Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0CA078A8E311EFBE84948B762E951A.roa
File: 3A0CA078A8E311EFBE84948B762E951A.roa (raw, json)
Hash identifier: D5VLKw+pfME3ZcEUmoTmBT3jf0nQJNFrvYu2m4DLH4g=
Subject key identifier: FA:AD:9B:FD:2B:13:49:89:8B:61:B2:B8:70:C6:72:92:B5:08:D0:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0CA078A8E311EFBE84948B762E951A.roa
Signing time: Fri 22 Nov 2024 15:05:36 +0000
ROA not before: Fri 22 Nov 2024 15:05:32 +0000
ROA not after: Tue 03 Dec 2024 15:05:32 +0000
asID: 62240
IP address blocks: 154.194.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69805 (0x110ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:05:32 2024 GMT
Not After : Dec 3 15:05:32 2024 GMT
Subject: CN=67409dc0-4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:14:fc:0a:6f:24:be:f2:85:35:32:c0:d4:
d3:62:c6:c4:ea:88:e1:20:98:e6:55:f0:ca:65:ee:
3f:6e:06:dd:31:7d:4b:23:27:84:cd:d9:3d:74:92:
77:76:fc:c5:06:82:90:b1:9a:a0:d9:56:f8:ff:4e:
93:29:60:17:80:3b:bc:04:51:4a:c4:20:d0:fc:2d:
cf:31:88:b8:7c:17:5a:ff:08:b4:07:5c:00:24:6e:
27:5b:31:9f:b4:ad:00:27:aa:25:94:75:25:73:64:
92:22:5b:6b:4d:48:2e:d4:d6:d4:c0:71:83:8e:30:
6e:46:6e:ce:5c:62:47:4a:c4:1e:0e:59:14:f2:12:
16:a2:5b:72:40:c4:5d:0a:fa:9f:64:ff:18:68:94:
be:7e:22:4c:f3:47:1a:91:62:10:00:3a:40:06:06:
bd:7c:d8:22:11:4c:fc:95:ef:94:e3:e3:7f:83:f1:
0e:e0:7e:88:39:90:07:a9:4b:c0:d7:10:b2:7d:3c:
9f:9f:a4:21:ab:77:9b:2e:0f:41:fe:9a:d1:b0:f6:
6f:63:35:da:35:0c:31:44:2a:c6:28:f5:2e:31:c7:
0e:f9:72:d2:12:bf:2a:41:6b:25:bc:92:c5:47:41:
e1:af:92:06:8a:64:f0:3c:45:69:63:bb:be:6e:83:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:9B:FD:2B:13:49:89:8B:61:B2:B8:70:C6:72:92:B5:08:D0:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0CA078A8E311EFBE84948B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.88.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a5:7b:37:84:27:fa:f0:2a:05:b4:2a:ff:1d:d8:b8:4e:52:
ee:41:a3:f5:ea:8e:1f:c7:f2:00:c2:40:e9:59:59:ea:5d:95:
d4:a0:e2:25:b6:6b:73:96:b0:e1:a9:25:ac:a9:2c:24:26:13:
ba:c7:5c:91:f7:f3:c2:bc:42:45:33:51:8c:78:b2:82:61:16:
21:0b:d7:92:a5:0f:0e:3b:10:dc:02:e1:c5:2b:cb:b6:da:d8:
98:38:65:e6:3e:85:36:ff:2c:b9:18:99:ae:05:1e:62:45:d6:
96:3b:00:b2:ad:a0:79:75:75:95:da:3e:5f:7c:e3:fa:8f:bd:
9e:f0:56:82:ca:7a:cb:6d:cd:10:1e:42:b8:99:f8:96:30:6b:
25:6e:e2:c6:9d:22:e8:8b:9b:47:40:42:83:c2:fa:a9:f0:ae:
3f:b7:29:71:23:05:33:85:6c:24:9e:a4:70:e2:f9:05:28:6a:
21:e0:23:d2:15:a8:e7:0c:68:51:37:3c:28:3e:22:0b:f3:06:
fd:01:91:90:08:56:2a:c1:5c:1c:13:e4:92:ef:58:7b:c0:4f:
18:f4:50:2f:e7:26:7f:6b:6c:fe:93:42:2f:08:71:87:79:94:
36:89:69:f4:3f:34:ac:1a:13:7e:77:59:f3:56:92:e2:81:f0:
bb:37:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org