Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBCF6265A0D11EF9F44A8B9762E951A.roa
File: 2DBCF6265A0D11EF9F44A8B9762E951A.roa (raw, json)
Hash identifier: o/yfrJ3Yy5pRmyNXFKpHH8U//MYqJb6XdwkHumKKG18=
Subject key identifier: 15:1F:77:48:70:C6:B6:D7:51:67:8A:9E:A3:C5:53:53:31:78:1A:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E064
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBCF6265A0D11EF9F44A8B9762E951A.roa
Signing time: Wed 14 Aug 2024 07:16:52 +0000
ROA not before: Wed 14 Aug 2024 07:16:49 +0000
ROA not after: Thu 21 Aug 2025 07:16:49 +0000
asID: 209242
IP address blocks: 154.218.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57444 (0xe064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 14 07:16:49 2024 GMT
Not After : Aug 21 07:16:49 2025 GMT
Subject: CN=66bc59e4-cd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:2c:3a:1f:bb:44:4b:02:21:2c:7c:29:3f:
e8:1e:71:10:5a:c2:09:e7:1d:d2:5f:e4:7b:40:9b:
60:1f:94:06:0d:43:06:10:a1:41:c3:f1:b8:6f:61:
a0:77:97:58:05:5b:eb:ba:c6:cc:06:73:6f:d2:54:
ab:c1:a1:71:91:84:c9:3f:c7:98:28:d0:b1:e4:c8:
67:d2:d6:30:5d:94:be:2a:66:5a:3d:a5:e1:58:7b:
d7:35:ab:9d:ac:8a:4f:f4:ce:d2:b2:6e:86:26:d3:
1e:96:b4:82:e2:c0:3d:c2:f0:6a:eb:b2:14:9b:2f:
c6:98:3b:82:15:86:b2:10:e8:77:12:06:30:5d:f1:
e5:87:38:b0:5c:77:af:d5:6e:4c:ff:32:e3:c7:8f:
3c:a9:6b:d7:8e:77:85:19:79:7c:87:05:ae:63:22:
70:18:d8:ac:df:94:81:06:e8:32:75:10:eb:c9:dd:
5f:e4:e6:f5:47:76:de:4c:c3:1d:7c:df:d7:bd:aa:
b1:8a:d3:bd:83:2e:35:75:94:b8:9b:97:e2:61:14:
29:c2:d2:63:d0:2f:6d:88:29:b3:04:60:3a:83:ed:
31:f9:33:69:a8:4c:88:65:c7:13:03:c8:a9:10:89:
b0:a8:0e:3d:ac:97:a3:a3:77:33:9e:f2:88:7d:24:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:77:48:70:C6:B6:D7:51:67:8A:9E:A3:C5:53:53:31:78:1A:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBCF6265A0D11EF9F44A8B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a8:b9:07:ff:fd:31:2b:7d:55:b8:93:45:9a:0f:21:c1:64:
76:6c:e1:9d:ca:ab:e6:44:0e:6a:21:81:53:64:26:11:ad:8a:
36:cd:90:28:78:1b:68:02:4a:82:1c:49:0a:85:42:b6:43:c8:
52:21:19:22:22:ae:c1:78:60:92:2f:34:b7:3f:31:ce:fc:43:
67:2d:43:4d:43:f3:14:69:7b:ca:ac:71:33:3c:17:77:84:01:
61:75:e0:fa:52:09:93:fb:58:a4:2b:db:e0:59:d8:cf:22:c1:
2d:b9:c2:6a:f0:14:96:e4:f4:54:c5:59:08:cf:b1:5d:d5:e5:
5a:15:7d:cf:ca:a3:e3:40:1c:0d:78:9f:f1:f7:d0:21:a3:03:
ec:47:08:bd:26:46:f0:61:08:01:48:39:f6:9b:9b:35:1e:2a:
da:98:15:72:dd:71:05:35:49:84:e2:a0:be:f3:d9:c3:d4:52:
93:24:8d:c1:6d:75:26:a2:c4:5e:e6:8d:df:54:44:7a:9d:de:
67:d0:6a:bc:de:ac:72:df:0c:1c:db:4b:5e:76:e6:d1:ab:71:
5e:45:ff:a1:16:df:9d:c9:cb:e7:00:f1:7a:5e:de:5c:ec:0a:
74:fa:0e:8b:e4:92:7d:b9:7c:c0:01:08:11:ee:a7:8a:5b:01:
5c:42:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:02 2024 by rpki-client on console-fra.rpki-client.org