Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9C9BA4A32F11EF9EB09ABD762E951A.roa
File: FA9C9BA4A32F11EF9EB09ABD762E951A.roa (raw, json)
Hash identifier: SfIHgE+Wr+9k81wj+GRK7ff04ndcIQbo3XfIj1IOO4U=
Subject key identifier: C0:B3:DF:FC:55:60:E1:FA:1B:74:15:79:95:AD:B6:2A:92:64:D3:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9C9BA4A32F11EF9EB09ABD762E951A.roa
Signing time: Fri 15 Nov 2024 08:59:54 +0000
ROA not before: Fri 15 Nov 2024 08:59:50 +0000
ROA not after: Sun 22 Dec 2024 08:59:50 +0000
asID: 18779
IP address blocks: 154.203.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68966 (0x10d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:59:50 2024 GMT
Not After : Dec 22 08:59:50 2024 GMT
Subject: CN=67370d89-7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:f8:d6:e2:3c:09:87:8d:42:30:94:25:e1:
84:8b:52:1c:4d:b3:66:7d:9a:17:e6:f9:84:c6:da:
cb:53:ad:7c:ca:28:c4:e8:fa:7d:23:41:b0:ea:c4:
37:21:2d:de:e3:16:54:c8:b8:15:fa:ec:a0:af:ec:
2c:c9:c0:8c:ea:f6:5d:cc:28:e9:fd:e4:ed:f6:f5:
08:60:73:3a:49:e0:7b:fb:d5:f1:2e:41:eb:12:43:
dc:38:4d:d0:79:32:11:c8:4a:15:16:e1:f0:f7:b2:
45:e2:a7:2f:7c:b5:0c:19:43:08:51:ca:71:b3:5e:
80:52:ef:35:aa:c9:dd:19:64:64:df:39:b1:a1:64:
99:f3:38:68:02:b8:71:73:3f:ee:a1:e7:87:89:b8:
00:19:85:2f:54:3e:88:5f:e3:56:6d:e7:40:c3:f4:
7b:4b:05:8d:a8:a8:11:ec:37:01:84:fc:f5:31:5e:
d7:c3:ab:44:a8:36:6b:3c:6c:b2:22:87:1c:02:51:
e4:f6:d0:86:ab:a1:e9:ab:d6:8d:8c:47:c3:4e:c1:
94:22:1c:52:be:7d:34:67:0e:4a:5c:d9:e8:8b:9e:
0e:34:a8:f1:c8:5a:dd:5a:5e:88:ce:a9:76:49:41:
50:81:6b:32:d4:b5:81:98:1b:97:8b:f6:e0:d4:cf:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:DF:FC:55:60:E1:FA:1B:74:15:79:95:AD:B6:2A:92:64:D3:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA9C9BA4A32F11EF9EB09ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:a9:f9:ae:be:10:54:38:23:9c:a2:0d:3f:bd:67:20:dd:ed:
cd:ea:f5:fb:e0:d2:e2:cd:44:cf:db:a1:60:46:eb:6b:17:d8:
29:81:98:9e:cf:b0:27:43:94:4a:f5:ad:e9:84:7a:54:8c:ef:
e7:3a:18:1e:8d:3f:58:71:52:e2:83:82:13:05:e5:c9:40:03:
5e:26:2f:65:ed:c2:0e:d3:5f:6c:4d:0e:f0:58:28:d5:0b:df:
67:1d:db:95:4a:01:0b:38:7d:f1:ad:9f:9a:bd:d8:4d:bf:70:
f1:64:d8:3d:1c:21:b7:e7:1b:37:db:01:34:46:d1:57:ad:00:
9c:b6:76:68:e6:35:5c:92:f2:f5:35:2e:b8:77:89:55:9a:c8:
9b:98:d6:ee:a5:57:e6:87:4a:7b:63:85:2b:5c:c3:7b:36:18:
ee:01:1c:0f:26:eb:4a:1e:08:5e:33:05:f7:22:be:d1:fc:f8:
33:b3:14:22:be:83:37:9b:9b:62:b0:3c:06:fb:89:8d:1a:e5:
aa:1a:9a:b2:a5:38:c4:6f:93:de:36:19:b9:41:17:b9:34:30:
f4:96:7b:84:17:b3:f2:1e:0b:ea:21:11:68:26:72:7e:1e:f3:
5e:71:f2:54:ec:e7:18:4e:6b:53:c7:99:e2:d3:1b:cf:2b:37:
19:81:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:15 2024 by rpki-client on console-ams.rpki-client.org