Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8E7E424B1711EFAF21786E762E951A.roa
File: FD8E7E424B1711EFAF21786E762E951A.roa (raw, json)
Hash identifier: 7iNd3J9Nq5QZlTw9Y/COsRo8uixKcUrDYyoX9YpNZpM=
Subject key identifier: F2:B8:41:F9:FE:86:3D:C3:57:3E:28:57:1D:88:FB:4C:C0:AF:64:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D75D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8E7E424B1711EFAF21786E762E951A.roa
Signing time: Fri 26 Jul 2024 06:26:28 +0000
ROA not before: Fri 26 Jul 2024 06:26:25 +0000
ROA not after: Mon 12 May 2025 06:26:25 +0000
asID: 55355
IP address blocks: 154.89.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55133 (0xd75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 06:26:25 2024 GMT
Not After : May 12 06:26:25 2025 GMT
Subject: CN=66a34194-71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:a6:45:a0:b5:3a:f0:0b:c8:a4:44:e0:21:
aa:74:36:83:42:c7:af:ef:a1:fb:27:77:f7:93:23:
af:ac:47:4a:06:63:b9:0d:88:ad:71:11:44:e5:ee:
00:c5:72:64:eb:e5:ba:e5:83:bf:39:48:61:77:65:
a6:7d:ce:8e:fc:ff:15:2e:92:9f:1e:f2:c4:e3:7b:
29:57:67:fa:6b:6e:6d:ec:ea:ae:6d:5f:8a:8e:82:
b3:eb:c1:1a:32:73:ed:86:a2:81:67:1c:b9:30:b4:
91:08:29:1a:61:d8:fb:e8:75:f6:b6:63:c0:1e:2b:
10:1b:60:0f:3a:9f:44:3f:4a:c6:b7:d7:f4:77:be:
ef:f7:81:28:77:af:be:7f:b8:aa:70:8d:9a:e4:30:
05:f3:a4:41:be:4f:89:ab:17:24:d3:52:e9:b5:28:
e8:de:e8:e3:1e:d8:cf:90:ea:f5:6b:0a:95:a4:f5:
89:48:c0:64:70:66:3e:30:18:e6:1b:12:81:80:88:
2f:33:0a:48:45:db:0c:d7:1c:31:df:06:90:d6:ff:
df:38:e6:0b:3f:15:11:c3:e2:08:04:18:2c:63:ef:
5f:b9:50:97:b7:2a:2a:96:e2:c1:d6:d8:65:70:6b:
6b:e1:c3:b9:ab:1f:eb:56:d1:e6:78:5a:7b:ae:d9:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:41:F9:FE:86:3D:C3:57:3E:28:57:1D:88:FB:4C:C0:AF:64:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD8E7E424B1711EFAF21786E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.4.0/24
Signature Algorithm: sha256WithRSAEncryption
90:05:9a:25:e4:04:e9:c3:c0:b0:91:52:cb:57:48:16:17:82:
be:a4:a0:d2:e9:db:88:69:85:13:f7:bb:e9:17:cb:f3:a6:22:
bc:19:fd:b9:b5:3a:80:25:94:76:55:38:24:7b:38:4e:13:39:
9d:ea:62:1f:f9:14:6b:5b:db:5c:26:1f:66:83:7f:5c:bc:68:
39:8d:4d:52:fc:79:a5:96:d2:ce:c3:51:00:d0:50:6d:46:b7:
56:93:ae:e9:1c:f4:be:81:96:1a:68:7e:b2:09:bc:be:70:5f:
7a:55:af:18:60:8d:bc:d4:18:18:4f:59:40:6c:ca:00:80:6d:
99:67:36:f9:88:98:c3:4e:64:82:13:3c:0f:3f:5e:2e:e1:e3:
50:ca:90:39:4f:cb:5a:47:86:01:7f:14:da:c9:60:82:56:df:
b1:55:e8:68:81:72:fb:de:3b:99:20:c3:4a:96:16:de:45:92:
39:47:12:e3:4c:e9:da:7b:27:f8:13:8e:f9:30:f1:90:58:3c:
0c:53:71:8f:2c:be:8c:a4:99:5c:e7:e1:6d:62:54:e1:8b:fe:
2b:fd:24:90:ee:80:29:2a:44:30:fc:70:98:98:d0:37:60:de:
34:a8:cf:ca:8e:d6:81:c8:3e:cc:46:fd:7a:33:35:b4:b7:eb:
a7:01:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org