Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1B8D46953111EFA14DB755762E951A.roa
File: 4A1B8D46953111EFA14DB755762E951A.roa (raw, json)
Hash identifier: Y0Bl7hL36CKbYrXAXqCCM0SJItl0+ifHwZ1joeQ5x2Q=
Subject key identifier: 3C:61:D7:DA:09:EB:34:CE:2D:10:EB:F0:74:0E:FA:32:FF:3B:92:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1B8D46953111EFA14DB755762E951A.roa
Signing time: Mon 28 Oct 2024 13:34:00 +0000
ROA not before: Mon 28 Oct 2024 13:33:56 +0000
ROA not after: Sun 05 Oct 2025 13:33:56 +0000
asID: 132839
IP address blocks: 154.201.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66291 (0x102f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:33:56 2024 GMT
Not After : Oct 5 13:33:56 2025 GMT
Subject: CN=671f92c8-e14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:33:25:ac:34:d4:36:74:da:d1:c5:64:eb:
02:23:38:e7:24:9b:de:49:67:96:f9:06:0e:ed:31:
b9:d5:ab:53:57:bc:29:2f:f3:6d:21:a3:25:c8:8b:
fc:3e:4d:41:08:8f:c9:51:22:a2:87:34:ce:23:d3:
57:03:46:f1:3c:80:43:4d:43:66:7c:d3:22:82:d0:
29:3a:d2:f7:57:11:c2:7b:8a:82:26:57:9f:4e:75:
d9:dd:73:ea:cc:cb:2e:bd:c3:15:3d:ac:d6:5b:9e:
ca:39:66:ec:5b:e6:bd:57:a0:24:99:0d:59:6b:93:
ba:76:1a:46:31:88:0e:39:c6:21:b8:6a:b6:71:f5:
ae:fe:aa:5c:8a:4e:8a:9f:28:a1:85:96:5f:00:84:
2b:70:bd:36:f1:8c:16:68:d8:31:bc:fc:c6:82:c8:
05:8b:70:61:1c:dc:0c:73:42:83:02:ef:61:12:7b:
fe:5f:de:c7:31:fd:03:1f:c5:d5:71:e9:25:ed:07:
6e:b0:cc:90:6c:cb:bd:80:2c:4a:3a:6a:fb:7d:39:
0b:a6:23:7f:f6:21:c4:0c:b2:13:5a:81:ca:3d:08:
63:a1:a9:06:d1:3b:79:87:0b:22:e2:f8:f6:19:6b:
82:93:95:db:8b:ba:5b:93:a1:e0:54:3c:eb:14:6e:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:D7:DA:09:EB:34:CE:2D:10:EB:F0:74:0E:FA:32:FF:3B:92:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1B8D46953111EFA14DB755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:2b:b8:6c:26:87:76:d9:71:44:0f:49:41:89:b2:cd:01:1d:
1f:0d:46:88:3f:c2:d2:11:ec:bd:49:08:03:33:26:ba:0d:fc:
4f:f1:fe:f3:ee:d5:0d:34:df:b3:04:f9:54:91:a7:9f:3a:ed:
1a:f7:92:f9:f5:40:60:85:40:e5:d6:b1:33:21:59:33:ae:8f:
d4:8e:7a:57:af:62:82:08:63:5f:d1:dc:36:c3:84:35:89:42:
29:ee:92:79:1d:c8:23:76:a7:a4:75:6b:05:15:6c:81:d2:2d:
6c:f1:38:ca:d6:b5:ae:25:c9:10:ae:b9:ff:82:08:4e:04:16:
92:cd:ae:36:ad:0e:4b:b8:bc:2b:35:d0:70:3f:2f:ac:83:25:
6e:e0:fe:ef:ca:2b:4c:7a:54:ff:de:5a:1c:94:f0:c1:d6:a3:
10:58:19:b0:7c:97:64:d1:64:57:fb:86:6a:9c:fe:82:16:58:
a7:4f:01:e7:25:15:72:3a:1b:19:c2:7f:63:84:86:89:84:3c:
16:72:67:50:62:ae:ba:ea:1c:59:40:f0:49:6c:45:2e:8a:e7:
65:13:af:fc:42:59:04:a7:7a:fd:44:5d:44:0f:78:5a:05:8b:
20:f8:4c:e1:cd:3a:ef:2b:99:3b:a5:24:17:48:d0:d8:db:b3:
57:89:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:05 2024 by rpki-client on console-fra.rpki-client.org