Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F86CC8986211EF93365C75762E951A.roa
File: 31F86CC8986211EF93365C75762E951A.roa (raw, json)
Hash identifier: rgymqRbXhlvHtNQ2LgWBCL65pI0nPI/1WLKYpDduE0c=
Subject key identifier: 05:85:6E:EF:46:55:F6:96:B5:7D:65:6B:39:F9:65:A2:CE:1D:FF:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F86CC8986211EF93365C75762E951A.roa
Signing time: Fri 01 Nov 2024 15:01:38 +0000
ROA not before: Fri 01 Nov 2024 15:01:35 +0000
ROA not after: Tue 03 Dec 2024 15:01:35 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66815 (0x104ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:01:35 2024 GMT
Not After : Dec 3 15:01:35 2024 GMT
Subject: CN=6724ed52-d74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:2c:15:61:91:ae:b6:e7:1b:21:c9:37:6a:
7a:8f:30:ba:2e:af:2b:2d:3a:87:67:03:57:8b:60:
6c:b5:93:97:04:66:6c:b4:68:54:60:61:9d:cc:d9:
c1:69:99:49:0c:00:b4:2e:70:53:ac:16:b5:d5:8d:
43:ab:27:92:3f:75:71:d8:56:2a:e6:13:ca:56:3b:
2c:5d:9b:aa:e1:e7:6d:89:52:cf:9d:19:09:6d:ac:
37:75:d9:d8:25:26:b2:74:f9:ed:47:bc:56:94:26:
a5:f5:eb:c8:a7:34:7c:d5:6d:9c:55:6b:a6:35:df:
c1:9a:8e:3d:7e:16:f1:46:d8:17:cf:a9:cd:9d:20:
aa:4e:b7:36:c2:47:0d:d5:05:f6:4d:7b:90:33:33:
78:4c:74:65:63:0f:ea:85:71:6d:de:0b:8f:69:1c:
b3:ea:1f:9f:0b:62:3e:e0:99:37:cf:f6:25:ba:db:
80:5a:33:a7:5b:7f:c5:8a:a9:d2:52:11:e1:70:7f:
9f:7d:17:67:86:54:b6:ba:25:6a:71:95:e1:ab:7b:
8b:05:5a:51:ed:0a:9b:cb:cd:7f:a7:8c:56:25:34:
9c:11:2d:b2:ac:33:1a:b4:83:6e:52:66:e4:29:fe:
c0:14:27:f0:40:9a:90:f2:aa:8f:ca:3c:c6:09:ad:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:6E:EF:46:55:F6:96:B5:7D:65:6B:39:F9:65:A2:CE:1D:FF:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F86CC8986211EF93365C75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:e0:bb:22:d6:74:60:7a:e7:02:ae:f4:19:ec:ed:bd:cf:
cc:06:79:cb:ea:89:c0:5a:1d:82:1e:54:f0:8a:53:10:d1:ca:
76:8d:95:40:08:26:3e:81:00:30:5f:e0:5e:88:5a:64:15:55:
14:c0:a8:45:e7:e3:06:b1:96:e4:61:64:1f:fb:5b:59:e1:c9:
d5:5c:1d:2b:2b:16:c2:da:37:9e:45:2e:67:0e:48:5b:42:84:
46:d3:8c:76:d2:1c:9c:49:8a:aa:6c:b1:77:0f:e5:39:af:7d:
57:a8:a0:3f:8b:7a:2c:d3:6b:c5:53:9e:d4:1f:46:c2:bc:1e:
2e:ea:ce:3d:da:3a:83:08:aa:97:2e:72:72:fe:1c:18:4a:2a:
4f:ef:99:89:bf:a8:c4:9d:b6:c6:79:ea:15:0a:80:ee:97:04:
90:22:51:a9:f8:5c:92:a4:da:d9:e4:84:a0:8f:be:e0:23:32:
46:00:52:0e:2c:00:5c:0e:51:af:4c:25:3a:1d:ac:f5:3f:1f:
45:83:95:fc:a0:04:c3:56:cc:75:ab:35:ca:b2:96:ac:c2:f7:
18:b3:4f:73:4d:7b:1e:b7:b6:48:cc:03:6a:ce:02:5d:8d:4e:
50:26:cc:df:62:5f:d0:52:dd:5f:8d:f8:65:04:40:b4:9a:c1:
fb:fc:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:03 2024 by rpki-client on console-fra.rpki-client.org