Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA773C489C0311EFA0912768762E951A.roa
File: FA773C489C0311EFA0912768762E951A.roa (raw, json)
Hash identifier: WWXiTNQrtjZQ2K+zW73W8Sx0V9Azl60wWezQluSE2L8=
Subject key identifier: 3D:7B:D9:29:DF:30:0C:08:89:C0:F3:D3:B6:87:E3:93:98:F5:9C:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01084A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA773C489C0311EFA0912768762E951A.roa
Signing time: Wed 06 Nov 2024 05:57:17 +0000
ROA not before: Wed 06 Nov 2024 05:57:14 +0000
ROA not after: Fri 10 Oct 2025 05:57:14 +0000
asID: 133847
IP address blocks: 154.83.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67658 (0x1084a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 05:57:14 2024 GMT
Not After : Oct 10 05:57:14 2025 GMT
Subject: CN=672b053d-80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:2f:49:34:42:31:45:97:47:80:f0:aa:b5:
a9:22:b5:e1:9c:c0:05:1c:7b:e3:03:a1:bf:81:a9:
b1:e6:26:d5:3e:59:13:fb:4c:f2:0c:15:db:f9:09:
7e:5d:d0:97:7f:92:d4:11:d7:1e:85:61:0e:ab:c2:
39:5d:c2:05:4a:f9:40:5d:3c:ac:00:20:77:cd:26:
bf:9e:7b:a2:6e:c7:a1:7e:3b:58:ed:db:1a:27:9d:
fd:30:e2:4d:e2:a2:78:df:3a:a9:e7:05:f6:fb:99:
4d:38:c1:f4:e6:7a:94:f9:c8:25:d6:7c:85:36:64:
e6:41:56:bd:1a:ea:4e:36:74:b3:b8:16:81:81:9c:
e5:74:a5:fe:73:64:33:57:0f:9a:bf:88:cf:4b:0d:
c2:28:ad:35:b9:99:bc:d0:65:e0:e6:d7:5b:3f:0f:
8b:bc:c9:fa:d3:e8:a2:ba:f0:04:9b:e7:49:64:d8:
47:4f:34:dd:0d:35:0c:90:b0:e3:4b:ee:1f:fe:fd:
be:91:ac:f7:32:2c:94:5e:a6:e9:b0:7f:48:73:14:
66:c5:68:27:6f:15:b8:08:3d:bd:8b:9c:34:b7:7f:
8f:59:7b:62:f0:ea:41:63:0a:eb:a4:2c:2b:f3:96:
36:85:a1:9c:44:00:b7:5b:f8:ca:72:86:82:6b:11:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:D9:29:DF:30:0C:08:89:C0:F3:D3:B6:87:E3:93:98:F5:9C:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA773C489C0311EFA0912768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.112.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:c3:f6:01:0f:9e:ce:c0:3f:a2:94:d9:6a:29:02:a2:d1:bb:
c2:a4:19:95:ac:f7:1b:3a:f9:66:d7:72:e2:49:32:ec:1a:19:
09:8e:11:05:f6:c2:9f:a5:80:32:7f:4a:5b:8d:8b:3a:0d:cc:
e0:98:c8:13:82:4e:e8:9c:98:14:d5:b4:ef:a4:68:69:54:57:
7d:a5:a5:ac:b5:81:57:b0:19:7e:94:d8:79:c3:3a:62:a6:ea:
f8:48:ce:42:83:1b:18:9d:d9:6b:f3:8f:04:41:03:22:7a:34:
5b:8f:8f:6c:60:b0:67:ae:41:49:b7:60:d9:5f:1c:86:1b:cd:
be:95:5b:c9:7e:db:17:69:35:55:42:5e:11:05:87:9f:c9:c9:
fb:66:ea:0a:25:b5:a1:65:7d:31:e3:36:25:22:ff:20:c1:6f:
a7:e4:76:95:d1:6e:bc:6c:93:a4:f3:e7:d1:73:3b:2b:d4:ad:
86:f1:99:ec:c3:2d:8a:1e:fd:22:6f:40:d1:35:d4:da:73:47:
90:e8:27:73:4c:20:ce:c8:b3:37:6e:fd:18:f2:13:28:40:fa:
39:21:e0:51:65:af:37:31:fd:e0:99:e6:1e:1a:04:2a:f8:4d:
7c:a2:2b:f4:20:31:ba:a4:3b:5a:ef:d5:c0:58:51:c9:0c:9b:
14:f3:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org