Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56498350A32511EF9A86EC7C762E951A.roa
File: 56498350A32511EF9A86EC7C762E951A.roa (raw, json)
Hash identifier: maSWtxTzKYyBnkSy+a8XlMGPQZvmaP8UDJY0fuGgbHc=
Subject key identifier: D1:88:3E:3B:F2:7A:0A:DA:A3:CA:F8:22:AA:B8:87:85:11:7B:72:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56498350A32511EF9A86EC7C762E951A.roa
Signing time: Fri 15 Nov 2024 07:43:43 +0000
ROA not before: Fri 15 Nov 2024 07:43:39 +0000
ROA not after: Thu 12 Dec 2024 07:43:39 +0000
asID: 394432
IP address blocks: 154.196.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68938 (0x10d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:43:39 2024 GMT
Not After : Dec 12 07:43:39 2024 GMT
Subject: CN=6736fbaf-9b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:a0:d2:dc:c4:01:b7:2e:36:22:80:b9:3f:
60:89:71:01:3b:8a:e4:6e:c9:0e:c0:63:50:38:4c:
f8:fd:ea:a7:b8:85:4c:56:e5:63:4b:a5:ad:96:e0:
6e:b4:11:7d:2f:0b:76:68:de:b8:cf:b4:7f:c1:38:
df:61:c5:78:01:79:fc:5d:5e:57:fd:64:0b:25:d5:
62:c6:e9:60:7d:d9:80:9e:9d:a0:03:3e:f4:7e:6f:
30:a1:81:a6:bc:24:f3:93:4f:e3:d3:80:12:8e:e6:
8c:ff:0d:69:aa:22:0c:77:29:56:bf:52:1c:9d:08:
fe:be:27:21:53:fa:87:0e:15:c4:40:4d:33:47:46:
eb:cd:16:76:27:91:23:3f:73:f9:93:cb:e7:6b:dc:
f4:ec:f2:db:9c:52:da:b9:9b:3d:a5:c2:2d:cb:df:
fa:4b:9e:51:f0:d8:45:d2:7c:24:13:54:56:e7:04:
ef:5a:a7:78:21:d7:44:69:51:97:17:5e:fd:f9:c2:
62:81:9e:6b:2c:35:0c:dc:d6:8a:15:dd:e7:83:33:
8a:57:a6:fe:22:96:de:41:30:90:2b:87:51:d9:5d:
aa:76:ae:60:dd:8c:be:4d:1e:47:64:48:47:43:f6:
78:72:d0:7a:76:cc:82:cc:a0:b2:48:dc:2e:75:b5:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:3E:3B:F2:7A:0A:DA:A3:CA:F8:22:AA:B8:87:85:11:7B:72:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56498350A32511EF9A86EC7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.206.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e1:9e:75:75:8d:3e:33:d3:3c:26:85:fe:06:86:1a:1b:81:
f4:df:f4:27:41:12:7f:62:f2:a6:51:49:59:d9:0e:44:4a:58:
6d:92:72:70:74:0d:3b:e1:58:5a:ec:2f:71:33:9f:0e:c5:b2:
90:12:27:92:74:86:70:c6:2d:23:7b:fc:fe:6d:cd:eb:98:e5:
50:fa:86:97:ed:7f:a7:1b:17:9e:5c:77:78:d1:68:ea:a7:ba:
00:17:dc:f9:22:a0:e9:f5:b5:60:1f:be:96:0d:18:04:64:91:
50:28:13:05:38:4d:d3:f3:6d:a6:24:ee:c5:4e:eb:5a:90:be:
56:ac:14:26:4d:94:58:06:f6:3b:65:50:56:8c:5e:82:c7:68:
24:97:e8:97:ef:eb:1c:89:7d:ae:96:b3:71:be:96:ff:ab:e6:
22:e5:94:89:58:67:05:08:85:cc:8c:9c:05:44:ac:32:4d:6c:
3e:3e:d7:86:6a:ff:fd:7a:ac:98:02:47:30:9b:d0:18:fa:6b:
c7:a1:00:86:10:0e:36:d9:fc:14:4c:dc:e1:52:bc:da:08:eb:
e9:d0:d0:a3:cc:ff:db:60:64:58:db:72:7f:23:2b:8c:0e:0c:
9f:da:0f:47:cc:d2:6d:79:0b:5f:d3:7f:a0:c9:39:53:91:20:
61:f2:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:59:58 2024 by rpki-client on console-fra.rpki-client.org