Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4CABAA9A9311EFBE28664C762E951A.roa
File: 1B4CABAA9A9311EFBE28664C762E951A.roa (raw, json)
Hash identifier: 58unNHFGC8lMwbhnYD9LOsTz5AoEgFIEmVJx6/eibZ0=
Subject key identifier: BD:EF:54:5F:D3:4F:FF:76:26:6E:55:2B:51:1E:85:C9:74:A0:4F:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010682
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4CABAA9A9311EFBE28664C762E951A.roa
Signing time: Mon 04 Nov 2024 09:56:48 +0000
ROA not before: Mon 04 Nov 2024 09:56:44 +0000
ROA not after: Mon 25 Nov 2024 09:56:44 +0000
asID: 44559
IP address blocks: 154.211.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67202 (0x10682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:56:44 2024 GMT
Not After : Nov 25 09:56:44 2024 GMT
Subject: CN=67289a60-9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:a0:8a:d1:e5:af:53:d8:8d:5c:ae:6a:13:
db:a1:f4:11:07:0c:75:1a:fe:68:c7:1a:0a:e1:1b:
1d:2e:47:52:2c:9b:ca:46:e3:09:35:c4:89:1f:82:
f1:6a:37:f7:50:07:4b:4e:1f:50:68:b4:2a:44:85:
6f:b6:ae:c9:12:09:b9:82:3c:fe:64:06:c3:c6:ad:
a8:fc:82:91:d9:a4:7d:fa:62:f6:15:3d:91:21:ab:
52:bf:3a:23:e4:b2:9f:87:f7:98:9e:05:7a:c2:2e:
b0:60:46:77:35:0d:8f:18:01:e9:25:bf:ad:07:ea:
70:d2:6f:33:44:91:ec:db:c5:f3:4c:39:04:50:36:
73:bd:fc:a0:e1:33:43:5c:1d:eb:ca:e5:1b:73:e5:
e0:fb:a3:81:d7:b3:6e:d9:c8:d8:86:5a:d9:dc:fd:
77:19:9d:1c:7c:6a:17:f0:00:9c:69:53:54:96:c8:
16:7b:a9:57:b5:bb:99:d9:81:cf:b1:75:ac:30:ca:
17:bc:35:4f:93:6a:b6:41:7b:08:76:82:a0:88:dc:
99:04:63:4a:a5:2b:24:1c:5b:c8:4e:85:f5:a1:77:
48:fd:dc:f2:4b:17:3f:01:d5:09:9c:74:d1:3c:4e:
7f:57:77:eb:4b:7c:1c:43:b1:ee:50:fb:2f:99:70:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:54:5F:D3:4F:FF:76:26:6E:55:2B:51:1E:85:C9:74:A0:4F:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4CABAA9A9311EFBE28664C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.48.0/23
Signature Algorithm: sha256WithRSAEncryption
18:07:1f:2e:6a:10:36:d6:6a:5c:f2:38:f7:94:6e:2f:93:3f:
43:82:5b:97:eb:db:43:05:46:a3:4d:05:57:15:6c:11:e3:f8:
b2:d1:79:39:34:2c:19:5a:e4:3f:5e:66:69:55:9c:ee:8c:3d:
47:9d:a7:80:ab:a7:04:6a:08:09:4a:d1:cb:6b:2e:6b:85:07:
bd:fb:9c:27:62:83:46:40:f6:5e:a5:4d:c6:92:57:f8:0c:75:
43:7e:06:d3:3f:ae:4e:5d:56:86:57:16:a4:75:22:30:e2:b5:
41:73:20:52:7a:1a:b3:a3:2c:f3:65:9e:09:df:c1:93:c7:52:
ea:70:5d:61:2b:c2:d5:a4:17:5d:9d:ff:ac:1e:3b:d4:7b:e8:
6f:86:7d:cf:88:82:10:0f:22:9a:fc:3f:f4:de:24:ca:68:b7:
ad:b4:ca:8e:11:2b:50:a5:6e:7c:9f:49:32:0e:7a:fe:8b:77:
da:96:0f:cb:46:64:a9:bc:34:bb:7d:e3:dc:77:06:aa:84:b9:
60:43:8e:fe:e0:c4:21:3e:fd:ec:42:66:2b:9a:da:96:fd:51:
4a:03:4c:a0:ef:4e:65:db:07:33:1b:c1:b6:3d:33:9d:d1:91:
5b:b8:31:73:2b:c9:74:9c:d1:7e:2d:48:7c:09:6e:df:9a:b8:
f8:af:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org