Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F2E4E74CD11EF82866044762E951A.roa
File: 177F2E4E74CD11EF82866044762E951A.roa (raw, json)
Hash identifier: wtUmpAYavqKzj6/5EctOHvIvKFY0WZ/nSy7DbGIz/VY=
Subject key identifier: A3:A7:7A:0A:F4:2A:75:FF:FB:39:26:5E:E3:45:7B:74:B3:62:91:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F2E4E74CD11EF82866044762E951A.roa
Signing time: Tue 17 Sep 2024 08:16:08 +0000
ROA not before: Tue 17 Sep 2024 08:16:05 +0000
ROA not after: Sat 30 Nov 2024 08:16:05 +0000
asID: 138152
IP address blocks: 154.211.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61428 (0xeff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:16:05 2024 GMT
Not After : Nov 30 08:16:05 2024 GMT
Subject: CN=66e93ac8-6362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:2d:c0:da:48:74:59:b1:b5:47:01:91:e2:
c6:68:9b:35:ee:4c:48:23:cd:54:62:57:42:fb:53:
aa:6c:0f:ed:c7:f4:0d:4d:6a:24:99:58:cd:25:fe:
c9:09:a1:48:78:40:7a:9f:33:20:ce:40:48:f3:c9:
76:a9:70:29:7e:95:4b:fe:2f:f6:49:e0:e6:5e:92:
d8:86:9c:ec:79:0f:9f:9f:3e:c2:0b:b8:7b:48:c9:
3d:2f:60:28:ac:d8:9d:ce:4e:90:62:61:5a:44:29:
05:ad:3c:5a:4f:d4:d9:e2:14:c1:b5:b9:7c:16:70:
1f:01:44:8b:ff:18:66:db:f6:a3:dd:3b:d9:b8:8a:
fa:b9:08:28:3b:5b:5c:88:64:d2:b7:0b:fe:8e:ed:
f0:6b:33:3d:14:26:8b:54:5e:91:3c:dd:72:9d:f3:
ee:22:bc:f2:13:df:b7:98:d5:9c:d5:14:be:ce:95:
5b:a5:8c:11:4d:59:d3:87:9d:b0:d7:21:48:49:c1:
15:54:40:fd:38:ab:f8:e5:c7:b1:b7:bf:46:ec:ee:
58:90:4b:e9:8d:f1:a3:97:a1:ec:64:73:16:c4:62:
c1:d8:12:5c:af:f2:d3:67:d7:78:0a:8b:ea:25:29:
bd:de:96:aa:a0:06:2c:3e:48:9f:9c:07:0d:2f:8b:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A7:7A:0A:F4:2A:75:FF:FB:39:26:5E:E3:45:7B:74:B3:62:91:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177F2E4E74CD11EF82866044762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1f:b1:1b:3b:1e:e9:9d:31:f1:e1:6f:81:46:42:b0:be:b8:
d7:08:f6:f6:35:90:5c:7c:bd:3a:3f:54:8c:f9:38:53:df:4f:
74:1a:e8:5f:53:3e:47:b8:2a:74:d5:3b:7b:fa:91:01:1c:d8:
b5:2a:e3:78:05:eb:c6:4e:d8:d4:df:7e:ba:10:99:63:a6:72:
87:b1:d9:d9:43:17:bc:30:77:d9:0d:ac:e2:fd:22:7f:1c:a4:
4b:0c:19:64:bd:42:fb:3f:98:e8:45:1d:df:af:94:a2:ba:11:
2d:9e:c3:3b:81:76:e5:d6:8b:40:cd:0d:0c:da:59:19:b7:0f:
58:7c:d1:ae:c9:d3:79:49:4b:67:af:5d:23:78:f2:8c:31:ba:
80:d7:f7:3f:b8:72:5e:de:7a:92:11:90:1d:d7:df:2b:c7:a8:
17:71:84:7f:b3:da:31:aa:85:f2:82:8a:74:13:8d:ea:64:3f:
dc:28:0f:ce:a7:0c:7c:cb:c1:1c:f3:c1:a5:4a:55:d6:ae:d8:
6f:bc:00:50:4e:15:78:09:48:63:df:a1:4c:e1:2d:07:b1:73:
db:d8:f9:26:5d:a4:90:8e:03:4a:6c:d5:09:d9:63:ed:bf:c1:
56:d2:87:c7:9b:3b:1a:dc:e9:a3:61:6e:9b:e7:87:c6:fe:c4:
b8:68:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org