Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C5A9CE32B911EF9AC55DA4762E951A.roa
File: F8C5A9CE32B911EF9AC55DA4762E951A.roa (raw, json)
Hash identifier: vGtyBPxL5Xxiy/hdPGb72KbAVLOy1jiHW0lLbhudxVk=
Subject key identifier: A3:BA:CE:62:72:2A:38:FE:9D:98:15:B0:0C:F7:98:D9:94:27:78:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C645
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C5A9CE32B911EF9AC55DA4762E951A.roa
Signing time: Tue 25 Jun 2024 06:13:00 +0000
ROA not before: Tue 25 Jun 2024 06:12:56 +0000
ROA not after: Fri 03 Jan 2025 06:12:56 +0000
asID: 40065
IP address blocks: 154.84.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50757 (0xc645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:12:56 2024 GMT
Not After : Jan 3 06:12:56 2025 GMT
Subject: CN=667a5feb-39ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:e6:81:78:85:18:5a:d5:dd:42:b4:c2:34:
95:a9:7d:ec:78:da:28:2b:5d:06:a5:a7:26:ba:f8:
77:cd:e8:e7:5f:c6:3e:1e:fa:da:d6:ea:0d:b5:d4:
b7:35:fa:2b:5f:a5:76:f8:6d:34:43:44:71:09:6a:
c0:e5:4f:f3:ac:71:48:63:4e:63:00:a9:e3:84:de:
13:c9:be:72:a1:59:8a:60:0e:dd:66:01:87:be:cb:
1e:c1:ac:50:eb:c7:b6:73:c4:92:e2:91:68:23:24:
a1:93:d3:03:1c:f4:9a:0c:74:1d:58:56:6a:d6:ca:
58:3e:d9:b9:93:38:74:f8:21:a4:44:58:90:e5:0c:
d0:55:c5:d7:21:65:a6:58:c1:9a:25:f8:65:d6:1c:
d4:5d:65:2c:91:71:78:81:4b:e4:03:c9:1f:86:6c:
ad:11:5e:0f:4e:91:9e:d7:40:ee:c8:a8:de:67:ba:
af:9d:9e:99:6e:6f:ca:b9:02:1c:8b:39:f2:8f:cf:
03:09:3c:be:94:8f:cc:ce:1d:c4:6c:30:d6:78:4d:
d6:9d:c3:7c:75:7c:f0:ce:18:b6:e5:f5:38:ac:e8:
70:98:13:45:1d:4d:d2:42:58:0d:93:59:cc:fa:b8:
4d:90:07:6f:a1:6a:f8:14:1d:5a:9d:1b:e6:2d:1c:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:CE:62:72:2A:38:FE:9D:98:15:B0:0C:F7:98:D9:94:27:78:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C5A9CE32B911EF9AC55DA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:e7:19:f4:03:1e:97:0c:6b:67:85:8b:a9:4e:dd:9c:21:ca:
55:2a:3f:c6:8c:b7:3e:51:25:a1:b2:e3:67:59:f2:2a:73:08:
3e:a9:e5:ea:49:22:2a:c0:52:c6:0d:29:ae:8d:40:bd:52:b0:
8b:cf:2e:56:e0:43:30:09:45:38:fb:f8:8e:02:05:43:4f:1c:
dd:2e:d3:cc:31:01:01:8d:d5:d9:e1:8b:4b:48:00:34:69:11:
e5:a0:ae:c7:ad:db:76:58:10:9a:6e:2f:3a:da:c1:51:50:f0:
ff:a1:86:38:ac:ec:18:a7:9a:89:ef:03:6f:f4:fd:e9:f9:fa:
91:5c:07:1d:95:23:13:0e:7c:2e:15:a7:ed:12:f4:0d:97:b6:
ba:90:9c:72:ec:b6:d0:70:68:bb:e5:88:4f:02:6e:57:aa:0c:
db:66:27:9b:2b:3c:80:2f:06:9e:2f:1d:5d:7e:48:39:04:ae:
47:d9:9e:d4:7b:fa:b7:d6:4b:fe:5c:fb:76:b2:78:95:6e:0f:
a1:a9:ab:b9:af:55:74:4d:5a:42:6c:1d:67:f9:7d:e1:35:a7:
e0:3e:0e:2e:a3:bb:32:07:6e:87:6e:04:d9:7f:bf:04:b0:ae:
06:a4:b9:08:ba:1b:04:0f:18:df:7a:fa:70:c2:0e:c2:b0:33:
2d:b1:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:54 2024 by rpki-client on console-fra.rpki-client.org