Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/188F84AEA8D111EF8DB83699762E951A.roa
File: 188F84AEA8D111EF8DB83699762E951A.roa (raw, json)
Hash identifier: kMC/YG+36exeJ1eTmx+yuzXMZ+ugCfw1VT90LVBjqG8=
Subject key identifier: 22:56:1D:60:51:1A:62:07:E6:44:66:5B:38:B8:05:59:61:52:6E:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01102F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/188F84AEA8D111EF8DB83699762E951A.roa
Signing time: Fri 22 Nov 2024 12:55:48 +0000
ROA not before: Fri 22 Nov 2024 12:55:45 +0000
ROA not after: Sun 01 Dec 2024 12:55:45 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69679 (0x1102f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:55:45 2024 GMT
Not After : Dec 1 12:55:45 2024 GMT
Subject: CN=67407f54-13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:86:b2:90:06:62:a8:0b:2f:93:dd:2a:b1:
38:68:e4:3e:3f:37:a7:8c:0a:e9:16:ea:88:75:00:
01:a3:5e:09:5e:06:99:25:b6:ac:78:df:f1:40:58:
a4:61:85:84:07:75:db:36:cf:97:16:a5:79:79:cd:
76:a2:12:b5:d7:e9:f5:e7:b5:73:d5:78:03:4e:26:
a9:de:49:e4:20:e0:cd:7d:57:68:d5:6a:de:0a:38:
dc:ff:d8:3e:f4:a0:f9:78:df:c3:d4:61:32:18:86:
31:da:06:e8:a0:d5:3c:7d:26:41:a2:27:58:43:3d:
66:18:88:27:45:ba:79:f4:08:7f:39:82:17:b1:84:
80:c9:5a:4c:fd:1f:1b:87:fe:1b:5d:34:42:d6:2b:
d1:6c:20:3b:59:ec:e7:cb:d4:36:61:44:c2:7f:a3:
35:2e:da:e6:cd:5c:32:c9:81:3e:f2:9c:14:97:0a:
68:ae:7f:35:8c:56:db:24:58:ec:f4:85:b7:72:a7:
89:8c:af:fe:f7:d7:9b:f2:67:83:9b:20:ee:83:ad:
eb:8b:bd:1d:3a:9d:41:0c:d0:45:84:d4:57:af:a2:
a1:69:7c:87:03:51:11:e6:05:a0:3c:c1:7d:b3:d7:
d8:45:da:44:64:86:28:05:7f:26:03:77:94:93:69:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:1D:60:51:1A:62:07:E6:44:66:5B:38:B8:05:59:61:52:6E:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/188F84AEA8D111EF8DB83699762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6a:e1:cb:b8:99:85:06:c2:82:20:e1:21:e0:d1:9d:0b:39:
cb:8e:1c:e1:2b:04:70:b4:9f:27:70:66:17:3e:67:02:95:8f:
46:be:0a:ad:4a:ea:e0:e0:de:1d:d3:79:00:3e:c0:d9:2e:7a:
fa:e7:bf:43:7b:fe:83:00:97:64:fd:af:96:d2:a9:39:aa:a1:
13:3e:d7:5b:60:68:3b:cb:a7:b4:fe:98:96:80:70:8f:61:03:
a4:c4:b5:54:27:60:a7:d1:e9:5b:3f:ff:6a:d7:34:d9:b1:84:
14:3b:7e:76:f8:c1:3c:65:37:06:51:81:9e:3f:20:43:42:5a:
88:21:66:34:cb:cb:26:f0:64:fa:0a:b1:62:12:c3:82:68:bd:
00:98:a8:9b:38:89:09:71:40:7b:37:c1:f4:9e:33:6d:8e:9d:
e7:63:ed:8e:e4:d5:26:b6:18:2f:64:28:27:bb:eb:cd:b7:b3:
5e:2f:68:3d:6f:a8:39:12:ba:97:ec:b6:6a:5e:d8:50:10:e0:
17:2c:40:2c:1d:b3:4c:f6:f1:59:78:64:fe:7d:cd:50:aa:58:
bd:a8:d6:9b:8a:5f:29:71:e7:02:6c:b6:93:05:e4:25:79:7f:
d9:4b:17:cb:5a:20:7c:19:ae:f2:c6:f4:b6:39:dd:f1:6c:44:
f2:b2:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:23 2024 by rpki-client on console-fra.rpki-client.org