Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20BC08DE3F5C11EFB15CD27D762E951A.roa
File: 20BC08DE3F5C11EFB15CD27D762E951A.roa (raw, json)
Hash identifier: dVODOZ7OTMdSfpoyZv6mua2l6erxOAQjgPdXhTQQIcw=
Subject key identifier: 2C:CB:AD:E3:26:E1:E1:E6:BA:A9:7C:43:8A:CC:E9:68:14:02:A6:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D0A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20BC08DE3F5C11EFB15CD27D762E951A.roa
Signing time: Thu 11 Jul 2024 08:03:59 +0000
ROA not before: Thu 11 Jul 2024 08:03:56 +0000
ROA not after: Tue 22 Jul 2025 08:03:56 +0000
asID: 209242
IP address blocks: 154.194.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53410 (0xd0a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 08:03:56 2024 GMT
Not After : Jul 22 08:03:56 2025 GMT
Subject: CN=668f91ef-a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c9:88:98:7d:f8:6c:2a:17:0d:44:40:64:68:
5e:51:47:f7:2d:66:02:d1:54:72:93:8c:68:d5:17:
98:98:90:ad:67:99:4d:58:5f:63:07:0c:c5:62:0e:
8b:9b:e5:28:c5:fe:a4:01:41:35:8b:67:c9:93:12:
17:c1:0a:b9:4c:71:f1:97:6f:80:ed:52:6a:ea:59:
96:81:ce:6e:99:e5:8b:f2:f5:b6:0d:a9:e0:e6:d4:
c7:d6:54:05:8e:09:9a:2e:c2:90:4a:10:74:2d:90:
ea:d0:b3:7a:5d:72:c3:8d:44:1f:26:a0:0f:17:cc:
f8:a4:03:c1:5a:26:74:a2:4f:e2:00:4f:c0:5b:6f:
06:7f:12:83:f1:17:c2:8e:52:0d:23:70:91:c8:c9:
7a:b5:0c:2c:59:2f:33:ef:fa:57:29:20:5f:cf:fe:
cf:68:1e:79:29:c7:e8:82:35:04:52:bb:dd:98:f0:
35:08:62:7c:77:6e:36:e1:5c:d8:16:3b:68:c4:de:
75:2e:fe:ea:d0:ae:68:0c:f1:27:27:01:5d:a3:1d:
3f:36:7d:a2:f3:6f:16:5f:04:d7:be:66:ee:da:16:
35:f4:2b:b7:5f:e8:68:8e:77:a9:6d:0e:6c:c0:4e:
e3:98:24:98:97:b5:56:1e:ad:cd:9c:f0:ac:a4:87:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:AD:E3:26:E1:E1:E6:BA:A9:7C:43:8A:CC:E9:68:14:02:A6:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20BC08DE3F5C11EFB15CD27D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:67:66:ea:60:e6:21:2a:14:6f:aa:29:27:d0:4e:f5:11:03:
ab:f4:fb:09:af:84:2e:81:e2:ff:ec:90:39:45:5a:f2:af:2e:
62:91:40:ce:de:14:16:80:02:8b:79:6a:de:c3:d0:18:4e:a0:
da:b3:73:b0:b1:9f:fa:22:08:59:82:1e:57:d5:1e:b2:a0:05:
a7:f9:f1:cf:5d:96:c7:ef:05:22:cb:0a:d3:9e:35:a1:a5:8a:
73:34:de:1b:ab:4e:73:b0:ba:49:ac:35:bf:0d:2f:3a:b7:ac:
59:8d:fd:57:36:3d:69:c0:40:51:35:0c:72:e9:a1:fd:a5:8b:
2d:0b:c6:ab:29:77:8c:8d:b1:98:41:7b:6a:26:69:1c:5e:78:
82:62:d5:88:5b:03:e7:35:73:b1:3e:74:2d:24:60:e8:38:d6:
c9:c0:52:2b:70:ac:97:95:5f:bc:f1:19:2b:05:68:e7:93:42:
0c:cb:93:81:23:aa:67:61:d2:43:4f:d3:da:72:1d:de:46:af:
2c:54:67:c7:f9:3d:7f:a7:c6:14:68:56:12:37:df:3f:3f:4e:
5a:c0:14:90:3e:06:2d:af:f8:f4:8f:de:95:bd:c7:bb:fa:29:
c0:53:13:f9:8f:c6:d9:ed:0c:94:29:66:f9:43:e2:36:66:ca:
3d:d7:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org