Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F6F540951011EFB7F3FD86762E951A.roa
File: 32F6F540951011EFB7F3FD86762E951A.roa (raw, json)
Hash identifier: 0cn9EuyjXBYoq/gMw3ozKgKw+VniMdcoQjBpXcDK7Dw=
Subject key identifier: 6F:FD:E6:B4:D0:BA:48:0A:3D:B3:E2:DC:B8:1C:9A:E0:16:DE:03:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F6F540951011EFB7F3FD86762E951A.roa
Signing time: Mon 28 Oct 2024 09:37:08 +0000
ROA not before: Mon 28 Oct 2024 09:37:04 +0000
ROA not after: Wed 29 Jan 2025 09:37:04 +0000
asID: 400175
IP address blocks: 154.203.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66243 (0x102c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:37:04 2024 GMT
Not After : Jan 29 09:37:04 2025 GMT
Subject: CN=671f5b44-7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:4c:e9:75:63:52:52:6c:31:a5:1d:2e:4a:
03:4f:88:7c:5d:05:fe:05:fe:79:aa:67:15:e7:31:
29:e4:8a:fb:71:68:6e:6c:3a:60:77:2e:bf:f3:fc:
51:1d:4f:fb:d4:b3:87:ef:fe:ab:51:c0:47:2a:d7:
d9:fb:f8:d3:6c:49:63:b4:4f:db:f1:f4:d9:96:f6:
9f:ca:8f:cb:ad:24:31:94:4e:ac:3a:e3:84:35:1b:
ef:77:fd:d4:31:69:3a:07:05:08:66:51:71:b8:9d:
e7:dd:44:e5:cc:56:0a:88:f3:76:a9:11:ca:db:78:
af:23:24:f2:0c:14:4c:30:1a:4b:2c:9e:2d:46:1a:
9b:57:8a:48:85:93:0f:66:7f:7d:e3:f1:74:41:b8:
0e:99:3a:39:22:99:87:2b:96:6d:2d:9a:2a:16:b8:
42:e1:7a:a5:bd:4a:06:3e:e6:bb:6e:7d:22:d7:0e:
a2:b6:17:6c:6d:de:e2:99:52:09:73:62:aa:7b:36:
28:5c:18:d9:92:3f:db:bd:45:0e:31:67:b4:9a:a9:
32:97:07:60:d1:4a:ec:48:94:74:4f:cf:dc:a1:5e:
14:70:e3:1a:a1:2a:e1:45:d3:e8:f1:59:12:e8:88:
03:e4:f8:2c:34:7d:16:63:e1:d7:62:22:83:3d:bc:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:E6:B4:D0:BA:48:0A:3D:B3:E2:DC:B8:1C:9A:E0:16:DE:03:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F6F540951011EFB7F3FD86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
Signature Algorithm: sha256WithRSAEncryption
01:60:29:f7:da:b3:25:6b:01:8f:44:98:a1:17:32:fd:ef:84:
68:47:4f:f1:ea:33:09:82:31:4b:9d:10:4a:b2:28:2d:bf:f7:
d9:3e:8d:c6:7f:be:bf:94:d3:62:73:5f:aa:2f:da:ea:81:e1:
27:1a:6f:0a:43:4b:65:a4:b0:18:3b:10:99:c1:a7:69:88:35:
1c:2d:5e:e3:23:aa:84:8f:dc:d6:b2:9b:f7:4e:7f:39:3f:cf:
b4:23:b2:9f:b2:bd:23:e0:e1:9e:05:be:4b:b7:96:04:d2:d7:
c3:7f:50:57:b3:b7:f1:09:d8:26:36:da:73:ce:24:f7:0e:fd:
7a:2a:05:5c:17:cd:89:f9:92:5f:e2:0d:53:95:59:2c:ed:4f:
00:70:d1:d8:3f:a5:fe:6d:06:4d:28:be:d0:17:0f:9b:1d:d8:
da:87:0a:b7:49:a9:03:03:29:0d:b3:83:59:bf:7e:88:6f:52:
4a:99:20:57:9b:ae:99:b1:2d:7e:df:7a:34:bf:d0:ab:cf:2d:
c8:5f:c0:f7:3c:47:dd:77:0e:14:43:ce:97:af:e4:5d:6e:10:
fe:ad:86:0d:ca:cb:f7:ec:96:81:09:dd:67:4c:19:9c:49:87:
97:ea:94:e2:09:39:26:76:00:b7:33:cf:de:b3:45:c6:61:6a:
94:31:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:54:17 2024 by rpki-client on console-fra.rpki-client.org