Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46C7613A855311EF87950343762E951A.roa
File: 46C7613A855311EF87950343762E951A.roa (raw, json)
Hash identifier: TglSqLA+zB+FInnpnRAvYXUjtAjtJvaqMwCuSKKaWzg=
Subject key identifier: FF:C7:AB:BD:28:D5:CF:BA:78:05:E0:60:50:22:A2:F8:5E:8B:20:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FABB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46C7613A855311EF87950343762E951A.roa
Signing time: Tue 08 Oct 2024 08:56:59 +0000
ROA not before: Tue 08 Oct 2024 08:56:55 +0000
ROA not after: Sat 03 Oct 2026 08:56:55 +0000
asID: 142132
IP address blocks: 154.196.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64187 (0xfabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 08:56:55 2024 GMT
Not After : Oct 3 08:56:55 2026 GMT
Subject: CN=6704f3db-af77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:62:1d:80:ee:ca:ec:42:f3:6b:d7:ae:a1:
21:98:bf:5f:69:58:13:bb:6a:78:66:7a:1d:78:bb:
f3:28:fd:14:2a:90:0d:08:26:29:4d:08:1a:37:ea:
f7:02:0d:81:ad:56:9a:4f:9e:08:1c:77:11:b5:2a:
47:3f:d5:fd:ec:fc:48:10:3d:6c:42:8b:09:78:8a:
02:d1:b8:9d:47:b8:3e:29:9b:4c:bf:5f:85:20:eb:
0c:04:c6:ba:7f:f9:42:20:50:77:88:25:af:5e:02:
54:e1:98:94:0a:3e:de:88:e4:92:fc:5b:85:70:a9:
21:1d:f3:1e:4e:4c:18:00:31:85:49:d0:4d:4b:b4:
49:12:05:42:47:b4:31:25:19:b1:4b:88:d8:d5:4b:
21:70:b6:e0:ec:ba:f6:ea:a0:fe:53:1a:78:ce:33:
08:c0:3c:b6:8c:1f:82:30:2f:00:a4:5e:bd:ac:72:
a3:97:bb:3d:b6:4f:c4:5c:d3:b2:e8:5a:76:56:1f:
34:8e:8f:2f:58:89:9b:4f:a9:68:73:28:e3:89:d8:
2a:34:d5:45:7a:06:a5:dc:ed:13:df:a8:7d:d7:6f:
1a:6e:92:dc:60:32:0a:af:8a:0b:08:6a:e5:60:fb:
a5:d9:b0:ce:d6:28:9b:55:91:a9:6b:78:38:55:ca:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:AB:BD:28:D5:CF:BA:78:05:E0:60:50:22:A2:F8:5E:8B:20:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46C7613A855311EF87950343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b4:34:cd:36:47:82:96:03:39:86:bc:44:b7:96:73:d7:e6:
6f:51:c8:f8:76:b8:d9:6e:e4:26:a2:a8:5d:11:9d:e2:a4:46:
5f:8e:d4:d3:13:e0:d1:f6:6e:87:f6:ca:d8:91:3a:6d:ce:36:
bf:74:fb:98:88:17:e9:28:de:12:70:13:f2:cf:b9:46:ab:a8:
88:88:5d:9e:28:13:ce:fe:0c:32:ae:57:15:d4:a8:09:ef:f1:
61:7c:65:4a:7a:45:a6:f9:74:72:d0:a4:22:0c:66:b8:3a:c0:
65:31:2a:0d:fb:63:f0:fb:a0:a1:69:5b:87:c0:20:a3:6b:ee:
96:e7:bb:7b:d0:c2:0d:a8:b1:c0:24:31:59:27:23:bd:9b:e1:
54:03:5b:01:cc:a2:50:5b:06:ad:83:d9:e0:66:37:05:61:52:
1c:f9:a3:58:cd:f7:f3:2e:86:68:7c:af:5b:35:17:7b:f4:2d:
a3:e2:c4:fb:c9:e9:7b:d2:bc:9d:a0:bb:43:1f:d9:53:16:45:
e7:0e:9d:c8:99:ed:a7:c7:b7:36:bd:a5:0a:12:9f:84:b8:cc:
53:ba:a8:1c:90:6c:5e:a4:ec:56:ce:1d:f4:5f:44:91:ef:3f:
8a:4e:0d:08:60:95:04:28:2b:58:6a:4a:0c:eb:33:95:e9:db:
4a:13:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:07 2024 by rpki-client on console-ams.rpki-client.org