Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159C38C0353411EF9D4BCCAB762E951A.roa
File: 159C38C0353411EF9D4BCCAB762E951A.roa (raw, json)
Hash identifier: RqqeOweQk+aVsHVvEZSYRNICnBDVIvpT7ZZGML0ZGWM=
Subject key identifier: AF:A5:13:D6:DD:13:A5:02:D0:65:D7:EA:5B:7D:0C:48:6C:B5:A7:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C806
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159C38C0353411EF9D4BCCAB762E951A.roa
Signing time: Fri 28 Jun 2024 09:52:09 +0000
ROA not before: Fri 28 Jun 2024 09:52:05 +0000
ROA not after: Fri 04 Apr 2025 09:52:05 +0000
asID: 399077
IP address blocks: 154.82.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51206 (0xc806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 09:52:05 2024 GMT
Not After : Apr 4 09:52:05 2025 GMT
Subject: CN=667e87c9-d9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:fe:33:c9:e5:93:bd:e8:f3:50:9d:d0:79:
ec:03:9a:2f:d1:6f:e9:5f:c6:49:49:ad:d9:b7:09:
e2:7e:ea:db:ac:5f:f3:30:1b:16:dd:73:0c:ee:51:
a2:85:5c:3c:c8:d7:7b:62:af:6a:6b:2b:25:f5:b3:
e8:e6:a4:f6:21:1b:24:c4:d0:27:3a:d5:25:41:02:
47:52:ee:b6:af:c5:c7:e2:64:a0:ee:04:53:9b:a4:
49:64:18:19:9e:8f:de:12:fc:c2:15:df:d0:d7:24:
59:ba:61:e8:a6:4c:4d:69:9e:12:2a:c8:11:a6:93:
4a:c9:55:35:dc:b7:b3:05:e7:c4:f1:af:7c:3b:8b:
01:7e:df:d6:6d:44:a8:e5:7a:d9:d5:7c:b4:c6:16:
9e:ad:91:f5:a9:43:49:41:e8:b9:0e:4d:e1:9c:0f:
6f:31:57:af:f8:48:25:e3:0f:72:7b:67:56:fa:b0:
3c:72:9b:81:d4:e5:3e:03:0f:da:70:9e:22:2c:e3:
5d:0d:3a:41:ff:56:24:22:0c:ce:78:49:4a:74:22:
7c:97:8b:5f:2e:ed:5c:17:df:32:79:a1:1e:02:6c:
74:4b:96:2c:2b:1e:11:d7:dd:72:8e:87:de:0c:51:
16:98:e2:70:d8:de:bf:3f:91:8b:cf:0c:04:98:c1:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:13:D6:DD:13:A5:02:D0:65:D7:EA:5B:7D:0C:48:6C:B5:A7:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/159C38C0353411EF9D4BCCAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:ae:49:cb:48:d6:66:94:0a:96:e0:20:61:00:38:82:20:89:
29:22:af:bc:5f:9e:38:53:88:09:f6:34:04:dd:00:a0:77:75:
ad:45:db:54:07:e7:86:2a:3a:f9:7d:2b:b9:87:74:9f:b6:17:
7c:76:90:14:c1:82:50:f5:d8:16:e6:ae:b1:f9:8d:a4:33:10:
bb:9f:95:fa:91:2a:a7:fc:3e:9e:94:0d:fe:f3:3d:98:b1:df:
f0:05:cc:b7:f1:8d:ea:6b:60:bd:b3:d4:1f:5e:2a:3b:19:08:
65:c8:d6:66:70:5e:35:90:23:b5:4c:d9:14:ee:7b:46:0c:74:
23:9a:c8:96:0d:c8:0b:df:4c:70:b5:6b:74:ef:d9:24:6d:ab:
26:c8:82:de:c1:eb:9f:c9:3a:a1:bd:09:c9:6a:42:c9:e3:74:
d8:96:fa:bf:b5:52:51:37:fc:be:7d:9b:56:16:e3:21:3d:62:
ef:a4:69:28:18:3f:d5:a7:09:d6:ff:5f:50:7e:48:0e:54:90:
af:32:ce:e2:8d:71:56:39:9f:ec:b4:ef:3e:41:c7:ea:21:97:
fa:94:ba:7c:d4:a8:a0:d9:60:a0:b4:de:b5:fd:f9:7d:bf:c2:
94:ac:0d:b8:90:47:4c:0e:7a:95:41:21:b4:5d:4c:dc:d5:df:
0d:48:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org