Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4214DCE692B711EF83969BBE762E951A.roa
File: 4214DCE692B711EF83969BBE762E951A.roa (raw, json)
Hash identifier: Bl8SODG/IEyxvv6tu33BlFEKREMCh0EcM/EZcXcrmRo=
Subject key identifier: 7A:E5:7D:4D:B1:9E:A9:8E:F5:17:D2:A4:14:9F:7C:A5:97:29:C2:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01020C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4214DCE692B711EF83969BBE762E951A.roa
Signing time: Fri 25 Oct 2024 09:55:26 +0000
ROA not before: Fri 25 Oct 2024 09:55:22 +0000
ROA not after: Sun 01 Dec 2024 09:55:22 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66060 (0x1020c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:55:22 2024 GMT
Not After : Dec 1 09:55:22 2024 GMT
Subject: CN=671b6b0e-58e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:4b:b0:d8:02:5a:29:80:af:a3:fd:41:a3:
12:3a:59:69:d0:12:e7:b2:c0:db:1c:26:c3:04:7f:
b9:82:26:42:93:49:81:f4:90:89:41:56:1f:41:3c:
50:ef:f5:99:58:73:fb:1c:24:8c:72:b6:05:08:77:
f7:15:81:59:21:52:2b:6c:0e:e9:82:10:29:2a:02:
64:03:0a:d8:a4:ab:bc:ff:31:59:3d:48:81:0f:85:
70:1e:44:02:e5:14:a9:de:d8:06:8a:68:86:59:6e:
a8:6a:4c:f6:97:0a:88:7b:10:f0:77:87:30:61:43:
22:04:ff:a2:c3:bc:f5:a2:a5:a0:95:db:d2:cd:99:
ff:8b:4f:37:78:24:24:8a:1f:7b:d3:63:1a:66:94:
1c:62:06:49:bc:20:e4:18:35:62:ca:fb:de:11:3b:
94:a0:da:ec:e9:01:a3:78:fb:2d:6e:9b:ca:c2:2b:
27:b3:64:cb:b6:a9:5a:dd:ff:06:4a:80:cb:af:59:
f1:5d:66:8c:2c:fc:69:eb:36:d5:56:2f:8d:64:d1:
24:9b:11:51:4a:a1:04:ba:c1:03:1d:cb:f9:fb:a7:
7d:be:bd:db:05:51:0a:86:57:57:9b:1c:29:29:d0:
3e:b7:17:f4:a8:ed:9b:b4:40:31:e8:f1:57:b9:17:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:7D:4D:B1:9E:A9:8E:F5:17:D2:A4:14:9F:7C:A5:97:29:C2:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4214DCE692B711EF83969BBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:c8:8a:27:46:38:c5:71:8c:c0:5c:89:84:5d:e9:77:80:
b2:fa:3a:de:05:20:98:ee:de:e2:da:e3:9a:71:71:53:61:50:
5f:d6:42:9b:33:86:30:6d:7d:82:73:ac:2c:bb:0e:58:c3:c8:
00:dc:07:0a:90:28:22:2b:1e:bc:3f:cf:61:55:3b:ca:4d:98:
83:32:29:51:7c:66:90:bf:d5:d5:ba:83:d1:5c:c6:cb:a1:18:
14:1a:f4:e9:de:07:ed:12:f0:1e:f8:98:1b:30:92:ca:14:11:
7a:e0:1a:23:3f:aa:0d:fa:32:f8:03:58:98:f9:73:f4:03:7e:
28:05:64:ae:bb:3e:c8:26:56:92:a7:b8:1c:0d:b4:72:62:7b:
6a:c5:86:74:be:cb:07:21:66:f7:54:2e:de:19:29:97:47:91:
70:ca:a7:2f:c4:a3:71:db:18:92:25:c2:ac:0e:de:ca:8b:66:
5f:33:72:0f:4e:9d:4e:d0:11:e3:ce:df:d2:83:b9:53:18:11:
7b:5d:fa:22:98:c6:3f:9b:dd:89:1a:18:94:7a:f4:bf:e1:5f:
5b:c1:02:56:02:50:84:09:e8:61:d3:ce:ed:41:fa:93:0d:86:
f5:8a:49:d9:3b:c8:a8:5f:f2:d3:a3:66:da:20:d4:4e:ac:10:
72:36:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:50:26 2024 by rpki-client on console-fra.rpki-client.org