Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE097E4A32511EFACC3177B762E951A.roa
File: 2FE097E4A32511EFACC3177B762E951A.roa (raw, json)
Hash identifier: 46n1RhqFOg/UaGKUHy8LFaQBGLvOXM2Kunb6/dpkvLE=
Subject key identifier: CE:BC:65:20:31:13:1A:D5:E9:A0:67:72:1B:7E:90:7C:1C:74:3E:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE097E4A32511EFACC3177B762E951A.roa
Signing time: Fri 15 Nov 2024 07:42:38 +0000
ROA not before: Fri 15 Nov 2024 07:42:35 +0000
ROA not after: Thu 12 Dec 2024 07:42:35 +0000
asID: 394432
IP address blocks: 154.196.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68936 (0x10d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:42:35 2024 GMT
Not After : Dec 12 07:42:35 2024 GMT
Subject: CN=6736fb6e-efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:d7:96:cf:79:83:f3:3d:1e:f3:13:6b:4f:
1d:dd:b1:15:5c:e2:99:5d:32:bd:57:ad:e1:26:a8:
55:51:72:f6:63:d8:27:70:7f:11:3a:34:2c:0d:b7:
b1:64:68:e0:2d:63:98:7f:c0:34:b1:d8:ca:a3:de:
89:3d:3f:69:83:3f:ab:36:35:e5:75:fa:d7:c9:c4:
36:7a:fc:ad:b1:83:ee:7d:1a:3d:3f:33:4d:3e:d8:
38:8d:15:65:b3:f2:a1:8e:3b:52:d5:f7:36:19:cb:
be:c1:a1:c3:4b:dc:33:fe:68:db:2e:b9:3d:e5:b5:
ad:b5:8a:79:7f:c8:3b:3b:94:78:8a:6e:62:14:55:
2d:fc:b8:b5:7e:ef:ac:8a:6c:40:e6:8d:09:f7:f4:
7a:e5:6a:05:7e:65:53:f1:a0:bc:42:4e:83:be:33:
c9:b7:17:a0:68:5e:d7:09:66:66:29:0e:8f:89:f0:
88:77:5e:cc:11:af:79:80:5a:b3:57:b3:2a:0c:2a:
28:5f:9b:d1:b0:61:a3:bd:0b:eb:30:27:9a:ea:f4:
e6:95:62:88:bf:1e:7f:ad:5a:15:35:a9:4e:af:58:
e4:fa:a9:05:70:f2:4f:69:eb:01:1e:00:fa:e5:a3:
cd:e5:e0:d7:44:de:51:46:5a:a0:bf:4a:5d:be:3e:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:65:20:31:13:1A:D5:E9:A0:67:72:1B:7E:90:7C:1C:74:3E:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE097E4A32511EFACC3177B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.205.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:0a:66:00:95:9e:56:a5:81:ee:d8:f8:47:4a:7e:9d:ac:e1:
48:73:32:e3:34:25:54:a5:0d:10:e9:f1:1c:25:0d:bb:d4:43:
00:fd:a7:87:d3:8e:8c:23:08:1b:e5:2c:fe:b6:30:91:d9:c2:
ad:e0:ca:6d:9d:ad:d6:50:83:fb:b7:b4:36:8e:a1:57:26:6e:
95:92:b2:09:6e:39:9b:1b:5d:44:37:bb:04:0d:3d:d5:21:e6:
08:18:a8:31:ff:c4:62:42:f1:7a:25:2d:76:63:11:41:82:0e:
25:52:6c:65:ab:a6:2f:49:aa:c3:3b:ba:46:11:ad:85:35:49:
11:0c:20:a0:68:f7:dc:9a:57:56:3f:c2:54:31:bf:87:83:f1:
41:4b:8b:45:4d:82:1d:7b:5b:b9:68:02:3f:18:23:35:12:94:
16:bc:d4:04:f4:65:fb:21:5d:20:d9:cd:b7:52:ec:67:66:2b:
23:14:79:c8:61:13:4d:ca:58:44:6b:c2:10:10:d5:3a:a9:99:
93:9c:86:cc:1f:c5:32:c1:5f:66:74:f4:02:0e:bc:58:5b:8f:
dd:8b:4b:ef:32:89:11:a0:cb:7e:b4:0a:34:ba:32:b1:73:5b:
55:91:a7:02:8e:ff:13:55:e4:f7:2b:86:98:32:ea:02:bd:44:
b5:67:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:46 2024 by rpki-client on console-ams.rpki-client.org