Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51832F84AA4A11EFBAECE766762E951A.roa
File: 51832F84AA4A11EFBAECE766762E951A.roa (raw, json)
Hash identifier: 9l87OZYhbvk+5jcAIqeazyUQGM8Hvh10naOWssumdu8=
Subject key identifier: FD:A5:47:27:2B:3A:90:57:02:8B:4A:26:B6:E4:47:E8:D3:B0:A6:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011257
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51832F84AA4A11EFBAECE766762E951A.roa
Signing time: Sun 24 Nov 2024 09:56:04 +0000
ROA not before: Sun 24 Nov 2024 09:56:01 +0000
ROA not after: Mon 09 Dec 2024 09:56:01 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70231 (0x11257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 09:56:01 2024 GMT
Not After : Dec 9 09:56:01 2024 GMT
Subject: CN=6742f834-1970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:af:fa:53:17:f8:b4:b7:3c:6c:f7:2e:1c:
62:dc:69:d8:2e:56:b6:25:34:42:b3:c1:23:71:67:
89:6d:44:84:8c:b0:55:74:1e:0d:4f:44:04:a1:8e:
57:32:6b:3e:d5:89:e2:ea:d7:95:3d:04:62:8b:5e:
12:b1:6b:d1:d4:9f:ee:9e:49:92:39:43:b5:dd:aa:
b3:bd:5d:23:13:37:3f:f8:51:cb:a0:6a:92:b2:d5:
5e:4a:a7:f5:95:21:b5:b5:cf:f7:23:48:12:ab:bd:
96:fd:80:54:e2:4a:7a:28:1e:da:d5:1d:29:a0:d5:
e5:6a:01:21:ab:8c:5d:b4:bb:1a:31:7a:e4:75:2a:
fc:01:c2:b9:97:25:dd:4d:df:d4:f7:38:55:33:83:
71:7c:80:77:82:9f:b0:da:0e:47:30:1c:dc:8e:68:
81:e0:55:54:3d:a5:2d:d8:56:d0:73:73:73:4c:dc:
96:71:ba:79:ec:c3:db:b2:36:f4:fe:49:9b:65:23:
cd:cd:ee:4c:e1:0a:f8:bf:35:ab:bb:96:2f:a1:8f:
48:73:02:bd:71:f5:bd:fe:89:af:94:e1:68:68:2b:
4d:7c:74:27:7b:92:2d:c7:2f:8c:34:bc:b2:3a:5c:
82:78:23:57:0f:0a:fa:f6:8b:a3:f9:5c:8c:99:a5:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:47:27:2B:3A:90:57:02:8B:4A:26:B6:E4:47:E8:D3:B0:A6:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51832F84AA4A11EFBAECE766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:ca:ee:b4:d1:76:3c:6e:8b:b0:1b:69:9c:38:9e:9c:42:
d6:14:13:45:3d:d6:99:82:d1:27:41:a8:e5:d7:a9:b9:23:34:
48:95:f2:f4:d2:c6:3a:2c:90:71:f8:8e:3e:f6:2f:21:d6:9f:
c6:62:c9:02:eb:2c:9b:5a:ae:c4:ac:e7:2a:1d:63:db:a7:e6:
83:96:12:4b:a1:5f:68:3e:fd:69:47:a3:95:b4:41:68:b7:19:
6f:8e:7e:9e:a1:60:1e:73:36:38:60:11:3b:85:90:73:c7:fe:
b5:c2:99:f1:5a:63:ac:ac:af:f2:50:b5:0a:e0:ae:e9:d4:07:
dd:74:ec:ca:3d:c1:36:92:1c:8c:cc:df:a6:1d:e4:2d:1a:f6:
bb:f6:72:ee:7f:a5:30:a8:fc:36:1a:ca:c6:77:97:56:7a:99:
44:ab:00:3b:10:23:00:51:af:7c:59:f8:06:3c:60:c0:c1:77:
92:b3:86:a3:56:b0:19:d5:7c:c9:cb:b5:22:4e:6c:8e:ae:55:
c1:aa:76:e5:be:0e:d0:e3:c1:44:74:aa:81:4a:6f:00:1e:da:
9e:92:e4:44:90:c4:c6:89:64:8a:77:84:85:7b:af:05:ab:3c:
3f:6f:be:48:11:0c:5b:2c:7f:f9:df:cf:a6:dc:0c:34:a5:a9:
44:f3:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:36 2024 by rpki-client on console-ams.rpki-client.org