Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F58ED09D1911EFBF1C91B9762E951A.roa
File: F3F58ED09D1911EFBF1C91B9762E951A.roa (raw, json)
Hash identifier: QQDnLpYHpNY9UDreXJggVcBq0fIStP8bRT2PWWwYFKQ=
Subject key identifier: 97:D3:CA:D5:59:9F:6F:5B:20:B9:74:3D:25:C0:B6:5D:7E:E3:03:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F58ED09D1911EFBF1C91B9762E951A.roa
Signing time: Thu 07 Nov 2024 15:07:06 +0000
ROA not before: Thu 07 Nov 2024 15:07:03 +0000
ROA not after: Wed 11 Dec 2024 15:07:03 +0000
asID: 203020
IP address blocks: 154.202.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67957 (0x10975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 15:07:03 2024 GMT
Not After : Dec 11 15:07:03 2024 GMT
Subject: CN=672cd79a-c35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:97:1a:96:2d:fd:19:8f:3d:f4:88:59:3c:
56:cb:f0:c9:c3:68:d6:50:96:72:8d:7d:82:ba:c0:
87:f5:54:01:5a:c2:93:4d:15:1b:43:0c:0a:8d:a9:
5f:08:f7:c1:a5:d3:92:f5:42:27:d1:69:5f:53:d9:
d6:92:7e:cd:a1:70:7c:2e:07:9c:54:2a:30:5f:d2:
f4:b8:9d:2e:f2:c4:a3:ba:10:74:ba:f6:73:b1:83:
60:cd:34:98:98:2a:5b:75:ec:4f:e0:11:ae:0c:fb:
f5:6e:ed:3f:6a:a8:5e:69:07:f2:a1:e9:4b:ea:4a:
07:29:77:94:59:12:56:be:53:81:32:f0:4d:23:9b:
62:36:38:72:b4:f3:26:c7:0b:6b:9f:0c:6e:54:e0:
a6:fa:e5:10:36:34:a5:6c:95:f6:77:db:41:63:50:
3b:fc:ed:ad:d8:f2:de:8d:fa:86:f6:ee:26:8d:0f:
e2:8d:1d:c4:56:cf:c2:3f:98:dd:3c:85:0e:80:3c:
aa:58:52:63:d7:90:95:39:af:b6:82:af:40:8e:cd:
f1:7d:e5:95:e5:f1:21:b2:b6:f6:ec:97:ef:55:03:
65:6a:6f:5a:ea:21:23:bc:22:ba:78:5d:4c:cb:98:
d5:bd:e8:5b:55:42:1c:af:01:cd:e0:f3:ed:aa:64:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:CA:D5:59:9F:6F:5B:20:B9:74:3D:25:C0:B6:5D:7E:E3:03:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F58ED09D1911EFBF1C91B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:dd:62:2a:31:c2:9a:7d:4a:5c:2f:33:99:d4:29:9c:7a:7a:
3e:b6:0b:f0:fd:11:0d:10:37:29:8a:8d:32:3a:fb:41:a2:c3:
db:a3:f8:81:b9:ff:bf:a7:6c:06:1d:3b:63:bf:f0:b9:a7:76:
ad:d8:c6:b2:1e:17:7a:77:fd:54:6a:e4:e0:76:47:cb:25:9e:
e6:3e:ad:2d:af:2a:6e:55:8f:c6:1f:4d:1a:fc:53:55:9b:d8:
09:11:7e:1d:3f:0c:15:46:c7:7c:cd:26:1a:26:10:60:b4:05:
99:c1:49:2f:c6:71:8f:81:d4:c0:cd:54:5e:36:bf:54:e6:4c:
f9:2f:4b:0e:4f:b6:09:ea:de:b0:bf:cf:3c:3e:db:de:44:f3:
5c:bc:5f:4a:bb:f3:cc:e8:45:42:dd:9d:4b:7f:be:64:b1:40:
77:65:8b:2f:c9:0e:48:53:a0:24:af:b1:88:e1:e0:3a:fb:17:
e9:91:33:dc:a9:d9:a5:24:c3:1e:b2:b7:94:c3:dc:bf:ca:02:
4d:79:75:21:22:7f:5d:88:71:10:29:d1:82:78:49:5c:6f:e8:
15:db:5d:8b:3e:1a:54:77:e2:49:56:e3:5e:3c:36:d3:c1:91:
f3:71:17:2a:6e:cc:ef:36:13:0c:73:11:75:bf:8e:d8:50:d0:
fa:dd:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:59:21 2024 by rpki-client on console-fra.rpki-client.org