Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618D0302950D11EFAEDFC975762E951A.roa
File: 618D0302950D11EFAEDFC975762E951A.roa (raw, json)
Hash identifier: 5CTzszVu82K4yTbSo9+dUPb3lLXLBkBmeRj0md10f/o=
Subject key identifier: A1:F4:89:9C:A0:9B:7C:C4:88:68:CC:6B:46:45:FD:00:3E:C8:8D:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618D0302950D11EFAEDFC975762E951A.roa
Signing time: Mon 28 Oct 2024 09:16:58 +0000
ROA not before: Mon 28 Oct 2024 09:16:54 +0000
ROA not after: Mon 25 Nov 2024 09:16:54 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66211 (0x102a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:16:54 2024 GMT
Not After : Nov 25 09:16:54 2024 GMT
Subject: CN=671f5689-3d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:2c:2f:d9:1d:1c:c2:dc:29:3c:a5:ec:dc:
ee:d0:e5:89:cc:93:ce:33:da:97:13:df:26:3a:90:
26:c3:06:be:cc:06:c5:14:ec:43:db:95:05:e1:2e:
b2:30:3e:7d:7e:5a:5c:25:54:55:b4:fd:d4:e6:f9:
50:07:74:2a:d7:29:db:38:04:49:fe:81:3b:44:9d:
db:42:b4:5a:fc:d3:74:75:dc:fb:4c:cc:79:1c:f0:
a4:03:ab:2f:d2:0c:4f:c5:9c:93:f4:88:e4:f6:4b:
8a:ab:84:f0:35:eb:bc:53:ab:8a:46:19:61:29:d2:
c4:63:71:47:f6:2f:0f:0c:2a:25:d2:5f:7d:b9:91:
a4:af:de:e0:d1:c5:58:0c:af:48:0f:7e:95:88:4c:
a0:11:53:e9:15:1f:80:3b:61:8c:59:31:f3:1a:48:
d9:f2:d0:92:ac:9e:0d:24:a7:e1:2c:06:b4:f2:65:
60:a2:e2:2a:f1:41:91:b3:b5:90:ba:8f:78:69:fe:
fd:9c:34:be:e3:bd:73:43:07:81:bf:90:07:da:0a:
18:43:1a:36:ec:2e:b2:a4:ce:d0:e5:e9:07:db:76:
39:25:f6:95:49:56:3f:6b:1f:c5:39:0c:0b:7c:13:
0d:df:10:ed:06:b1:36:00:fb:dd:c1:fe:3e:c9:cf:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:89:9C:A0:9B:7C:C4:88:68:CC:6B:46:45:FD:00:3E:C8:8D:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618D0302950D11EFAEDFC975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d5:a5:cf:a7:ec:74:84:07:70:87:80:68:0c:61:ef:d4:b3:
d3:3a:a2:70:a1:de:0d:19:97:3b:ad:c5:ce:64:f6:25:13:2f:
f9:89:f8:a7:75:c0:da:48:7c:12:93:08:83:87:06:7a:57:97:
1d:85:65:f3:f5:7d:f9:ad:79:a7:55:fd:06:03:8d:18:f6:5d:
0b:69:63:20:10:de:6c:a0:22:e3:7e:6c:8f:90:d2:9c:e8:2e:
14:f9:53:78:55:5a:79:44:eb:69:73:7a:c4:3e:01:b7:73:15:
08:46:84:33:46:0d:ef:45:93:6d:77:19:fc:88:9e:aa:77:99:
dd:01:71:46:d1:39:97:a9:a2:4c:30:40:a0:ac:6d:8e:d7:08:
06:c7:28:3c:cb:82:37:96:b0:03:0b:6b:ec:d8:e0:a8:18:41:
3a:52:36:a0:0a:9e:6e:f3:c3:a2:1f:9e:e1:6e:49:cb:00:18:
c0:e2:1c:58:ae:cc:9f:94:e7:cb:03:47:81:42:dc:a7:8b:f7:
2a:7b:ad:41:f9:3f:3d:1e:24:bb:c9:0d:87:53:87:f1:ef:cc:
7c:a8:4e:95:a9:29:f1:7e:6d:22:dd:a4:ac:ed:11:ca:bb:81:
a9:8a:1f:8d:0d:7c:4f:08:5a:ed:a0:8b:4a:7c:70:47:de:8d:
21:ca:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:27 2024 by rpki-client on console-fra.rpki-client.org