Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176319EEA0D711EFA0EB6141762E951A.roa
File: 176319EEA0D711EFA0EB6141762E951A.roa (raw, json)
Hash identifier: SB9UcsbKlqb2mZd5/OKSzeaBnNb+3OEsSuaQpQzodE4=
Subject key identifier: 16:80:F2:D1:D2:06:A7:4B:93:89:42:4B:B6:68:43:CF:8A:7A:17:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176319EEA0D711EFA0EB6141762E951A.roa
Signing time: Tue 12 Nov 2024 09:18:34 +0000
ROA not before: Tue 12 Nov 2024 09:18:30 +0000
ROA not after: Fri 13 Dec 2024 09:18:30 +0000
asID: 138915
IP address blocks: 154.206.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68608 (0x10c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:18:30 2024 GMT
Not After : Dec 13 09:18:30 2024 GMT
Subject: CN=67331d6a-c3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:73:92:cc:6e:b1:39:ef:ba:07:76:08:c2:
42:95:bd:3b:f5:d7:44:2f:92:e7:df:7b:f0:7a:e0:
b0:03:cd:3c:0d:fd:e4:b8:9f:d6:1a:46:5a:53:f7:
75:a5:c3:62:42:d2:af:f7:07:d4:0b:98:ee:5c:2d:
e5:ec:90:b8:ae:80:3d:40:0b:9e:f8:e3:e1:7b:25:
7d:58:88:0d:93:93:4a:d8:e2:23:9f:71:2d:3d:b0:
85:c4:06:d5:0b:83:e3:d6:7a:09:43:e8:6c:eb:d6:
ca:8f:83:97:09:05:b5:db:02:43:eb:09:10:80:c6:
db:d5:7d:91:25:ee:16:e6:81:8c:43:db:a1:38:67:
b0:5a:ac:68:f1:7c:6d:4e:91:07:67:cc:1b:99:13:
00:ff:12:2f:40:0b:d5:14:58:eb:ee:17:76:14:fc:
3d:5c:c2:c4:18:1c:55:fc:a4:31:43:5f:12:a9:79:
7c:78:f0:b9:90:61:40:d4:95:2b:cb:d7:56:e1:c1:
a7:a1:ff:30:98:07:98:59:88:75:ae:ce:2a:bd:b3:
2e:be:a9:61:04:be:86:e0:d0:53:5a:23:2a:72:da:
f1:99:f4:5e:7c:58:a5:20:65:5f:8b:10:7f:85:e2:
e7:d0:2b:92:44:93:20:98:64:ec:d9:75:78:de:7f:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:F2:D1:D2:06:A7:4B:93:89:42:4B:B6:68:43:CF:8A:7A:17:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176319EEA0D711EFA0EB6141762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:55:32:6c:1c:f5:6e:63:80:65:6b:6f:b7:db:2c:05:fc:be:
31:b5:65:bc:ab:ea:83:86:76:44:1b:ad:8c:61:ae:a4:6e:d6:
a0:0e:7b:43:de:8c:4f:cb:57:6c:25:25:88:6c:d4:5d:e3:c0:
c4:1c:a8:73:8f:17:d8:20:df:79:6d:3b:ea:bb:9b:a4:78:82:
f7:c4:ef:c2:30:d0:84:06:b3:78:a9:5c:4e:73:bb:60:c9:f1:
74:98:63:89:da:b9:fd:6d:8f:88:b8:28:bc:b8:d9:4c:bd:29:
5a:ac:38:be:eb:7e:f2:bf:3e:27:c0:46:df:5d:53:f8:cb:36:
e3:01:e5:52:ee:b9:ea:f3:24:fc:e6:db:9c:ff:88:2b:11:07:
3e:51:98:e0:99:80:0b:d0:c9:22:a3:66:60:c4:26:14:32:9e:
48:46:68:3c:c2:82:ac:b8:62:92:01:1e:7d:ef:be:4d:07:60:
76:d6:a1:9c:9e:39:dd:2e:ab:11:52:19:28:c1:68:91:bc:4f:
dc:c1:6c:a2:dc:fc:65:f6:dc:fc:34:98:22:b2:97:7f:64:41:
ad:1d:d2:40:b2:ca:bb:65:02:d5:af:86:24:49:e1:c2:39:65:
fe:89:c5:bf:67:2c:69:4f:01:8c:ab:c5:7c:ce:34:49:c9:47:
2a:c4:24:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:22 2024 by rpki-client on console-fra.rpki-client.org