Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA4102725711EF808DC861762E951A.roa
File: 1FBA4102725711EF808DC861762E951A.roa (raw, json)
Hash identifier: pCpnqy1xW1fzzcNaROIZm6lijpOB2peStLHW9Sb5UvQ=
Subject key identifier: F4:29:E6:7D:FD:EF:C9:4B:5F:1A:E3:78:CD:4A:58:7B:27:C9:3E:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA4102725711EF808DC861762E951A.roa
Signing time: Sat 14 Sep 2024 05:06:39 +0000
ROA not before: Sat 14 Sep 2024 05:06:36 +0000
ROA not after: Tue 31 Dec 2024 05:06:36 +0000
asID: 17561
IP address blocks: 154.217.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60878 (0xedce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:06:36 2024 GMT
Not After : Dec 31 05:06:36 2024 GMT
Subject: CN=66e519df-f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:d7:27:f1:8a:73:81:fb:83:4c:29:c9:bd:
2f:a3:42:a7:5f:93:3b:2d:fa:89:09:b6:74:b3:59:
0f:da:77:7a:19:7c:26:1b:46:68:f4:70:22:29:12:
30:24:02:38:18:f9:d3:87:a8:61:dd:e3:bb:22:7d:
80:a2:5e:6e:56:b3:d8:34:da:00:6c:2f:2d:d5:49:
c1:93:b5:81:67:68:75:80:40:d0:3c:7f:22:c7:5e:
91:f3:fd:e1:00:1c:f8:0e:c6:f8:a4:5b:e8:f3:ea:
d2:da:65:80:6d:2a:a7:3e:7e:44:f8:15:73:cf:9d:
bf:e5:12:46:8a:11:a7:83:dd:56:11:1e:6a:50:f2:
41:73:d0:65:be:f1:4d:56:1d:56:a6:67:6a:c3:db:
ee:f6:39:4b:85:8e:b4:94:6c:cc:85:d5:4c:cf:05:
01:24:85:38:9b:de:00:43:3c:b1:80:f8:b3:a9:d1:
ea:2f:b5:b9:66:7b:d2:ef:3a:47:61:27:92:00:b9:
db:30:af:48:33:70:bd:99:4b:0c:f6:b9:0b:f3:bf:
9d:1f:be:11:e9:6a:20:a0:9c:e2:a1:b2:ec:1a:2a:
13:8b:e6:1f:ac:61:34:a4:3d:bb:ef:0d:2c:5d:10:
ac:b3:a8:c8:59:f2:69:6f:34:28:9a:ff:6a:14:df:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:E6:7D:FD:EF:C9:4B:5F:1A:E3:78:CD:4A:58:7B:27:C9:3E:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBA4102725711EF808DC861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.16.0/20
Signature Algorithm: sha256WithRSAEncryption
46:4b:33:2a:d1:da:92:c9:c8:be:c7:94:e5:0d:f6:7b:1a:dd:
e8:a0:c6:ea:4b:84:8c:a9:7a:e1:8e:63:b3:96:32:08:46:48:
bd:a1:82:ab:46:55:b6:26:ca:47:ce:2f:d4:10:c2:8f:ba:7e:
ba:ae:f5:49:50:67:ce:30:42:8e:24:6b:e6:13:f1:4b:71:88:
ed:6f:09:70:cf:0d:14:74:c0:bb:24:2e:4b:98:5a:ad:7f:9c:
e7:2b:75:3a:d5:8a:eb:d4:72:05:4e:92:4a:0e:6f:89:3f:a3:
a7:46:4a:91:b7:07:f9:76:b4:aa:1b:a2:5c:ab:0a:fc:04:f5:
7b:8c:a2:75:80:98:8b:01:14:ac:35:43:02:9d:eb:2d:e8:04:
95:e6:ad:2c:08:ec:cf:91:94:cc:ad:db:87:c4:23:00:50:91:
b8:d3:94:b7:d1:31:32:8e:28:59:ad:8f:0d:4a:ce:45:aa:fa:
4a:3a:68:d9:d9:ef:16:00:e1:44:ce:8c:90:c2:12:95:01:f9:
5c:bf:38:e0:29:b1:95:51:fa:95:33:33:e6:ce:03:94:c8:fe:
87:6c:cc:d7:a3:27:7d:1d:2a:7f:04:21:6e:8a:61:8c:ea:4c:
a8:ed:31:f1:b6:e4:20:74:c5:c9:da:42:03:23:a9:2b:71:93:
01:89:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org