Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327C326C768C11EF9ED6A5B4762E951A.roa
File: 327C326C768C11EF9ED6A5B4762E951A.roa (raw, json)
Hash identifier: w43QFOtwCiljGMfNRYJrSOIlobyqRTKAhmPTv2/KWUU=
Subject key identifier: 0B:86:0B:E9:6B:88:A2:51:E1:86:88:70:79:03:58:2E:2F:EE:79:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327C326C768C11EF9ED6A5B4762E951A.roa
Signing time: Thu 19 Sep 2024 13:36:39 +0000
ROA not before: Thu 19 Sep 2024 13:36:35 +0000
ROA not after: Sat 22 Mar 2025 13:36:35 +0000
asID: 142629
IP address blocks: 154.82.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61615 (0xf0af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:36:35 2024 GMT
Not After : Mar 22 13:36:35 2025 GMT
Subject: CN=66ec28e7-5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:9f:aa:0f:3e:dc:7b:67:00:e8:c9:e3:0d:
95:e9:d1:9b:87:d8:f1:1f:f3:78:75:bb:fb:49:40:
42:0a:15:fb:0b:29:ff:42:7b:f4:7f:98:3c:ed:df:
44:11:ba:39:fd:e5:29:b4:b0:5b:0a:e1:11:6a:23:
47:29:78:b8:a5:c6:19:a3:97:d6:bd:03:fd:74:52:
10:f0:3b:f6:c1:cc:d4:75:30:24:ee:8b:05:d2:02:
37:38:8d:26:56:a6:93:2d:8b:d9:d2:b9:b4:72:ad:
4e:d0:d4:f0:ab:c7:60:41:9d:76:fa:56:65:ea:37:
99:4f:86:51:d7:64:97:a3:be:e3:c0:44:6e:77:11:
00:84:e1:75:e5:50:4c:a5:b5:66:cd:9d:aa:ab:2c:
e2:fe:a5:70:e8:d9:2d:c1:8b:6d:0a:30:91:f5:82:
b1:41:ac:91:39:a4:f3:30:3f:64:3c:a0:39:d5:43:
67:7c:c6:0d:46:31:3c:56:6a:c3:1b:bf:bc:e0:20:
d5:e8:9e:4b:90:cb:04:46:e6:94:8d:8d:af:46:24:
ac:6b:d3:70:88:40:86:75:42:c5:00:88:b8:c3:2d:
7b:61:6f:06:f6:be:b3:4c:cd:bc:ac:d4:9b:7b:97:
4a:a5:35:13:14:40:5a:51:82:0b:ae:4a:e5:a9:22:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:0B:E9:6B:88:A2:51:E1:86:88:70:79:03:58:2E:2F:EE:79:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327C326C768C11EF9ED6A5B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.130.0/23
Signature Algorithm: sha256WithRSAEncryption
37:64:15:cb:45:7d:f6:57:1a:1f:24:97:f1:8b:74:66:1a:12:
36:76:db:c3:56:fa:8a:d6:db:44:1a:ca:9c:74:68:40:cb:fb:
cc:67:c1:7b:94:c4:1c:8d:ec:46:d6:4c:cb:c3:a7:b7:7d:bf:
10:a9:2c:7a:6e:13:7c:92:9c:e4:48:8b:af:c9:a4:12:4b:bb:
e3:ec:18:97:a9:55:29:5c:b6:15:0e:35:9a:96:87:2f:40:f0:
2d:3a:fe:64:f1:1b:03:43:18:66:92:d2:3b:56:1c:7e:b8:29:
15:8a:02:63:89:af:23:ce:ca:88:9c:6e:e9:f1:d0:39:b1:a8:
92:8d:b6:37:74:bf:df:00:44:af:48:7e:13:f5:e5:36:2d:5c:
6f:31:cf:91:0a:36:04:7e:4c:55:11:08:f5:f8:3c:1e:b2:a7:
70:f8:03:09:15:bc:56:bb:e4:45:c3:0a:67:99:f4:11:48:ca:
41:a5:f1:73:5c:f8:34:f8:17:2a:17:29:93:19:90:00:4b:b3:
49:96:f6:3e:c9:e3:7e:f8:63:bf:ba:7b:33:51:91:18:58:2f:
e4:31:93:82:c1:cc:c6:ee:9f:4c:f7:80:a4:b2:64:41:29:99:
e2:78:d6:a4:b8:56:12:d1:b5:61:1a:14:94:38:d7:71:60:d5:
57:d3:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:17 2024 by rpki-client on console-fra.rpki-client.org