Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111F2FE8B9111EFBDDA7AB2762E951A.roa
File: 7111F2FE8B9111EFBDDA7AB2762E951A.roa (raw, json)
Hash identifier: /7SJV2Zlkrpl308I0z7yWOh7bbEiYXNGkAS36bocV/Y=
Subject key identifier: 9B:EA:FA:68:F9:64:4C:26:46:47:48:4E:2A:53:35:C0:EA:2B:EC:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111F2FE8B9111EFBDDA7AB2762E951A.roa
Signing time: Wed 16 Oct 2024 07:37:06 +0000
ROA not before: Wed 16 Oct 2024 07:37:02 +0000
ROA not after: Thu 18 Sep 2025 07:37:02 +0000
asID: 132513
IP address blocks: 154.215.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65155 (0xfe83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 07:37:02 2024 GMT
Not After : Sep 18 07:37:02 2025 GMT
Subject: CN=670f6d21-5e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:7b:c5:6d:d4:bb:df:0c:0f:85:98:29:0d:
1d:22:54:d4:1d:46:c2:36:48:05:23:7e:34:1b:0e:
10:72:9d:2d:bb:c9:4d:0a:b1:ac:eb:f8:3b:c4:cd:
12:ac:ee:32:26:cd:3c:23:9b:c2:e3:a8:de:80:fb:
a9:61:4c:1f:a2:56:43:bd:c4:11:fa:d8:d7:b8:79:
c1:bc:bd:b5:83:ef:3e:e3:34:f6:32:3b:f4:35:9c:
fa:b5:2e:b3:08:bc:64:f7:20:1c:a4:22:82:d4:b4:
8f:e7:db:93:3f:7e:1b:cf:73:76:ac:67:84:ea:7c:
8b:53:ac:bf:7a:35:7a:4a:1d:e3:cf:12:f4:15:1d:
91:3a:a4:b0:e5:e3:6a:dd:cd:65:4b:24:5a:6f:3a:
c1:b2:dc:68:3d:cd:5c:a7:ba:e2:f3:6c:a0:28:b6:
54:fc:2e:62:b1:5c:6a:40:55:c2:de:5b:65:dc:24:
24:7a:34:00:0a:d0:76:0a:02:57:56:c9:9b:21:77:
bf:65:f3:91:0c:f4:cf:14:99:15:f7:9e:5b:5d:fc:
7e:88:bd:3d:8b:f7:0d:39:63:3d:55:f0:24:73:ad:
8e:82:d5:fc:64:d7:28:26:9a:cf:d4:43:1c:82:63:
94:68:4a:2e:4d:fa:3d:16:ec:b4:d9:b2:21:68:f9:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:FA:68:F9:64:4C:26:46:47:48:4E:2A:53:35:C0:EA:2B:EC:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111F2FE8B9111EFBDDA7AB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e0:3a:82:5d:e8:08:6e:f9:62:7e:ac:3f:85:ba:36:e3:04:
95:23:73:fe:34:c2:b3:70:a7:be:94:9f:78:a3:ed:fd:dd:e8:
12:0a:a1:33:3d:91:ec:6e:3b:a2:d4:b2:a4:57:05:d8:3b:56:
9f:0f:6f:aa:d6:7d:1a:b2:67:b0:d6:58:03:bf:c9:f1:b7:af:
73:c0:e1:0a:67:a2:cc:5a:4f:1a:d4:56:37:fc:14:a2:45:f5:
d5:e2:25:1c:dd:c8:43:1e:00:98:df:cc:fe:38:fd:72:22:39:
48:5c:44:1d:fd:11:8e:56:74:5c:c3:6d:e9:fb:b3:e0:4a:0b:
59:41:07:3f:a8:bd:e0:fb:d7:88:25:9a:3e:92:3b:10:81:9f:
0d:35:4a:32:72:a8:5a:c0:ac:7b:23:7b:b9:28:ab:0c:6d:2d:
10:3c:2b:5c:e6:c9:7f:a2:a4:db:96:33:fd:35:9e:ee:3d:1f:
59:86:53:52:f7:df:26:21:3d:b8:ae:eb:ea:0c:64:00:c8:52:
0c:19:ea:55:ab:f1:aa:5d:4c:d3:b5:b9:8f:ce:bd:70:cf:14:
9a:39:92:f7:26:d5:ff:6f:47:1f:af:81:0e:21:64:41:5d:98:
0a:50:f6:c6:37:3c:38:55:07:db:9d:0f:74:a8:ac:eb:23:39:
ff:8a:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:17 2024 by rpki-client on console-ams.rpki-client.org