Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F854A76A344911EF8D8C8379762E951A.roa
File: F854A76A344911EF8D8C8379762E951A.roa (raw, json)
Hash identifier: /0jeisBg8l+ZXi9QvHhzQwxA/XXSIlGTfFaPSQIFTv8=
Subject key identifier: 61:8A:A8:B3:D0:35:36:A6:B4:F5:CB:9F:D1:75:E8:EF:F4:C4:31:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C773
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F854A76A344911EF8D8C8379762E951A.roa
Signing time: Thu 27 Jun 2024 05:56:18 +0000
ROA not before: Thu 27 Jun 2024 05:56:14 +0000
ROA not after: Mon 30 Dec 2024 05:56:14 +0000
asID: 984
IP address blocks: 154.193.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51059 (0xc773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 05:56:14 2024 GMT
Not After : Dec 30 05:56:14 2024 GMT
Subject: CN=667cff01-1f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:5c:3a:2a:76:04:20:f2:59:d4:99:58:0e:
67:13:15:c8:51:85:3b:64:25:0e:8f:c8:7c:b0:24:
a5:b6:0e:99:7a:ec:d0:2d:22:8c:fc:20:65:9f:0e:
e9:ce:d4:c6:23:7b:a2:98:da:9b:07:2c:6a:73:59:
8d:ec:e8:f9:3b:71:38:11:b5:ee:29:ec:89:2b:e8:
05:14:c9:1c:b1:20:06:3d:54:68:79:a8:3c:06:3c:
87:f2:36:96:38:17:f4:05:65:da:4c:69:84:ce:83:
d6:93:18:7d:9a:7d:99:df:ae:fc:36:28:f0:d0:93:
db:fd:27:b1:c4:41:5b:d4:3b:d3:a0:0a:8e:19:d4:
6e:e4:fa:ad:ec:fd:3b:70:18:2d:97:cc:0f:7f:a3:
d0:81:69:fb:d4:f4:ff:47:da:a6:06:6b:3d:0e:fa:
14:32:7a:3b:63:0b:69:a9:fa:d1:1b:8f:93:1f:63:
47:93:a2:73:6e:9c:85:30:e7:37:64:49:66:43:80:
5c:2c:fe:07:84:5b:4d:ae:93:6a:78:e8:3f:1a:49:
b9:bc:11:8d:cc:6e:fe:9f:48:47:0e:ed:ab:94:2b:
86:44:ec:5e:c7:0c:1c:a6:05:3f:32:15:5c:02:17:
3a:9c:ee:4e:f8:58:4f:c0:55:51:6f:54:0c:eb:5b:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8A:A8:B3:D0:35:36:A6:B4:F5:CB:9F:D1:75:E8:EF:F4:C4:31:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F854A76A344911EF8D8C8379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:88:e7:04:d8:25:6f:1b:0a:02:48:f7:28:1d:fc:c6:34:da:
4d:e7:19:bc:a8:be:7f:ef:2b:99:62:25:5f:d9:28:ef:56:7a:
f6:a0:7b:a0:81:1e:7f:fb:08:98:cb:ae:53:e7:33:61:d2:9a:
ec:2c:0a:a8:d5:ca:6c:48:7e:fa:e7:0d:a7:55:8e:b7:99:21:
0a:3e:c0:5c:4b:03:52:53:b6:49:45:bb:40:cb:1b:f7:5c:d2:
af:39:82:c1:10:8d:44:e2:d8:d7:0e:d7:5b:11:09:3f:5e:10:
d3:ce:0e:a1:3b:70:3f:2e:91:9d:4b:58:33:d5:f5:c0:d0:06:
97:b8:b1:9e:95:fd:cd:e0:a4:ce:d7:77:e9:3f:a9:52:96:c8:
75:ea:d9:7b:30:f6:86:1d:38:8d:e5:10:a1:22:2e:05:5d:9d:
6b:62:23:8c:b1:bf:95:06:95:7a:0e:89:38:b6:d8:90:6f:88:
f9:b1:73:45:44:a1:01:3e:12:03:f6:55:12:24:20:f8:30:8f:
02:96:72:33:4e:aa:3c:d5:68:46:4c:96:d0:bc:4b:da:9b:b0:
cb:ef:00:94:a3:f3:86:06:fa:1c:c1:fd:2b:d8:e2:a8:38:19:
f1:7a:0d:05:e8:ab:77:8b:f9:96:f9:e1:5e:ab:49:5a:29:0f:
f8:b0:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org