Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7184884202D811EFA841A918017001B1.roa
File: 7184884202D811EFA841A918017001B1.roa (raw, json)
Hash identifier: 8zeHaTlvZMAKJ6oAQdygGDxVWc12693BbAbuBvvcGdU=
Subject key identifier: A9:38:37:4C:7C:7A:F5:FA:88:88:ED:42:D2:78:E8:07:E6:FD:8E:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7184884202D811EFA841A918017001B1.roa
Signing time: Thu 25 Apr 2024 07:50:11 +0000
ROA not before: Thu 25 Apr 2024 07:50:08 +0000
ROA not after: Sun 02 Feb 2025 07:50:08 +0000
asID: 132839
IP address blocks: 154.209.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45109 (0xb035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 07:50:08 2024 GMT
Not After : Feb 2 07:50:08 2025 GMT
Subject: CN=662a0b33-2eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:0f:d2:42:29:83:6c:4c:0f:ec:8a:23:a6:
e7:ab:f7:93:84:d4:6d:f3:7e:8c:9d:f7:04:32:8c:
b4:2d:97:57:5b:0e:10:40:56:30:38:53:08:e5:6b:
e0:79:4d:01:0c:c9:69:7c:53:db:55:b1:dc:fd:7b:
ce:2b:14:bf:c5:4a:36:18:44:1c:94:40:2d:7f:1d:
51:51:ca:e4:1f:f6:74:9f:65:09:a4:87:23:4d:43:
b4:37:6e:d5:4b:6f:3d:16:d7:e6:85:83:79:5b:30:
6d:fa:f5:52:e7:55:00:0a:87:47:fc:59:3d:34:b3:
ed:23:f6:f7:0a:ed:b2:a9:bd:47:2b:a9:aa:0d:45:
26:27:56:08:e4:26:36:5c:5c:a1:c5:0d:9b:e0:07:
8f:23:2b:ba:f5:99:ac:e8:5a:5c:06:c1:05:17:91:
ed:d1:69:48:0a:8a:9e:2c:cb:f5:0d:5b:8a:03:5e:
6a:29:c7:84:b5:28:80:ae:3b:e0:cb:4a:34:31:32:
63:09:b3:9f:dc:15:5b:fe:ce:3d:7b:2d:25:03:1a:
d2:03:6b:88:c4:07:56:c1:b5:17:a0:d6:13:6b:96:
c6:99:81:f1:82:3f:08:73:7d:d7:a8:30:ae:29:4c:
f7:d8:d2:b8:17:4f:23:f6:70:bd:11:c4:47:e8:10:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:37:4C:7C:7A:F5:FA:88:88:ED:42:D2:78:E8:07:E6:FD:8E:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7184884202D811EFA841A918017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:af:ce:6e:e4:26:76:92:da:7a:b0:2b:6f:46:79:1b:34:de:
cd:1b:ad:b4:70:fe:74:77:4e:c9:18:20:48:f6:95:3f:e5:04:
78:70:f1:6a:e5:f8:f3:a5:02:b1:ee:25:07:83:82:04:4e:76:
2d:b4:b7:f2:5a:7d:e5:11:a1:f1:63:48:da:4d:12:0a:24:84:
b5:ed:7f:8b:e4:db:44:1d:91:25:94:ca:76:1a:80:70:6f:91:
5f:99:70:a5:6b:b7:bd:a3:7b:f8:4c:20:5a:00:5a:02:43:06:
00:54:7d:b5:cb:88:0d:97:d6:0e:15:7a:a5:c0:7d:ed:26:76:
c3:09:b7:e1:6d:f1:8c:7d:95:f3:5a:e0:03:48:6d:c1:ec:d1:
08:1f:2c:fd:34:f2:67:02:0f:04:bf:b5:0c:82:94:2d:50:e8:
2f:5b:a3:61:b2:71:16:f7:63:0c:68:e1:e4:79:78:5e:cc:54:
98:77:7b:3b:55:65:f5:b7:7a:dd:7e:d8:a8:e7:7c:70:3e:11:
38:4c:55:68:ba:9e:84:60:f1:4d:8c:3d:ca:1a:8c:bc:33:c9:
5b:89:f4:bf:81:b9:6d:e0:6c:77:63:a5:3f:d8:9c:a4:27:5a:
db:cb:ee:92:01:a7:fb:a0:0d:22:75:e4:65:ef:7d:e6:1b:7a:
f2:d8:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org