Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FA4C69B5D11EFABB53F4D762E951A.roa
File: FF0FA4C69B5D11EFABB53F4D762E951A.roa (raw, json)
Hash identifier: AH+QBe2pP4CpY6q7xNg8F4Q/WrWa6JZp9f6ujDz7Ac8=
Subject key identifier: 7F:1C:19:EC:1B:68:73:F4:A8:A3:57:9F:32:58:EC:05:9C:7F:12:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FA4C69B5D11EFABB53F4D762E951A.roa
Signing time: Tue 05 Nov 2024 10:09:09 +0000
ROA not before: Tue 05 Nov 2024 10:09:05 +0000
ROA not after: Mon 13 Jan 2025 10:09:05 +0000
asID: 22773
IP address blocks: 154.84.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67473 (0x10791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 10:09:05 2024 GMT
Not After : Jan 13 10:09:05 2025 GMT
Subject: CN=6729eec4-802e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:d6:ee:4c:6b:3f:f7:36:09:81:73:63:b0:
fa:a0:9d:c9:b4:18:5c:51:77:6a:cb:f4:a4:dc:c8:
a7:c7:0b:6f:ea:25:7b:67:8d:14:91:5c:6e:ea:fb:
8a:04:cd:9a:47:ed:81:c9:b8:47:b7:8c:3a:93:f4:
7b:e2:dd:84:24:f8:66:86:a2:d7:4f:80:1c:66:3f:
e2:a7:6c:fb:3e:9a:82:6f:b6:07:5c:49:be:24:7a:
59:c3:28:b2:86:0a:02:77:8f:97:d5:5d:b9:9c:3f:
1d:dd:b8:96:61:54:47:9f:88:ae:86:4d:44:35:9c:
cd:fe:b5:3f:f3:14:7c:01:82:5a:3f:82:b4:03:8b:
e7:df:7e:3c:5d:fa:8f:3f:c4:1e:47:69:c1:79:db:
34:05:77:c0:fc:06:06:ac:9a:7a:63:6e:3c:03:61:
6a:1a:3e:f6:cf:af:bf:e3:d4:fe:e4:dd:ed:c9:bf:
7b:fc:de:ce:0c:0c:e5:b9:dd:53:1e:d0:9a:f6:2d:
91:75:e0:12:fb:53:e2:a6:da:41:da:2e:0e:4b:3c:
d3:91:13:3b:9a:76:ac:dc:7a:55:d3:17:d9:cf:fe:
71:13:41:f6:3a:67:b9:d2:73:ad:10:04:51:3a:ad:
35:c8:c7:b9:c3:56:65:23:b5:de:0f:73:94:f6:b1:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1C:19:EC:1B:68:73:F4:A8:A3:57:9F:32:58:EC:05:9C:7F:12:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FA4C69B5D11EFABB53F4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.28.0/22
Signature Algorithm: sha256WithRSAEncryption
23:a6:b2:ca:4c:3f:20:b7:31:2a:f9:77:43:38:63:52:52:88:
e0:6e:d4:52:2d:47:b3:1d:00:5e:17:a9:e3:0b:7e:1a:44:2a:
f7:73:03:dc:59:d3:3f:9a:d8:84:c9:9d:a3:ca:ff:15:fc:32:
10:98:a3:22:e7:2f:f2:22:30:0d:79:0f:93:98:7f:e6:ae:c2:
ac:9c:69:63:b8:e5:fd:7e:68:28:e1:4f:21:5a:03:86:46:54:
c0:1e:b8:94:c3:fd:2c:d2:af:17:ee:3e:ea:d8:b2:1d:f8:5a:
aa:84:f9:03:d1:27:39:18:f2:ab:d7:87:23:69:69:92:5b:5f:
7e:c9:8d:ee:a7:37:80:4c:59:07:0f:13:c4:06:cf:62:e9:8d:
52:d4:a2:a3:ad:89:56:ae:db:9b:9c:47:c9:dd:38:80:74:06:
40:ea:28:d0:f3:38:07:d1:39:60:04:e5:19:35:21:8f:80:37:
07:f2:0b:46:74:7a:03:0e:da:e4:05:74:d0:ef:8b:3c:4c:53:
46:c4:0f:8f:dd:e2:62:be:2f:18:b3:43:3d:a6:3a:e5:d3:67:
87:c6:05:6e:60:f5:56:85:7a:65:6a:2e:ff:67:b9:3b:e4:21:
41:b2:1d:a0:2d:54:0b:28:55:d7:47:dc:30:2e:78:84:f4:b7:
57:cb:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org