Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B40F1CE9AAE11EFB313A272762E951A.roa
File: 0B40F1CE9AAE11EFB313A272762E951A.roa (raw, json)
Hash identifier: h20S6+z5qtEtmhQQdrfCF31220M2SqU0vmU/s4t0INA=
Subject key identifier: 15:FB:2D:7E:18:29:66:B1:C2:9E:83:88:A9:DF:46:D8:1E:FF:1B:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B40F1CE9AAE11EFB313A272762E951A.roa
Signing time: Mon 04 Nov 2024 13:09:38 +0000
ROA not before: Mon 04 Nov 2024 13:09:34 +0000
ROA not after: Tue 03 Dec 2024 13:09:34 +0000
asID: 141883
IP address blocks: 154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67256 (0x106b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 13:09:34 2024 GMT
Not After : Dec 3 13:09:34 2024 GMT
Subject: CN=6728c791-0b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:84:f0:7e:3b:8b:46:71:9e:cd:d0:1c:e6:
84:15:e7:d7:6a:63:ce:b3:ec:e3:9b:16:8b:db:e3:
5a:46:52:cc:2f:f7:61:0a:18:c2:a0:ee:3b:07:49:
4d:23:2d:d6:fb:67:07:79:cb:29:d4:5a:26:ca:a2:
d7:c9:0d:e2:4c:29:75:a4:51:ad:a9:de:08:d3:ea:
fe:7b:6e:d9:1c:44:f7:fa:f2:64:ba:43:e0:91:53:
48:b5:da:10:93:f2:69:ca:c5:c8:36:33:9b:ad:02:
8a:78:f3:15:a7:0d:15:1c:9f:39:b8:32:b0:69:0b:
6a:87:ce:03:b9:cc:97:e1:15:37:cb:07:6b:81:38:
07:71:65:35:74:bb:f6:16:6b:d6:8f:19:75:4a:56:
76:69:44:83:8e:87:94:f4:f2:03:c8:a4:8e:86:6a:
89:57:ce:7e:d3:aa:14:ed:41:95:b9:7d:e4:0e:c6:
31:07:fd:c5:ff:ae:2f:71:a5:86:35:ce:ae:9b:dd:
67:b5:65:6d:ea:79:a7:59:48:58:53:7a:6d:1f:6e:
05:be:87:e9:a4:b6:47:68:bf:c3:a5:31:af:bb:d4:
5e:6f:99:dc:37:52:8c:b9:79:c1:9d:a4:5f:61:c9:
7b:93:de:f1:1e:b7:4f:5a:eb:ff:f2:c0:86:59:8a:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:2D:7E:18:29:66:B1:C2:9E:83:88:A9:DF:46:D8:1E:FF:1B:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B40F1CE9AAE11EFB313A272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.16.0/20
Signature Algorithm: sha256WithRSAEncryption
98:4f:4a:7d:eb:4b:9b:48:f7:d6:b5:a4:b9:5b:21:99:64:7e:
a3:cd:30:10:85:dc:34:6e:6b:a4:c2:ae:f7:ae:87:d2:ab:c1:
38:22:de:54:76:2f:5f:e2:70:30:54:e8:38:5d:01:95:ba:f7:
63:4f:dc:62:28:29:2d:48:11:62:20:d6:c1:f1:33:99:02:c8:
a5:f3:b2:fa:57:f1:cc:64:a1:67:00:be:22:75:32:e5:af:71:
0e:53:82:16:77:62:ca:b1:bd:57:db:94:1c:9d:13:d2:30:9e:
64:81:d5:09:98:1f:81:8d:ee:0c:98:38:9f:e5:6c:26:f4:a6:
ea:89:1a:81:eb:ed:3f:5c:c4:3c:72:91:90:fd:ff:ee:d0:ea:
16:a2:6b:75:0a:23:d8:9a:14:46:7a:8e:ae:99:82:e5:99:e2:
83:2f:c7:e5:36:75:a3:4e:56:69:68:8f:13:d1:23:e9:34:13:
dd:3b:3a:2f:c6:31:5c:81:72:e4:70:e2:cf:fa:74:93:9b:02:
f0:b0:79:3d:cc:2d:03:af:91:57:2a:28:13:77:0e:00:dd:cd:
e1:e1:f4:94:55:2e:a6:f1:30:26:46:cd:92:47:67:40:91:19:
64:bd:8b:07:7e:e3:b5:db:18:c1:3f:d0:f1:e6:72:16:6d:5d:
4f:7c:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:54 2024 by rpki-client on console-ams.rpki-client.org