Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A48F256986211EFB4193975762E951A.roa
File: 0A48F256986211EFB4193975762E951A.roa (raw, json)
Hash identifier: 8bLtqKK2E4JSA5iZ7ypaHAzajh/mLO7ZpjOpKvNHZIE=
Subject key identifier: 4F:D3:87:FD:D1:67:E2:B2:9F:0A:FB:7C:3E:BA:2B:00:EA:6A:AC:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A48F256986211EFB4193975762E951A.roa
Signing time: Fri 01 Nov 2024 15:00:32 +0000
ROA not before: Fri 01 Nov 2024 15:00:28 +0000
ROA not after: Tue 03 Dec 2024 15:00:28 +0000
asID: 203020
IP address blocks: 154.201.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66813 (0x104fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:00:28 2024 GMT
Not After : Dec 3 15:00:28 2024 GMT
Subject: CN=6724ed10-b161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:9f:0b:95:e7:23:35:3c:45:d8:ed:7d:8f:
7d:be:70:6f:c7:3f:5e:d5:c3:dc:02:c4:69:03:d9:
cf:18:7b:98:f2:9e:22:ac:8d:61:15:f3:68:62:56:
e8:cf:48:88:f1:3a:e3:11:02:ba:b9:1f:68:61:40:
42:c3:ab:58:d8:d2:38:fa:db:3e:aa:a0:2c:a8:12:
07:5a:20:3f:4d:6d:8a:06:ee:7d:90:f9:d3:e0:6c:
56:5b:d9:98:97:c3:1d:88:56:31:d7:02:f8:7f:10:
a9:a4:10:bb:40:8d:61:24:c6:15:92:c1:99:a8:ba:
39:da:63:f4:29:20:d3:f0:13:32:fd:dc:c7:83:11:
d1:1e:29:8b:d0:aa:b1:9c:68:a2:53:b2:cb:00:61:
da:ed:c0:7c:49:52:42:c1:10:84:72:68:53:97:ca:
11:f8:a3:bf:3d:a8:92:fb:e0:ba:5e:31:dc:00:d4:
9b:cc:8d:99:e2:52:8b:dd:8a:36:d4:c2:25:4c:b5:
17:2e:98:bc:26:f8:0e:70:9a:80:ac:f1:9c:cf:3f:
f1:4f:26:0d:0a:d3:78:93:50:8e:34:32:3f:26:5e:
7b:ea:de:bd:85:3b:22:5b:9e:96:36:2a:3f:0d:84:
ae:d4:1c:31:dc:e4:73:21:97:2f:14:e9:0c:c0:d9:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D3:87:FD:D1:67:E2:B2:9F:0A:FB:7C:3E:BA:2B:00:EA:6A:AC:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A48F256986211EFB4193975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.46.0/24
Signature Algorithm: sha256WithRSAEncryption
28:26:d0:a2:f1:c2:0c:e3:6b:fe:ec:6c:08:a4:26:97:4d:ea:
05:66:09:73:c7:06:0b:16:6b:16:76:08:34:48:59:6c:3f:6c:
9f:b9:b3:ee:26:28:3e:24:9b:10:e2:da:5c:ed:12:a4:dd:2a:
1d:62:d8:9a:22:30:8c:5f:68:b6:73:35:2a:b6:7e:ec:8d:99:
9d:96:fe:c0:50:6d:a7:48:71:5e:21:94:05:96:73:df:04:0e:
61:60:f9:64:fe:ac:c6:fd:32:ae:26:6c:a3:e3:ad:44:20:ac:
36:d3:d9:f0:e2:15:de:ea:6f:04:10:c9:03:55:f4:47:c8:37:
63:59:55:07:9a:37:cf:b7:02:7b:e6:76:09:81:61:2d:f6:d5:
56:dd:76:4c:97:71:54:05:27:aa:e6:72:37:6b:fd:0e:11:b4:
44:1d:66:20:fc:28:04:fd:f8:48:eb:ed:9c:af:bb:dc:25:c3:
6d:61:ba:cb:7f:74:7a:2b:0e:5d:cd:ce:c6:e1:a9:5d:46:ce:
cc:27:da:f2:12:a4:8a:5c:8e:f4:ce:90:90:21:78:d3:f9:38:
8f:96:7e:c0:c8:7d:56:e4:2e:e5:72:bc:db:66:51:6c:0f:ed:
36:f7:22:f1:ce:a0:c6:26:86:dd:ec:51:e8:55:db:a0:51:5d:
5b:5e:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:27 2024 by rpki-client on console-fra.rpki-client.org