Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3990620CA8E211EFB1B8DE84762E951A.roa
File: 3990620CA8E211EFB1B8DE84762E951A.roa (raw, json)
Hash identifier: QN5iIT3r0PRRkRTgCWp670qM5XPTHG9vkfC6C/ONEFA=
Subject key identifier: 8F:28:62:1D:CB:92:CE:8A:A8:A9:BB:0D:1E:CC:17:72:0E:F9:38:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3990620CA8E211EFB1B8DE84762E951A.roa
Signing time: Fri 22 Nov 2024 14:58:25 +0000
ROA not before: Fri 22 Nov 2024 14:58:22 +0000
ROA not after: Tue 03 Dec 2024 14:58:22 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69793 (0x110a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:58:22 2024 GMT
Not After : Dec 3 14:58:22 2024 GMT
Subject: CN=67409c11-12a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:df:dc:10:29:74:32:25:da:2e:13:b5:03:
5f:99:27:96:97:75:05:1a:17:fe:a3:3a:5f:62:6b:
5c:b3:ca:2a:30:ed:d1:b6:20:fc:57:29:10:ff:a9:
72:29:23:cb:10:c3:5b:7d:89:33:41:f8:5e:17:46:
a4:98:e6:b7:6c:00:d2:4f:22:87:00:0e:1b:e8:b1:
1a:36:5a:69:15:fd:87:28:13:87:f0:73:68:5b:18:
5a:9f:5f:96:36:8c:9a:49:d8:74:99:83:a3:f3:e1:
92:61:be:3b:04:d1:8c:1e:54:4d:c5:04:49:44:3d:
56:2b:40:e9:dd:1b:03:3f:ba:82:3b:47:fc:a3:52:
58:1f:cc:f6:a1:fa:99:77:65:e8:4b:b3:1e:08:ea:
03:02:62:65:29:fe:cc:6a:85:a5:b2:54:5f:c8:fc:
c2:78:f8:df:d7:31:e6:19:69:ba:15:8b:d2:6c:05:
f1:f3:3f:50:10:c6:67:a2:dd:94:86:aa:49:15:0f:
6d:98:89:a0:b1:57:5b:a3:11:91:b7:56:0b:8d:0c:
e5:c2:ed:be:8e:8e:ec:fb:a6:19:0e:01:49:df:18:
5a:6c:b4:53:18:34:1e:b9:54:35:31:1a:94:f7:be:
54:83:22:3f:b6:da:dd:3e:f7:81:f3:15:7e:72:91:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:62:1D:CB:92:CE:8A:A8:A9:BB:0D:1E:CC:17:72:0E:F9:38:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3990620CA8E211EFB1B8DE84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d9:a0:00:61:72:71:be:22:91:6c:1c:44:49:08:cf:5e:7b:
48:82:d4:0b:30:71:cd:d4:b6:8c:af:57:a7:18:cd:ca:38:f9:
56:a4:b5:25:ea:d5:08:6e:ca:0f:1d:f6:1e:d3:35:0e:fd:98:
73:72:a7:9f:b2:13:48:df:c8:84:f3:a2:16:b3:d7:c5:81:b5:
4b:c5:fb:d6:41:3d:fd:49:2d:34:fb:a4:a1:3a:a6:9d:0a:42:
75:8e:70:01:4d:1b:31:af:3f:6e:1f:98:26:70:b6:ce:4b:5f:
fb:4d:9b:40:19:7c:8c:31:29:ab:7d:9a:0b:f3:68:c4:d4:8a:
9e:c8:5d:43:a0:91:d8:44:fb:03:22:75:5c:41:a3:86:f9:86:
51:af:d4:5c:b1:a7:59:d6:f4:ee:27:ba:50:58:69:3a:0d:4e:
2e:b9:a8:63:18:1e:04:e7:66:20:42:cc:82:0d:79:9c:fc:d8:
67:4c:35:eb:01:dd:26:ee:37:f1:c3:89:66:64:6f:08:10:27:
69:d4:dd:c4:3d:ac:54:b9:72:b9:e1:ca:37:c5:ed:99:4c:de:
56:bd:40:fe:44:92:82:71:87:3b:b8:a7:37:fd:1a:46:d9:4b:
86:53:e7:6f:4c:48:d2:bc:ad:5e:2c:26:96:ba:e8:62:09:a7:
0f:f9:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org