Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36D8B862A00D11EF90F10F4F762E951A.roa
File: 36D8B862A00D11EF90F10F4F762E951A.roa (raw, json)
Hash identifier: ASw3L+kdaHazh633c/vADmHC2kKxF/X0x8RxTtPKJiM=
Subject key identifier: DC:1C:7F:1C:01:60:47:52:67:9E:83:DD:5A:2B:C7:7E:FF:4A:53:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36D8B862A00D11EF90F10F4F762E951A.roa
Signing time: Mon 11 Nov 2024 09:13:29 +0000
ROA not before: Mon 11 Nov 2024 09:13:25 +0000
ROA not after: Fri 22 Nov 2024 09:13:25 +0000
asID: 215240
IP address blocks: 154.216.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 09:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68575 (0x10bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 11 09:13:25 2024 GMT
Not After : Nov 22 09:13:25 2024 GMT
Subject: CN=6731cab9-cc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:e0:ca:3f:38:b9:4e:d4:19:38:0a:f0:58:
0c:5e:30:59:46:30:05:c8:24:ee:f5:c9:27:89:8a:
bd:a3:7f:68:d7:fa:49:c2:d9:c9:0f:01:b8:c6:21:
88:92:d1:5a:f7:96:12:ae:bb:5c:2e:86:a6:b6:0f:
57:9c:a5:10:22:f2:6b:0a:99:03:54:fb:99:82:53:
60:1d:ec:e2:61:69:b4:6f:1b:dc:c4:85:59:fb:7e:
b7:c2:d2:f4:0a:d2:77:b6:a3:2e:3c:ac:cc:e4:a5:
79:20:aa:e2:aa:3a:1b:de:cb:21:2b:97:73:99:46:
28:6d:db:6f:d0:97:9a:2e:d7:d7:4e:a8:3a:2a:91:
29:87:15:c6:65:68:f0:4a:21:64:a7:4e:32:b6:d0:
3f:b6:5d:d3:4b:ba:78:fb:37:1d:7e:72:f2:37:7b:
f4:2c:de:02:2c:0e:ff:c0:bc:68:7c:aa:e0:23:f6:
87:4b:2c:31:d6:db:a1:89:85:c0:17:e3:66:6c:4d:
1f:bf:50:9c:5b:68:82:0a:33:73:4a:b7:69:a9:dc:
39:f6:7c:3f:40:dc:e7:5a:47:71:62:1d:0e:6c:9b:
36:3f:f0:67:e4:85:32:e2:c8:a6:1d:af:f3:39:ff:
e6:ec:7a:51:9c:20:1d:3b:ce:ca:b6:41:b2:a7:19:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:7F:1C:01:60:47:52:67:9E:83:DD:5A:2B:C7:7E:FF:4A:53:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36D8B862A00D11EF90F10F4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.20.0/24
Signature Algorithm: sha256WithRSAEncryption
51:20:26:5d:16:9e:de:5e:af:0c:f8:c0:bd:04:e8:0b:49:78:
6e:87:94:65:63:3b:4b:a5:07:ae:a8:5c:13:a0:1a:04:71:31:
f1:be:77:54:d6:7e:3c:32:ec:3f:c0:e8:77:23:9f:31:20:52:
1a:34:b8:4b:c8:5f:c5:49:82:b8:69:3e:14:c8:36:46:81:17:
af:7a:02:98:3b:09:a8:5c:7a:ad:06:e0:16:c7:43:7d:10:bd:
a6:b5:45:14:ac:10:64:e3:70:43:a2:d1:0a:6e:5f:eb:02:1c:
43:d3:5a:eb:9f:2a:d1:ed:82:60:85:7f:b6:2b:e7:d5:87:71:
2d:fa:b4:bc:64:48:d9:cb:9a:e2:e2:60:2a:34:b2:11:2f:6d:
ad:c4:00:5e:54:2f:60:88:54:a9:ce:04:20:9c:ae:5e:f3:90:
7c:22:ba:bb:65:65:08:62:bb:62:be:c4:53:00:a8:07:e3:04:
7a:b2:87:1d:f9:1e:5e:6d:1d:7f:7d:e5:a3:c4:3a:2e:7b:f2:
9b:d9:19:3f:04:21:5e:bb:d2:12:31:05:a4:76:c0:3c:a1:fe:
83:74:cb:e5:a8:f4:78:23:e2:a1:82:38:22:81:ca:3c:44:ff:
47:81:3b:01:53:6c:bc:97:10:c4:8e:ba:5b:64:5a:e4:09:10:
24:bd:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:03 2024 by rpki-client on console-fra.rpki-client.org