Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0415DB788ACB11EF890E7B58762E951A.roa
File: 0415DB788ACB11EF890E7B58762E951A.roa (raw, json)
Hash identifier: m+NlMS0TSBHwZl2M67yUGQJDcvWHLizaOXlTOS1THbg=
Subject key identifier: D0:1E:EF:21:C4:84:1A:EB:10:02:47:BC:0D:97:D2:D6:1F:B6:AB:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0415DB788ACB11EF890E7B58762E951A.roa
Signing time: Tue 15 Oct 2024 07:56:42 +0000
ROA not before: Tue 15 Oct 2024 07:56:39 +0000
ROA not after: Fri 22 Nov 2024 07:56:39 +0000
asID: 18779
IP address blocks: 154.203.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 07:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65070 (0xfe2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 07:56:39 2024 GMT
Not After : Nov 22 07:56:39 2024 GMT
Subject: CN=670e203a-3c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:8e:d8:04:88:b4:1f:64:4e:b2:38:0b:68:
75:87:25:8f:60:41:be:35:a6:20:54:ec:32:45:6c:
e2:58:a0:fa:14:6c:d3:c8:0e:a7:45:6d:30:35:fe:
b2:3d:3d:ab:99:0a:88:03:f4:e0:dc:15:40:38:d3:
56:51:52:26:b8:aa:7c:1d:02:a8:b0:28:69:c5:fb:
a4:37:b7:64:a3:00:4b:1f:6e:ba:a1:46:e0:e2:f4:
e0:da:4c:e5:e2:9e:d8:37:9d:d2:9d:03:49:82:a0:
ae:cb:d5:03:28:57:42:db:7e:8d:5f:09:15:94:a3:
5b:34:bb:06:af:07:ed:5e:58:65:9d:54:de:3a:3b:
2b:f4:db:7b:60:a4:1a:15:71:08:6b:d5:d2:14:93:
f7:49:00:ad:fe:aa:c9:f0:7f:79:e4:37:e0:45:aa:
02:9e:f3:c0:fe:55:0a:cf:df:bc:7f:2b:84:af:ce:
7c:9c:07:f6:ed:2f:7f:3b:c3:58:43:44:44:69:6e:
c0:d3:ca:e1:ab:04:60:36:78:45:9e:15:4d:33:dc:
81:46:90:95:24:a4:71:0d:b5:c1:ad:d5:9f:0e:0d:
bd:e3:4c:3c:77:9e:0b:86:f3:fd:21:ff:cc:71:b2:
fa:ca:82:cc:33:7e:e4:1d:f6:ba:da:e3:86:a8:82:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:EF:21:C4:84:1A:EB:10:02:47:BC:0D:97:D2:D6:1F:B6:AB:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0415DB788ACB11EF890E7B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:3f:ac:5e:62:50:9c:f9:91:af:e9:eb:6d:5e:69:68:06:b9:
8a:b2:cc:85:a5:1b:23:3c:02:db:ac:ff:90:35:f0:a1:e3:4e:
58:9f:4f:2b:ed:2d:f3:04:47:a9:ae:50:09:68:e5:ab:b5:25:
19:f6:ef:30:fc:3b:95:19:82:08:b3:1d:aa:08:b1:e4:99:a5:
b3:20:7a:1f:af:81:04:b2:78:13:b7:43:a6:fa:d1:ea:48:4b:
11:9a:e7:2b:e5:75:19:63:2e:d9:45:a5:58:51:b3:4e:b7:89:
e0:6e:39:39:a1:c6:13:98:f5:55:84:c0:6f:2a:7b:f6:22:21:
aa:d9:fc:52:bd:2a:9a:61:91:31:f1:04:6c:a3:f5:0e:14:d6:
1f:4e:c6:a8:b0:4c:31:e6:6a:d6:4a:00:40:b3:56:5f:d1:4a:
3b:34:6c:c1:15:5c:17:b5:c2:67:0c:33:74:ef:4f:33:b0:7c:
fd:ef:8c:0f:b1:04:e1:8f:ae:90:77:8f:41:a5:1a:dd:14:96:
45:20:9e:cc:b8:49:90:9f:c1:67:56:cf:42:b9:63:bb:cd:b1:
04:9b:d7:a5:2b:e4:76:21:f3:2e:74:d9:69:bb:fa:f9:1d:8b:
10:c6:4d:c5:8d:87:1c:db:a3:6b:3e:89:89:ad:c9:2e:33:86:
33:b3:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:35 2024 by rpki-client on console-fra.rpki-client.org