Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A13592768711EF82ACAD96762E951A.roa
File: 39A13592768711EF82ACAD96762E951A.roa (raw, json)
Hash identifier: B/MhoQoDinKwuTJUCBOG3sDM5+BpGJM7SDuMUrBMIwc=
Subject key identifier: 49:EF:2F:0F:46:70:72:12:DF:BC:F7:44:21:AC:70:18:B6:28:D2:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A13592768711EF82ACAD96762E951A.roa
Signing time: Thu 19 Sep 2024 13:01:03 +0000
ROA not before: Thu 19 Sep 2024 13:00:59 +0000
ROA not after: Fri 08 Aug 2025 13:00:59 +0000
asID: 133861
IP address blocks: 154.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61569 (0xf081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:00:59 2024 GMT
Not After : Aug 8 13:00:59 2025 GMT
Subject: CN=66ec208f-817d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:f1:25:bf:af:fb:18:c9:1c:3e:6d:1b:65:
15:a2:8c:87:23:61:57:21:c2:2c:25:19:a8:ed:31:
06:89:a5:e2:b3:e7:62:4d:95:32:f4:ec:75:f3:63:
7c:72:92:88:b5:34:40:48:8a:99:f2:46:49:2b:38:
b6:66:9b:5f:f6:14:84:0d:26:39:8a:f6:0b:97:31:
3d:2d:28:fa:73:0d:c7:b8:09:00:31:30:a4:43:ab:
95:f7:01:59:2e:60:34:11:51:a2:7b:5f:89:34:1e:
54:3a:76:51:61:07:93:a6:2f:9a:7f:76:9a:8a:4f:
e0:37:cb:10:6d:ee:01:5d:28:07:15:61:71:6b:db:
25:5d:fc:a2:83:73:a6:6d:8c:b1:0a:87:26:70:fc:
0c:e1:18:9c:ee:ea:69:b7:7f:0e:28:36:b7:45:90:
9f:88:2e:64:4b:c3:d4:f5:4c:84:43:f4:31:6e:46:
80:15:64:3f:10:0d:57:4f:77:8b:1d:27:e8:1a:2f:
da:1c:e8:2d:9c:22:0e:7a:11:e2:f8:9e:e7:52:3b:
fc:ca:eb:7c:42:d0:88:24:bf:d7:da:c2:71:93:85:
60:28:f7:b7:99:a2:86:64:7f:1e:30:ad:14:c8:c0:
31:a2:f9:2d:c3:2a:4d:a4:f5:7d:12:4b:3c:c1:8b:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:2F:0F:46:70:72:12:DF:BC:F7:44:21:AC:70:18:B6:28:D2:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A13592768711EF82ACAD96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.55.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b5:97:ce:6f:b9:39:cb:06:87:37:24:7f:19:f4:71:9e:64:
60:54:b9:32:62:16:b8:b2:4c:28:ff:ef:30:16:cb:37:b4:53:
66:74:30:84:09:5c:ab:8f:d3:ad:c7:45:1f:30:6a:8e:fb:74:
a0:16:1f:84:0a:22:e2:f4:23:a6:6d:6a:db:53:6e:71:1c:d7:
25:e6:b3:94:45:87:61:f8:1f:61:a9:8b:9a:6f:32:e1:b4:97:
8a:1a:98:e1:ce:4c:9e:14:16:fd:80:86:c6:66:b6:f3:39:99:
a9:2f:01:58:da:86:45:4f:59:01:92:42:9c:c3:bd:eb:c8:8d:
29:b2:86:04:aa:d7:b5:af:0b:97:2f:29:d0:15:84:03:85:cd:
b2:aa:dd:d4:97:07:f1:f1:8c:fa:bc:91:38:e5:6c:ea:f8:ff:
0e:6b:35:10:30:f0:b6:ff:b3:97:8b:75:04:aa:64:a0:64:79:
3e:57:e1:53:62:53:f8:ad:f1:46:14:6f:16:d1:d7:1d:5d:d8:
25:3b:65:3b:5b:1d:ba:f0:ba:6f:03:86:e4:dc:88:8a:30:0c:
56:71:b2:62:f9:79:41:02:98:93:c4:28:c5:07:f6:69:57:bf:
cc:21:50:11:74:e0:74:a9:44:c0:c0:4b:f3:d5:f4:87:73:a1:
f7:c1:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org