Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16EF884CA92111EF838A308A762E951A.roa
File: 16EF884CA92111EF838A308A762E951A.roa (raw, json)
Hash identifier: zUHEjxt0bs4zrkMA0EH0wd4S8znq4aLCfUCi/WIrx7A=
Subject key identifier: 3E:A7:AE:A8:4C:E6:8E:A3:7B:B1:1D:53:36:9B:A1:1D:9F:45:25:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011167
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16EF884CA92111EF838A308A762E951A.roa
Signing time: Fri 22 Nov 2024 22:28:25 +0000
ROA not before: Fri 22 Nov 2024 22:28:22 +0000
ROA not after: Tue 03 Dec 2024 22:28:22 +0000
asID: 62240
IP address blocks: 154.196.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69991 (0x11167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:28:22 2024 GMT
Not After : Dec 3 22:28:22 2024 GMT
Subject: CN=67410589-0c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:75:48:93:de:26:19:76:3b:a1:94:21:4e:
8c:74:38:25:eb:c6:13:70:1e:92:de:4c:09:b4:dc:
ba:b5:ba:db:e7:ea:2e:9a:a9:92:67:33:be:df:33:
35:f0:b5:57:d3:25:f1:5e:61:68:9a:a2:cc:b3:6e:
3f:37:01:ee:bd:c0:45:69:b0:0d:0d:7f:95:80:c1:
0f:9c:04:25:83:79:a3:2c:5d:54:68:af:fe:5c:71:
ae:96:96:74:11:e7:05:92:7b:dd:80:12:96:02:3a:
c4:04:a0:8f:8b:a4:d4:b5:2d:f6:8b:4c:d2:72:02:
8d:00:28:ea:61:fa:69:32:52:28:ce:61:b3:a0:17:
36:18:24:17:ea:e6:09:e4:4f:92:72:29:e0:50:75:
ea:66:ef:f8:9b:75:02:23:67:e9:b3:25:36:df:e4:
e4:12:ce:0b:9d:f0:ef:80:27:67:5d:7d:e6:73:a8:
87:47:b5:79:b6:fb:d7:7a:b6:24:a5:84:2b:3a:23:
9f:69:1a:e9:d1:25:82:09:87:63:be:33:b0:16:b7:
57:e9:ec:9e:b3:ec:bc:4c:63:31:cb:1a:4b:38:48:
1a:c5:e1:1b:d6:9f:a7:ee:5b:30:b7:d6:d4:96:d3:
9c:8b:27:ca:9a:ae:69:be:cc:cf:f9:c7:d6:0e:e6:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:AE:A8:4C:E6:8E:A3:7B:B1:1D:53:36:9B:A1:1D:9F:45:25:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16EF884CA92111EF838A308A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.64.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:92:07:1d:28:ee:29:31:af:eb:f5:c3:79:5e:36:c9:a3:0f:
ab:90:6e:9b:da:51:19:23:b7:95:fe:bf:4b:6b:84:1b:6a:0b:
ef:a9:b0:b5:bf:1d:f1:52:2f:d6:f9:d4:5f:2b:03:17:a8:8e:
f6:91:3f:37:aa:6a:51:70:c3:3b:8f:12:ba:dd:cd:16:7f:71:
f1:d2:69:51:97:60:23:d4:0c:e8:07:c2:a7:10:e0:a5:9d:bb:
a7:38:31:f0:74:b4:36:58:9f:5a:4d:c4:b8:6d:53:5f:4a:53:
f0:6e:75:8a:07:5d:7b:f2:2d:d5:9f:d2:84:b5:ec:8a:22:63:
7b:9b:05:7d:15:a5:3b:a2:af:39:16:bd:f8:36:b4:3f:fa:4c:
5a:8a:ab:c4:fa:ac:10:e0:41:1c:54:a9:29:f8:a8:05:76:31:
da:bd:23:19:95:03:e1:22:64:b6:a1:b0:f2:37:2c:7d:47:0d:
9d:32:cf:cb:81:5f:98:5a:36:a6:3a:4f:52:c5:27:f4:77:fe:
53:29:d8:1e:95:9c:0b:39:f0:5d:c2:c8:48:68:45:f7:c8:62:
c9:09:9b:f5:44:5a:3c:e2:cf:1d:07:fd:2a:fe:c7:11:df:6c:
29:16:c2:41:46:a1:73:51:de:8f:88:86:63:87:2b:c8:88:f0:
eb:82:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:22 2024 by rpki-client on console-fra.rpki-client.org