Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E48D60848511EF95E31CB0762E951A.roa
File: 05E48D60848511EF95E31CB0762E951A.roa (raw, json)
Hash identifier: CDeggWvtRjvQQ8tLjWoYt3IdtEQub3YJaaEkx7dfTe8=
Subject key identifier: B8:1D:36:AF:CF:81:E9:D5:A2:E1:AC:99:8D:78:48:91:64:BB:74:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FA8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E48D60848511EF95E31CB0762E951A.roa
Signing time: Mon 07 Oct 2024 08:20:34 +0000
ROA not before: Mon 07 Oct 2024 08:20:30 +0000
ROA not after: Thu 09 Jan 2025 08:20:30 +0000
asID: 150000
IP address blocks: 154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64140 (0xfa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 08:20:30 2024 GMT
Not After : Jan 9 08:20:30 2025 GMT
Subject: CN=670399d2-64d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:3b:2b:4c:74:29:ff:40:18:6c:35:a9:45:
45:6f:a3:f1:5e:1e:2e:0b:5d:73:ed:8b:1f:61:ab:
48:a9:77:14:13:90:d3:b1:5c:cf:49:d6:2f:6d:a3:
ef:cb:de:c9:74:f2:7c:c0:f3:3c:e6:50:82:62:0b:
43:55:fb:2a:ec:de:64:55:32:bb:f9:f5:ab:94:6d:
e4:aa:c0:a6:79:be:59:5c:b5:44:c5:7e:50:b5:c9:
ff:47:c4:2e:b1:01:ac:5f:31:71:10:40:81:c9:29:
c3:7b:a3:f1:31:8d:26:84:01:b0:df:1f:51:f2:98:
81:59:79:48:ad:77:2d:11:68:fb:43:42:b3:bc:40:
8c:90:e5:00:46:8f:fc:41:ac:85:17:4a:6c:3d:c1:
7a:35:6c:0a:d4:38:99:02:6e:56:63:d6:f3:99:56:
a5:09:66:10:24:09:9f:12:9e:1d:d1:d8:14:2e:16:
35:a0:c2:f0:7e:5d:50:c0:31:07:fb:c7:c8:bd:6f:
f0:d2:ed:6d:06:01:f6:d2:ab:aa:a8:61:38:56:8e:
b2:fc:14:c6:c2:a8:8c:26:61:77:21:20:00:73:f0:
66:f9:91:6b:e2:09:13:50:d7:89:2d:0d:c0:26:90:
7a:de:ca:a3:f1:68:96:f2:3f:c0:63:98:02:d9:ba:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:36:AF:CF:81:E9:D5:A2:E1:AC:99:8D:78:48:91:64:BB:74:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E48D60848511EF95E31CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.160.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ce:2e:0a:26:35:c4:aa:69:44:54:d7:9a:e6:af:4b:07:6f:
11:25:d9:ad:6f:08:94:48:16:2b:10:53:ed:09:51:1d:1c:72:
31:ad:5b:dd:db:1b:07:19:ee:15:70:61:bd:13:f0:5d:3b:da:
13:b5:bc:67:66:84:59:4e:17:2a:67:38:f3:4a:c3:74:69:c7:
6b:97:73:0f:bc:24:27:08:7c:42:ec:7b:e2:a6:27:38:40:e2:
de:f4:28:ad:9f:f8:d2:b3:41:75:9f:88:d7:e4:2a:45:93:d4:
08:b5:ae:ff:4f:35:d5:c4:0c:43:59:4c:14:25:ca:3c:9b:ed:
68:a3:c9:e2:4a:f6:f4:b8:bf:04:c1:74:df:e8:e9:08:ba:2f:
f0:9c:ec:db:f2:05:c0:3a:8b:48:b1:14:27:1b:77:f0:ad:0f:
93:08:59:65:d0:26:96:68:10:d5:e4:ef:a5:c7:c2:ca:f6:4e:
4f:ff:d9:44:97:3e:38:22:85:e3:2c:a8:bb:d5:7e:0a:32:96:
d6:1e:d0:12:32:1e:2e:15:6b:57:e9:d0:ca:3d:62:dc:0c:5c:
5b:32:e4:e6:f8:94:43:b9:5a:e1:1e:61:dc:b4:10:74:cb:7a:
39:cb:fe:45:ae:db:b3:e1:18:65:f5:f8:16:a7:d1:e2:6d:42:
13:74:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:20 2024 by rpki-client on console-fra.rpki-client.org