Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0BE81A96B411EF8CB56B5F762E951A.roa
File: 3D0BE81A96B411EF8CB56B5F762E951A.roa (raw, json)
Hash identifier: dD222dehWWYGS/e1OBNZF2yam8R2DnSTq+0/Nj2Mkfg=
Subject key identifier: 1C:0F:44:73:21:80:51:1F:B5:07:86:BA:5C:88:33:0B:6E:72:1E:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010415
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0BE81A96B411EF8CB56B5F762E951A.roa
Signing time: Wed 30 Oct 2024 11:43:54 +0000
ROA not before: Wed 30 Oct 2024 11:43:46 +0000
ROA not after: Wed 11 Dec 2024 11:43:46 +0000
asID: 138915
IP address blocks: 154.203.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66581 (0x10415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:43:46 2024 GMT
Not After : Dec 11 11:43:46 2024 GMT
Subject: CN=67221bfa-86d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:7a:3c:56:dc:0b:32:36:4b:60:b7:93:a9:
6b:ad:6d:9e:7d:fe:b1:f4:00:25:63:33:1d:5b:7c:
fc:cd:c5:a5:3f:39:64:71:4f:27:7a:f4:ec:d5:18:
79:34:0d:28:9f:73:b9:fd:7e:1b:de:d9:6c:c3:45:
ff:ab:7b:f7:8e:46:08:db:4e:b7:e5:01:b9:b7:a4:
54:b9:16:65:46:9c:51:d1:b6:a8:50:2b:6e:d7:ef:
58:86:e4:f4:82:e8:bb:cf:2d:93:9b:79:d7:e1:0e:
65:30:39:ce:83:11:dc:c8:a9:bd:e4:45:b7:cf:82:
8d:93:5a:e3:e6:fe:9f:60:a0:a2:fc:0b:8f:c5:42:
7f:9a:ba:d4:93:a0:c5:87:9f:83:bb:d7:b6:0a:2d:
02:87:5b:af:5f:8e:f3:6b:75:54:42:1a:1b:fd:6e:
13:e8:c4:81:0f:bb:93:d1:14:75:3e:60:e6:72:f9:
94:d9:81:c7:bb:a8:2c:8c:a5:32:d3:ec:de:26:0f:
7a:da:94:82:fe:0b:39:f3:18:cc:7d:8c:54:62:eb:
3c:f2:c8:4f:1a:23:a4:df:8d:91:e8:6b:b0:6e:f1:
56:62:3f:b3:cd:aa:23:bb:40:73:f6:e7:37:1e:59:
96:70:3e:c6:d9:00:03:46:4d:5a:08:44:f9:e9:b8:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:44:73:21:80:51:1F:B5:07:86:BA:5C:88:33:0B:6E:72:1E:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D0BE81A96B411EF8CB56B5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:f1:06:2d:59:0e:58:ad:82:46:d9:c4:33:e9:ee:5e:16:34:
84:ba:0f:1b:bd:4e:8f:a8:c1:46:10:96:b8:c9:a2:31:01:f7:
fc:9f:a8:c1:d1:22:c6:21:f9:3d:c8:56:68:76:b0:f5:3f:52:
9e:b6:50:c2:df:a4:9b:74:0b:a8:09:08:83:ff:05:25:57:7d:
2d:8a:d2:65:0c:8c:62:13:e9:16:9b:5f:3e:7c:30:2a:e9:61:
f1:db:bc:47:ce:fb:ea:02:b9:b7:71:9d:47:04:9f:c2:78:1b:
fe:80:8f:91:ff:74:3d:ee:26:a8:af:95:ae:fe:98:88:4e:0e:
5e:c8:b1:08:fc:4b:8f:8c:ff:8d:fc:79:4d:b7:cc:96:b3:70:
37:a6:93:de:2f:ef:d8:a0:98:31:73:d7:27:e6:ce:ca:5f:5f:
bd:5b:1b:b0:66:fe:50:f3:71:a3:2f:d0:fd:79:02:c9:ba:19:
99:b5:9a:1d:5e:40:51:cc:9b:35:a8:2d:a2:d4:f9:be:6d:7e:
37:30:04:b6:91:9a:0d:cf:92:9a:1d:16:3a:d8:3a:52:db:16:
09:18:fb:e1:11:1f:c5:25:31:c6:f6:ab:34:8b:e9:fd:e5:e3:
f6:f3:f6:d4:3d:6e:64:3c:16:17:67:a6:ea:c4:18:67:81:5a:
0f:9b:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org