Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0420B25A986311EF8A79B479762E951A.roa
File: 0420B25A986311EF8A79B479762E951A.roa (raw, json)
Hash identifier: BurpYc/j30ZPoDo/Z40Os8GOvARzerwZXBqrYlwXnK0=
Subject key identifier: 4A:09:D5:60:C0:F7:34:43:92:63:1D:BD:0E:A7:39:5F:EB:2E:C0:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010509
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0420B25A986311EF8A79B479762E951A.roa
Signing time: Fri 01 Nov 2024 15:07:31 +0000
ROA not before: Fri 01 Nov 2024 15:07:27 +0000
ROA not after: Tue 03 Dec 2024 15:07:27 +0000
asID: 203020
IP address blocks: 154.207.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66825 (0x10509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:07:27 2024 GMT
Not After : Dec 3 15:07:27 2024 GMT
Subject: CN=6724eeb3-60c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:94:db:d8:20:c6:15:3c:41:ab:f3:ba:f8:
18:0c:ab:9e:59:6d:80:ae:42:9e:4d:89:6c:21:df:
47:bb:54:5d:f3:97:2d:82:29:ad:23:34:a5:36:0a:
c4:52:a8:a8:36:10:9c:79:67:fe:65:bb:9d:ea:dd:
f4:46:2f:2f:be:a4:bf:80:01:a9:7c:18:df:18:3c:
3b:73:d8:e0:75:38:c9:a5:7b:f5:c5:94:03:cc:ef:
f4:6c:95:17:e0:7f:48:51:5b:69:bb:8d:36:87:4b:
16:23:33:90:d0:bf:47:2d:92:44:6e:5b:27:32:5e:
2d:5c:bb:de:e2:8f:63:af:8a:71:0e:cf:ec:05:45:
79:e3:ad:86:11:b8:10:fe:af:b6:d1:ae:c8:04:d8:
e7:30:ad:ce:bf:2a:cc:9b:30:97:cd:06:24:b3:45:
3f:32:fa:a5:9f:2a:e0:71:0c:a7:23:26:b9:33:28:
91:18:5b:a1:e8:70:d4:ff:0b:cd:ad:ff:c2:31:4c:
4f:ec:61:cb:61:19:94:2d:84:b3:48:b1:dc:40:f0:
00:53:a2:b4:d2:bb:12:a8:1a:8e:cf:fc:79:e0:b8:
16:ec:8e:06:d9:66:3f:0d:3e:9c:d6:02:aa:87:f2:
d7:2a:69:cb:66:4d:a2:b4:08:fb:f7:e2:22:0d:39:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:D5:60:C0:F7:34:43:92:63:1D:BD:0E:A7:39:5F:EB:2E:C0:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0420B25A986311EF8A79B479762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:1e:f3:68:c9:1f:2f:38:61:44:a9:38:3e:f8:d3:ec:65:ee:
96:53:42:42:d9:c0:79:90:1d:4c:cd:9a:c9:e1:52:b8:98:21:
17:35:5d:a4:e5:83:66:d0:43:10:1f:63:8a:0e:44:f1:84:59:
29:2a:4f:0d:f4:ac:05:ca:b3:cc:10:a3:26:9a:e3:d6:09:de:
68:e2:e1:af:5f:f3:26:89:1a:cc:5e:d3:42:46:01:99:56:fb:
c4:71:91:cc:ce:80:51:02:09:3f:84:97:71:06:de:72:51:f8:
e8:4d:aa:86:61:c6:6d:db:c0:1b:89:66:e1:6d:c6:8a:23:ac:
35:37:a5:4f:3e:ff:c3:47:e4:aa:f6:cc:dc:f1:4c:96:e2:aa:
6c:89:84:94:1b:f8:35:ad:41:14:50:f0:e7:0f:91:64:1f:37:
8d:c2:94:94:1e:f8:62:e7:41:c7:32:5f:72:a5:35:da:04:05:
3a:db:69:94:0b:60:bf:5e:0a:93:d9:4a:d1:44:24:ce:00:e1:
97:38:e9:80:90:4f:14:ac:57:1a:09:d0:54:68:17:3d:24:c5:
f8:e8:b9:91:4c:88:9d:36:ed:fc:94:b5:06:56:3e:43:5c:d8:
11:b9:79:51:9b:a7:8e:50:68:a7:6b:31:b2:9c:c4:39:82:5f:
80:b8:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org