Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520EB0FE768811EFB370E39E762E951A.roa
File: 520EB0FE768811EFB370E39E762E951A.roa (raw, json)
Hash identifier: D1e/2xkE5jO2bNX2otp+ZgBNHs8VTjSg6gzF5f5dTqg=
Subject key identifier: B0:28:82:FC:12:BE:B8:37:B5:38:30:26:2A:D7:56:DC:4D:E4:6F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F08D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520EB0FE768811EFB370E39E762E951A.roa
Signing time: Thu 19 Sep 2024 13:08:54 +0000
ROA not before: Thu 19 Sep 2024 13:08:50 +0000
ROA not after: Fri 08 Aug 2025 13:08:50 +0000
asID: 133199
IP address blocks: 154.204.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61581 (0xf08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:08:50 2024 GMT
Not After : Aug 8 13:08:50 2025 GMT
Subject: CN=66ec2266-d983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:9e:49:bb:b2:86:d3:7d:ca:5f:ec:35:f1:
7e:ff:71:bc:37:5d:1a:86:9d:e2:2a:fd:b3:e7:20:
cd:a3:8f:9a:ae:a6:33:c1:f9:17:c7:1c:e8:b4:cb:
19:9f:43:c5:cf:8c:af:94:16:7c:a0:3f:87:e6:bb:
ed:c7:f9:3d:9a:58:3b:72:42:da:e3:0f:ad:3c:e7:
2c:78:3d:de:9c:86:6f:d8:20:bd:f5:5c:8f:40:69:
11:e1:84:5d:be:c4:35:43:80:5b:bf:fb:d3:8c:4e:
d9:22:df:39:9a:46:62:68:6e:ca:e9:c5:26:fe:db:
8a:c5:68:0e:3a:d7:20:2a:a6:81:dc:2e:dd:2a:40:
dd:53:fe:83:ae:4f:05:bc:bc:5a:8c:32:48:58:95:
9d:52:6f:02:0b:8a:db:7c:93:81:cd:13:29:e1:8b:
8a:5e:b5:7d:6d:c5:41:27:77:5d:41:27:77:a6:ea:
4c:72:62:20:b4:60:07:89:e0:fd:2b:f0:e4:ca:c5:
c3:95:36:cf:fe:17:63:e5:37:b9:83:4f:e7:a1:ff:
7d:25:aa:4a:06:d5:54:c5:25:95:e8:6d:43:4c:cf:
39:8e:f1:98:b0:d2:98:c6:19:b5:8c:3b:dc:06:15:
8c:9e:ea:13:f6:bc:ba:01:7c:77:48:49:ee:b6:61:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:82:FC:12:BE:B8:37:B5:38:30:26:2A:D7:56:DC:4D:E4:6F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/520EB0FE768811EFB370E39E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.46.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6b:cd:8b:77:d9:2a:2e:0c:f3:97:4b:af:6d:1f:56:17:72:
7e:65:47:a9:d6:9c:24:69:5a:4c:e4:5c:6e:0c:d8:6b:93:08:
51:a2:2e:61:2b:0e:f6:71:c5:1d:1f:91:dc:99:23:1c:94:0f:
57:20:e5:1a:ae:6f:e7:41:ff:81:c0:cc:31:82:ff:5c:d4:4e:
33:4f:5a:d1:46:26:d1:6f:c4:5b:4c:cf:c5:f9:a6:9d:24:81:
99:a6:3a:19:d1:85:d2:a5:95:66:d2:12:d5:cd:46:4d:ab:a1:
7d:73:e9:9c:03:43:65:f4:82:8a:fb:54:3a:4e:f8:4d:12:a1:
0f:df:37:03:e8:bd:2c:6a:50:9f:84:8e:90:c0:74:af:4c:4b:
b3:11:2b:ac:a5:de:66:21:67:ac:62:14:fb:da:60:18:34:67:
b8:28:7a:55:01:48:de:af:91:3c:c5:87:6f:1c:d7:2d:48:84:
05:76:b1:b6:4c:e3:2d:6c:43:1c:1b:bc:74:28:6a:f4:12:9d:
86:fc:57:1f:93:57:0f:25:3b:16:13:fa:2d:73:bd:3c:97:51:
e9:c8:fb:5f:47:cc:2f:a1:1e:56:0f:d2:0d:35:93:6a:3a:05:
27:4f:71:2b:3c:43:d3:92:05:bd:17:e5:7b:1c:85:f0:59:fd:
0d:51:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:04:11 2024 by rpki-client on console-ams.rpki-client.org