Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/004016CE9AA911EFB4832454762E951A.roa
File: 004016CE9AA911EFB4832454762E951A.roa (raw, json)
Hash identifier: bqCKoaiV15whw6zVY4USmDV77NaU/lLiaPuSthkrMR0=
Subject key identifier: 79:46:26:93:16:B1:CB:BB:BD:0F:2B:F4:FD:37:5F:25:00:25:87:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/004016CE9AA911EFB4832454762E951A.roa
Signing time: Mon 04 Nov 2024 12:33:32 +0000
ROA not before: Mon 04 Nov 2024 12:33:28 +0000
ROA not after: Tue 03 Dec 2024 12:33:28 +0000
asID: 54801
IP address blocks: 154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67238 (0x106a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:33:28 2024 GMT
Not After : Dec 3 12:33:28 2024 GMT
Subject: CN=6728bf1b-0aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:f6:c5:36:40:0d:ab:3b:7d:ef:b6:bf:ee:
39:cf:17:1a:7a:af:17:78:9e:75:57:04:11:67:4d:
e6:6e:b1:9d:fa:5d:7f:bf:04:59:4b:e0:24:8d:00:
1c:a7:34:ef:04:03:36:d6:66:d9:cf:c4:e6:e5:e5:
10:c4:3e:47:1d:24:1d:44:31:10:00:ba:42:7a:b0:
2d:cc:31:2b:76:f3:f7:07:f2:80:59:4b:cd:10:10:
c7:15:99:c0:70:b4:ed:e0:12:9a:34:92:56:d1:04:
78:90:e6:48:27:dc:c8:d8:61:44:0c:ae:89:9e:5a:
7f:94:10:0c:ac:cb:02:18:8d:68:c3:92:49:81:c6:
22:8c:f0:67:c5:f5:23:78:7f:0d:08:0b:93:42:b3:
4f:dc:2a:6e:40:a1:9e:95:23:bd:2a:b4:51:a4:20:
00:2a:01:25:12:31:47:af:cc:d7:ba:dc:4e:93:1c:
9b:87:9f:64:65:28:3e:34:19:65:21:2b:36:ed:0b:
f8:4e:64:2e:fb:1f:6a:a0:c1:2f:28:d8:cc:b4:22:
62:3d:40:28:2c:81:27:cd:32:a4:88:c3:c0:eb:83:
20:aa:22:f0:16:5e:06:c6:8f:ff:7b:2e:aa:29:e5:
17:00:8a:ec:4a:f8:36:19:1f:88:8f:ad:37:51:cf:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:26:93:16:B1:CB:BB:BD:0F:2B:F4:FD:37:5F:25:00:25:87:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/004016CE9AA911EFB4832454762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.16.0/20
Signature Algorithm: sha256WithRSAEncryption
86:cc:a5:4d:fe:10:ce:19:34:94:35:5f:78:30:dc:b5:f6:9a:
a4:db:2c:85:07:16:0e:f3:ed:99:c1:29:e8:34:ab:a5:e0:94:
21:a7:51:c6:dd:d8:04:fd:99:03:9e:13:74:46:fd:9b:fd:75:
c5:f6:bf:1d:0a:d1:1d:3d:22:15:e5:9c:bf:e3:16:92:c0:34:
c2:3c:82:05:e1:3a:63:d8:71:fc:4e:84:0b:17:64:af:17:66:
10:39:e3:16:8e:5c:d2:6e:95:ee:4b:39:c3:a2:6b:a3:55:78:
a1:8c:9f:34:93:b6:12:b8:50:4a:f0:38:89:1b:07:5a:e5:e6:
2d:81:b3:b5:a0:cc:4c:d9:3f:95:d3:22:96:c5:1c:ca:8e:2a:
87:b1:95:43:af:5d:5b:47:70:6b:6e:2a:99:2c:8d:43:5c:6f:
5a:8e:7a:f8:b1:4f:8e:94:4c:b7:e6:5c:0a:17:71:0e:8f:06:
e2:75:76:89:85:1d:77:c4:da:5f:39:7e:d5:b0:bc:5e:38:b9:
6b:c3:fa:60:a2:01:5b:69:46:44:21:fc:2b:43:f5:78:05:d1:
8d:ff:47:8e:41:94:ee:45:a2:9d:43:ad:9d:95:ad:17:b7:8d:
cb:85:f0:4e:d3:55:e6:03:10:38:37:ac:d9:55:2e:9f:1c:bf:
f3:26:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org