Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515E6A92A4CC11EF82FC7B5A762E951A.roa
File: 515E6A92A4CC11EF82FC7B5A762E951A.roa (raw, json)
Hash identifier: KSduO4A9trM8zZdnpNjkECJj4fAoUPYoHmg+O2pADpI=
Subject key identifier: F4:F6:3F:E8:8A:E5:79:B4:77:A8:49:29:40:35:96:03:2C:08:E8:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515E6A92A4CC11EF82FC7B5A762E951A.roa
Signing time: Sun 17 Nov 2024 10:11:32 +0000
ROA not before: Sun 17 Nov 2024 10:11:28 +0000
ROA not after: Mon 25 Nov 2024 10:11:28 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69268 (0x10e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:11:28 2024 GMT
Not After : Nov 25 10:11:28 2024 GMT
Subject: CN=6739c154-62b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:5b:37:30:e6:cc:57:92:54:ba:4c:99:cd:
65:c4:a5:e6:90:db:15:f4:54:f5:d0:57:f7:27:68:
59:73:6d:d2:8d:06:65:45:1a:b5:37:99:96:ed:5b:
bf:e3:68:50:f1:13:9a:c7:e9:61:51:92:ac:7f:f5:
1f:07:22:5d:f5:9e:06:e6:10:fc:50:88:76:72:48:
10:f1:d5:fb:25:d0:05:1c:51:92:7d:4f:cd:55:23:
69:58:69:23:98:47:b5:7a:8d:e0:bd:b5:dd:e0:15:
96:38:5c:2e:b8:f8:5d:e9:71:85:4f:c6:4d:6c:7d:
4f:97:bb:2d:c7:1b:f0:12:e1:10:ca:eb:8e:a3:1b:
21:74:a6:46:74:df:5b:42:e6:10:b0:a4:99:9d:38:
f5:30:73:29:31:33:a1:54:df:c2:b8:b5:c8:ce:d2:
d0:85:98:09:9e:f0:b2:f8:4a:7f:7d:1f:27:07:b6:
e8:ab:55:ee:55:49:69:61:bc:d4:6f:74:12:a5:99:
00:10:5b:f6:71:10:30:4a:16:4d:61:91:36:e2:f4:
9a:04:90:b4:91:3a:7e:76:ae:c1:0e:0e:88:1d:7b:
67:3e:e6:70:11:d4:5e:85:8e:8c:d6:b5:5c:54:6f:
cf:8c:ac:aa:6d:f8:d6:97:cd:3c:46:f8:4b:ee:a6:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:3F:E8:8A:E5:79:B4:77:A8:49:29:40:35:96:03:2C:08:E8:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515E6A92A4CC11EF82FC7B5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:51:d5:6d:42:e4:54:db:71:11:36:18:71:3d:cb:45:d8:52:
50:76:e0:64:c1:52:a3:a2:59:66:ce:62:35:26:17:d2:b0:8f:
49:cd:e0:af:29:cc:6e:84:5a:42:cb:fc:bc:cf:e5:b2:1a:73:
da:8d:e1:e2:a6:7b:ec:a0:f2:d6:fe:ac:14:6e:59:0f:0b:8e:
c7:60:74:bd:9e:52:ae:34:46:a0:c0:01:77:c5:e9:6a:d0:30:
6d:17:88:cd:23:fd:86:cb:14:ca:bf:3d:8c:26:40:f3:d0:d8:
ad:68:39:6d:69:e9:44:31:30:14:78:4c:5f:00:1e:52:9b:c9:
16:94:c5:84:90:46:bc:e4:cc:a8:24:6a:47:93:7f:72:24:8a:
53:c2:28:fb:76:2d:56:6d:01:bc:f3:d5:1b:0b:95:56:dc:fa:
55:d9:ce:ca:05:07:50:fa:20:36:a7:5b:c2:d8:a8:b7:ec:40:
76:c7:d9:4f:68:28:7d:65:c4:95:de:ce:7c:7a:c5:ab:e0:c5:
4f:62:be:d2:db:b4:81:fb:ed:04:b1:4a:e1:f7:b4:72:10:9e:
4b:3d:56:cb:c0:61:c3:01:a9:05:7c:60:f9:3a:9a:63:61:c5:
5a:e3:6c:e1:8d:45:89:96:63:56:62:3a:93:1c:67:93:fe:4e:
45:0b:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org