Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB2F5A2A9C411EF9E946A8F762E951A.roa
File: 0AB2F5A2A9C411EF9E946A8F762E951A.roa (raw, json)
Hash identifier: zM3lsmLCfzXYCKWhxm9ftB/uWQCjeibkTDLGt5nmHJs=
Subject key identifier: 84:72:1D:A2:1F:27:84:E4:12:BF:56:31:01:B2:68:B1:4F:B1:FB:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB2F5A2A9C411EF9E946A8F762E951A.roa
Signing time: Sat 23 Nov 2024 17:54:53 +0000
ROA not before: Sat 23 Nov 2024 17:54:49 +0000
ROA not after: Mon 09 Dec 2024 17:54:49 +0000
asID: 5065
IP address blocks: 154.206.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70100 (0x111d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:54:49 2024 GMT
Not After : Dec 9 17:54:49 2024 GMT
Subject: CN=674216ed-e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:ae:fc:46:a4:97:e0:14:b8:7e:7e:03:55:
e5:df:4a:87:2c:40:e4:de:df:fd:db:c2:16:43:da:
41:fa:03:0f:a0:54:8b:be:dc:18:9f:22:ba:80:f1:
a9:0e:6f:05:85:e7:eb:96:c9:26:18:db:53:be:1c:
6c:9a:a7:8a:56:8a:71:3d:a6:eb:4c:49:59:2c:0a:
91:70:b0:db:56:f0:c3:54:74:33:7d:91:f5:17:66:
42:f3:48:3e:4d:97:7a:0f:ab:e7:e0:6b:64:5f:91:
d4:61:75:69:25:3a:e9:dc:48:d2:e8:c9:9e:ef:0b:
a7:89:c8:d2:fb:2a:98:d6:d9:90:c8:37:54:ec:1a:
64:bf:e7:05:dc:88:21:ac:47:8e:83:08:6c:97:0a:
dd:e8:4f:f4:68:bd:03:b2:cf:0a:b5:03:4b:8d:cd:
88:78:a5:c8:73:2e:e4:61:26:2f:63:93:39:d2:af:
62:e7:78:f5:c9:e8:f8:8a:29:57:d9:78:c7:06:64:
e6:b3:ff:ee:47:b2:e9:54:e5:c1:7a:63:4a:44:91:
11:3e:db:c6:e3:4f:f0:08:8d:cb:80:87:7b:b5:40:
44:92:4f:ad:6f:7b:03:3d:f3:67:39:d1:3e:dc:66:
6c:70:60:82:74:f8:d3:24:aa:73:ca:f7:eb:42:b0:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:1D:A2:1F:27:84:E4:12:BF:56:31:01:B2:68:B1:4F:B1:FB:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB2F5A2A9C411EF9E946A8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.40.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1e:3c:b7:93:50:4e:9c:23:a9:14:73:8d:fc:c7:92:d6:4a:
75:d1:eb:20:bc:03:0e:1b:c7:a8:13:5f:26:23:8f:3d:c4:3e:
0b:89:9d:10:ad:73:80:bf:ba:37:ed:b8:d2:ee:c0:19:fe:72:
6d:f6:23:25:7b:39:fa:2e:51:37:68:7a:20:56:40:2c:c7:a6:
d3:cc:1e:9f:4b:e4:4a:0a:df:ae:b6:75:ac:7e:b3:33:6b:dc:
da:68:32:de:1c:76:f2:b6:f6:1e:2c:4d:c0:0f:a5:38:fc:26:
5b:84:8e:4c:c6:ff:1f:02:1a:d2:a9:16:36:c7:8b:38:e5:ca:
62:e4:aa:5b:ca:c0:0c:7f:a6:40:68:7a:87:29:61:5d:36:fd:
29:6f:2c:b6:94:aa:4a:a1:f5:c4:b6:09:9e:f4:c4:2a:29:f6:
ec:4a:fd:72:f2:1b:38:84:09:5f:28:f7:63:73:e6:6b:ac:46:
2c:c8:4c:18:17:eb:a4:61:a1:b9:1e:3e:87:fd:94:3c:f9:a0:
16:33:f0:27:8c:7c:0d:bf:51:2d:82:db:aa:13:bc:fc:2e:3d:
76:0c:98:7f:fe:ff:2c:70:fe:91:f2:63:ed:fb:73:f7:12:1f:
64:f3:f7:65:64:7d:6b:f4:13:d8:56:dd:82:e4:04:16:c9:af:
25:ef:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:21 2024 by rpki-client on console-fra.rpki-client.org