Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4475776725611EFBEEDB361762E951A.roa
File: F4475776725611EFBEEDB361762E951A.roa (raw, json)
Hash identifier: tvPs9wJm/PWDDgrYMmVuhMy7CljCznRzJifEhmFDwiY=
Subject key identifier: 2D:F4:B4:46:94:3E:D8:C4:DA:EE:A2:93:19:CC:69:4D:12:F5:51:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4475776725611EFBEEDB361762E951A.roa
Signing time: Sat 14 Sep 2024 05:05:26 +0000
ROA not before: Sat 14 Sep 2024 05:05:23 +0000
ROA not after: Tue 31 Dec 2024 05:05:23 +0000
asID: 17561
IP address blocks: 154.217.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60876 (0xedcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:05:23 2024 GMT
Not After : Dec 31 05:05:23 2024 GMT
Subject: CN=66e51996-eaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:db:6f:6b:1e:aa:ec:0e:6a:36:b7:9a:e0:
98:74:23:55:e0:ea:2f:a1:55:41:2a:4b:d4:8d:01:
ba:78:27:eb:0a:95:45:d9:54:1d:b7:f2:14:ac:7d:
fe:a3:22:ba:98:73:b6:85:4c:a9:df:ad:96:3d:44:
08:4f:0c:1c:48:fe:25:9e:db:e9:7d:4e:b6:af:01:
bc:c0:e9:7c:3e:54:82:bb:d6:1e:e2:7f:cf:e8:e6:
40:ad:1f:a8:70:7e:01:4b:5a:30:6b:cb:41:81:02:
d6:3e:e1:f3:73:9f:ab:34:66:4d:fd:2d:5a:3b:2d:
fa:e8:67:bd:b6:5a:94:ac:80:26:60:1f:c6:64:bb:
59:cf:8c:4a:d4:d0:15:a2:2c:ee:a4:5b:ea:e0:f7:
d4:06:c9:c6:bf:c8:2b:e8:84:7f:aa:41:7d:d4:e2:
36:00:a6:b9:c9:19:2e:f1:b9:70:c4:7f:c3:0a:11:
30:99:4f:42:b7:c1:b8:e2:94:b7:c0:62:78:f9:d8:
63:65:92:62:e2:e5:f4:4d:b9:db:65:8f:10:e4:d9:
3f:e5:df:9e:6a:f1:7d:ea:d2:5f:44:39:d7:4a:86:
50:44:9a:29:7d:8d:04:37:79:cb:0a:e5:c0:6d:02:
86:4c:18:6f:ef:09:0f:4f:93:73:d7:61:de:d5:66:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:B4:46:94:3E:D8:C4:DA:EE:A2:93:19:CC:69:4D:12:F5:51:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4475776725611EFBEEDB361762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:a3:c6:c5:0c:06:a6:82:35:c2:f7:58:d5:71:fa:bd:13:e2:
76:75:f0:31:37:86:6e:78:7e:0a:52:fa:25:1b:c4:2c:e4:7e:
7b:18:aa:c6:85:9e:59:7d:b5:d6:01:af:f2:14:14:59:86:9a:
e9:b2:2d:2d:9a:42:a1:ad:aa:5b:8b:f2:e0:e0:9b:3c:d7:38:
21:51:40:16:13:6f:76:c5:a4:3b:62:a8:9f:2a:7e:b0:c4:7e:
69:d9:2c:28:ff:c3:9a:b6:69:f4:f0:bd:0f:54:7e:a4:c6:59:
05:c6:f2:02:96:07:de:50:0b:b1:0a:ba:b6:76:1e:60:da:2a:
92:6b:f4:05:7a:11:4d:11:ec:76:6c:bf:4a:a6:32:fc:d1:84:
3d:d5:49:99:de:23:c0:91:74:3a:89:cb:f6:a8:e0:ce:d3:0c:
ff:64:c9:cf:c8:03:e9:ae:10:8e:cd:2b:38:40:17:8e:26:c2:
4d:18:ee:47:47:38:12:94:94:5c:15:e0:72:27:05:24:87:73:
6b:4c:06:9b:a9:e1:f1:f7:7e:96:e8:39:4b:0f:56:f2:04:ae:
0f:21:f0:63:28:ed:31:2c:34:aa:82:a3:7b:7a:60:7e:bb:88:
09:40:ea:ea:e7:d2:e0:b1:90:97:9f:54:91:53:d3:e6:c9:2d:
9a:bc:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org