Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7FC512768A11EF9A7526AE762E951A.roa
File: FC7FC512768A11EF9A7526AE762E951A.roa (raw, json)
Hash identifier: y51ZpEztDPBSHBm16G4fyDNRdKae534495qmw69CDU4=
Subject key identifier: 4A:18:19:17:BA:AA:D6:67:28:26:B6:AD:4A:9F:69:2B:47:45:57:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7FC512768A11EF9A7526AE762E951A.roa
Signing time: Thu 19 Sep 2024 13:27:59 +0000
ROA not before: Thu 19 Sep 2024 13:27:55 +0000
ROA not after: Fri 08 Aug 2025 13:27:55 +0000
asID: 133861
IP address blocks: 154.197.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61607 (0xf0a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:27:55 2024 GMT
Not After : Aug 8 13:27:55 2025 GMT
Subject: CN=66ec26df-4ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:29:23:9e:f4:ad:e4:13:8d:3a:aa:d2:91:
40:77:8e:f7:9b:80:f9:86:80:90:2d:84:c7:a4:ee:
ce:de:31:e6:24:06:da:18:3a:64:e4:56:ce:cf:44:
34:76:9c:b1:f4:91:4f:f9:38:2a:16:57:9d:6e:2a:
c2:72:fb:98:12:0b:53:c4:95:86:ff:26:8d:31:b7:
d6:77:eb:8f:f6:44:4b:42:cb:5d:71:dc:35:69:b0:
bb:9c:f7:b9:87:64:f7:67:9f:bb:70:e9:ad:e9:a4:
13:af:b0:ae:1b:be:fb:d5:eb:f1:75:ca:25:e5:c7:
64:b5:7d:51:61:6e:ff:bf:45:02:3f:a9:2f:5b:e0:
7c:f3:6f:71:24:6a:26:f6:05:f3:2c:75:c1:20:1d:
cd:87:f3:3f:93:69:1e:88:10:ce:22:2c:73:ba:0b:
fc:78:3d:c3:70:7e:d6:27:08:2f:f8:2d:7b:29:a3:
f1:97:d0:2f:f8:57:b9:58:38:a1:94:ea:08:0c:16:
c8:62:98:50:a5:ac:08:da:ea:39:68:9a:c0:1e:ab:
d9:0b:96:28:68:93:2d:78:07:70:e4:7c:6a:99:cc:
52:36:f0:f4:21:47:58:b7:07:15:d3:c6:85:1b:46:
bf:71:82:ff:a9:e4:02:2a:af:3d:b5:57:59:0c:78:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:19:17:BA:AA:D6:67:28:26:B6:AD:4A:9F:69:2B:47:45:57:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7FC512768A11EF9A7526AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.26.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:60:d7:5a:13:49:3a:58:e6:e8:07:0c:06:a9:f2:cc:2d:fd:
91:f5:b8:39:9c:d4:4f:8a:a6:38:55:06:d3:8d:51:33:ee:9a:
2a:7d:5a:fa:2a:b5:99:93:d8:cc:06:70:1c:11:34:eb:69:f5:
37:b6:83:b7:9b:73:05:06:f7:e6:09:8a:12:e9:f4:af:e8:cd:
8f:af:02:96:07:7e:07:1d:56:7b:8c:15:d7:46:78:1c:84:f9:
f3:09:5d:fa:e8:da:ef:45:46:41:c5:3e:68:68:58:94:8a:61:
bb:f7:55:5b:f8:32:20:4d:12:4c:a3:f2:52:26:89:ce:4b:a7:
90:1e:43:70:80:aa:fb:08:ea:0c:2f:14:8a:d3:c7:c7:2b:2b:
e5:d5:09:43:22:cb:da:a7:89:96:81:a0:22:75:44:45:c1:40:
40:8c:b0:d4:bd:d8:7e:04:41:44:cb:e5:09:08:aa:7b:85:4b:
f8:7f:1d:1f:04:14:64:66:6b:d6:fe:04:77:ab:1b:12:ab:9c:
dc:e2:c8:54:55:ce:64:18:ae:2c:71:9c:79:04:2b:5f:08:1f:
e6:ba:72:86:fd:04:b5:ba:93:10:4c:05:d5:6a:fb:02:9a:69:
d8:15:4e:04:51:05:73:1a:a3:36:44:c9:c4:d3:11:a1:a0:ba:
bc:d6:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org