Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41594D9CA8DC11EFA4FB975F762E951A.roa
File: 41594D9CA8DC11EFA4FB975F762E951A.roa (raw, json)
Hash identifier: 0Cm7ciexBMjFJi6MXDyEg/jyh6htPTYemISceHJ3/Dc=
Subject key identifier: 25:54:38:91:9F:3A:7F:E0:7E:06:31:91:A0:89:8E:27:96:88:BE:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011059
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41594D9CA8DC11EFA4FB975F762E951A.roa
Signing time: Fri 22 Nov 2024 14:15:41 +0000
ROA not before: Fri 22 Nov 2024 14:15:38 +0000
ROA not after: Mon 09 Dec 2024 14:15:38 +0000
asID: 5065
IP address blocks: 154.206.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69721 (0x11059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:15:38 2024 GMT
Not After : Dec 9 14:15:38 2024 GMT
Subject: CN=6740920d-d651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:e1:d6:ad:c0:eb:50:9b:61:c1:39:e0:d8:
37:2d:20:ed:66:46:5d:d2:47:32:15:4a:fa:2a:41:
8b:ed:9c:7e:cb:21:2a:01:c6:36:f5:80:0c:be:d3:
33:a5:a1:db:c3:35:7e:64:c1:ca:6f:dd:55:c1:f6:
11:6d:de:cb:39:2d:59:7b:0e:dc:d3:64:55:3b:3c:
de:8e:91:f9:9d:de:79:ce:31:fc:76:0c:43:04:81:
4f:da:21:13:46:dd:e6:39:f5:c7:8e:d2:79:85:43:
a9:04:90:4f:ca:fe:a0:14:35:6f:c1:79:05:cb:e0:
a3:00:9e:9c:65:f2:80:8d:a4:4c:64:44:f6:24:1f:
cc:45:47:21:6e:59:5c:18:67:e6:98:88:71:eb:d1:
f6:bd:72:d9:9a:c0:71:0f:7b:2c:2e:bf:05:10:29:
86:f9:4b:61:ce:5c:3e:36:26:92:77:41:e2:c6:dd:
8c:df:80:d5:6d:e3:75:57:48:47:87:05:8d:a1:b6:
6e:73:cd:1d:84:8e:12:c9:f3:87:6d:aa:19:24:8e:
a0:7d:8e:3a:98:b7:1e:c2:9f:b8:33:68:7a:8b:8d:
ad:70:87:b5:dc:4d:ab:e8:1f:1f:e9:ba:79:43:98:
6d:b1:62:d0:c6:d1:18:4c:53:15:b3:99:c7:78:3c:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:38:91:9F:3A:7F:E0:7E:06:31:91:A0:89:8E:27:96:88:BE:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41594D9CA8DC11EFA4FB975F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:aa:1c:11:d2:7d:3e:f7:79:66:92:60:d0:26:bd:0a:56:39:
eb:39:43:ec:6a:54:31:ec:9c:42:ae:e2:fc:d7:a7:bb:c4:aa:
bb:d2:2d:43:ac:86:e8:3d:93:a4:42:2e:66:10:49:51:d7:9f:
c2:b7:f2:66:20:63:32:9b:d3:99:0e:51:30:27:05:a0:24:4b:
e1:5e:44:a2:fc:59:22:71:1f:63:18:e0:10:4e:0d:8f:b5:ce:
4a:26:e9:0c:b7:1a:1e:3f:de:f6:e0:fa:28:7e:47:15:58:43:
30:21:63:9b:4b:f5:1e:ec:d7:bd:af:c8:ca:3d:9a:46:fe:3a:
a0:b2:26:a7:54:e3:fc:9a:03:7a:65:0c:7b:87:95:b8:0d:58:
39:c7:57:f1:bc:7f:db:1c:ad:98:28:b9:0e:49:5e:bb:4f:22:
e7:a8:00:01:af:1a:26:3c:53:61:2e:2f:c8:94:c0:e3:2e:2d:
44:c6:91:ef:1e:04:51:8e:6c:95:05:d8:41:f1:22:40:e6:c2:
d7:3e:d6:40:af:a3:8e:d8:69:43:e1:dc:2d:7e:2b:ad:5c:a9:
10:c4:38:ab:e5:df:00:94:62:c5:75:54:04:dc:af:db:94:3a:
1b:bd:cc:7c:12:fd:09:e4:3d:6f:55:5b:66:66:35:b9:19:92:
75:9b:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:19 2024 by rpki-client on console-fra.rpki-client.org