Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6DF84CA8D911EFAAF90C4C762E951A.roa
File: 1B6DF84CA8D911EFAAF90C4C762E951A.roa (raw, json)
Hash identifier: 8AFn9q2guETvsTde8gZtBBeaSRr+HAcOSxy267GIPzU=
Subject key identifier: 80:94:61:EB:02:5D:D1:BC:D0:4C:A0:22:61:2F:04:8D:CD:EF:2A:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01103F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6DF84CA8D911EFAAF90C4C762E951A.roa
Signing time: Fri 22 Nov 2024 13:53:09 +0000
ROA not before: Fri 22 Nov 2024 13:53:06 +0000
ROA not after: Mon 02 Dec 2024 13:53:06 +0000
asID: 44559
IP address blocks: 154.210.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69695 (0x1103f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:53:06 2024 GMT
Not After : Dec 2 13:53:06 2024 GMT
Subject: CN=67408cc5-2bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:c9:d3:09:86:a4:d6:14:7f:b4:f0:f3:6d:
f0:4c:58:01:95:58:31:31:16:ef:3e:d5:b5:cb:23:
19:12:b6:fe:8b:68:22:63:68:9f:52:f5:22:05:9d:
7a:ae:78:17:cd:fb:f3:84:ef:6e:1e:0c:2d:29:c9:
ec:6e:69:4c:28:5a:69:f5:53:7d:ee:94:8c:62:e3:
75:c8:75:46:5f:5b:91:6f:b1:f3:ea:7e:6c:31:68:
d9:1c:0d:46:d0:08:f8:f5:4b:e3:93:6c:bc:2b:b1:
da:d0:c1:54:dd:6d:b7:d4:d0:e7:f4:18:6b:55:2f:
14:fc:19:0a:77:7b:fa:7f:0e:4b:3c:64:a5:c3:16:
5a:39:63:db:a6:23:8a:4a:31:60:71:1a:73:1f:92:
73:9d:e8:9d:c8:ef:5e:b1:16:46:d1:19:57:4c:0c:
5b:b5:41:dd:2d:4a:71:6c:a0:f1:ee:85:ed:47:8c:
2d:c1:ef:10:d2:53:3f:74:30:a1:f2:9d:62:c6:3e:
33:fe:6d:4c:6f:cb:c1:30:c1:9d:bf:8f:aa:a2:d6:
87:6f:a9:71:d6:57:c7:e1:61:14:08:96:02:00:1a:
3c:a5:01:2d:9e:ec:08:19:3e:4c:0e:4a:4b:f6:25:
da:24:f8:0d:d3:f4:cb:86:a5:5a:32:57:21:2c:e0:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:61:EB:02:5D:D1:BC:D0:4C:A0:22:61:2F:04:8D:CD:EF:2A:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6DF84CA8D911EFAAF90C4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.88.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f3:29:36:ac:cb:85:da:b9:e8:fe:1c:88:51:e6:4c:e7:1c:
19:44:e5:01:1f:f3:c6:4b:ac:48:64:94:af:8c:09:4e:3e:2e:
d6:a1:d5:78:d7:cc:dd:b3:da:f9:fa:9e:11:61:05:88:a7:7e:
f5:d3:82:f6:1e:a2:bd:2c:16:1e:c0:33:fb:32:73:06:9b:54:
4c:a9:75:12:aa:f0:8e:81:0b:07:54:80:51:ad:41:b6:4e:98:
8f:9c:63:1f:72:ff:02:ac:71:c9:92:66:aa:ac:4e:38:71:f8:
a1:81:89:b6:e2:20:b4:56:5e:2c:4c:a7:4d:bc:ab:03:fa:78:
92:5a:46:e5:40:89:3a:06:c8:2b:de:21:d7:a3:52:ef:97:69:
26:6e:c9:a8:75:f8:df:50:93:26:fe:f2:c9:a0:4e:f5:bf:de:
d2:15:49:21:3e:b1:2a:e0:ad:58:8b:c6:d9:30:3f:a0:90:30:
44:b1:51:3a:b9:91:c7:98:41:00:23:c4:d8:dd:88:2a:38:aa:
2b:fc:b5:13:86:ba:7b:57:ec:58:6f:0f:02:ce:a9:6c:06:9b:
6d:e5:77:17:24:f2:37:56:0f:32:2f:05:e8:1e:5b:b2:da:35:
0b:f3:cb:eb:6d:bb:47:e5:db:e9:b2:c9:cc:05:ea:76:5a:91:
ea:d9:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:14 2024 by rpki-client on console-fra.rpki-client.org