32A98846A5F11EF8DF61A4E762E951A.roa
Signing time: Wed 04 Sep 2024 01:49:41 +0000
ROA not before: Wed 04 Sep 2024 01:49:37 +0000
ROA not after: Mon 30 Dec 2024 01:49:37 +0000
asID: 17561
IP address blocks: 154.209.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59913 (0xea09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:49:37 2024 GMT
Not After : Dec 30 01:49:37 2024 GMT
Subject: CN=66d7bcb4-7984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:a6:37:9b:1b:12:6d:a4:dc:db:c1:86:0f:
51:ac:4a:78:b1:85:9c:8d:4a:72:76:c2:95:82:d5:
39:7b:8a:8b:c8:0d:4e:b9:4d:67:b6:82:5d:25:70:
be:43:89:23:fa:16:8a:5a:c4:46:9c:3e:3a:28:30:
f6:a4:90:b7:7c:c8:30:d8:c5:6c:d6:3c:fd:17:08:
16:03:60:b4:78:1e:20:f1:7e:b1:32:ef:2b:9f:20:
0a:2f:da:95:3c:ca:5e:f6:6b:e3:d7:18:82:95:5b:
eb:aa:c3:8e:d3:1c:fb:97:eb:be:c8:47:88:aa:d3:
5a:fc:fe:f3:70:0e:ef:8f:46:ba:25:ee:4e:74:37:
9f:59:75:a3:82:32:30:99:54:3f:43:36:81:d1:7d:
2c:9d:06:e4:ed:c4:eb:ef:b2:63:d2:2e:a8:08:ac:
70:e1:f4:1d:57:33:91:34:ce:95:c1:7d:6e:f3:4f:
e5:99:0d:fe:c3:2d:d9:fc:67:77:86:19:ad:4f:b2:
bd:70:c4:50:47:5b:7b:f3:6a:b5:7f:08:c9:0a:29:
95:d0:8d:d6:b7:7c:32:8a:f6:c8:e5:2d:2f:27:78:
15:0e:e8:09:c8:13:7d:bf:79:af:16:33:07:dd:d5:
e8:46:e2:42:5c:6f:40:06:30:9b:8e:76:03:f0:a8:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:FA:34:05:CB:1B:1D:50:C7:F7:B3:08:D4:F2:78:79:28:F2:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32A98846A5F11EF8DF61A4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:1a:52:71:36:58:2a:47:56:1e:02:a3:44:09:71:89:3f:af:
b1:09:0f:21:69:e7:80:19:6d:49:95:a0:94:3e:4e:33:5a:da:
b2:b9:28:df:5a:25:e0:38:10:e2:ef:08:15:07:92:9e:26:dc:
8b:c7:09:9c:01:24:a1:76:5b:a3:b0:51:79:4c:da:80:7e:be:
30:16:98:7c:a3:d9:da:ca:0f:84:fa:9b:33:73:d8:f3:1c:4b:
93:d8:6a:28:fc:93:48:09:59:59:3d:cc:9a:35:01:89:54:96:
39:81:a3:2b:e1:31:3a:30:fe:10:df:31:d3:d8:b9:1d:90:be:
6f:65:ec:4c:92:54:68:de:f7:6c:00:50:60:5a:df:11:2e:4a:
b0:ae:59:23:61:25:e8:c8:c0:10:dd:a0:75:82:71:36:eb:77:
ca:0c:88:38:fa:73:c9:2b:3b:31:ef:5c:92:00:9c:a2:99:81:
43:63:bb:83:68:81:1c:93:a9:e4:4a:a1:eb:ab:e9:60:81:f1:
71:33:cf:a4:f7:18:93:12:8d:a1:b1:a6:e4:38:76:83:bf:4a:
a3:a0:6b:65:4a:c0:17:db:af:30:7a:f6:70:33:be:96:b6:63:
82:d9:8c:ce:95:45:2c:fb:eb:82:d6:90:c8:9c:4a:7d:96:f1:
0d:18:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org