Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E79138985E11EFBA7BAF5D762E951A.roa
File: 75E79138985E11EFBA7BAF5D762E951A.roa (raw, json)
Hash identifier: EEu8yaDLuIqdwubDfDZc85cl1BqbKla9uopyALdEyCc=
Subject key identifier: CD:F0:CD:63:26:A8:BE:F9:BE:63:C3:16:4C:E2:09:18:1D:3E:CE:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E79138985E11EFBA7BAF5D762E951A.roa
Signing time: Fri 01 Nov 2024 14:34:54 +0000
ROA not before: Fri 01 Nov 2024 14:34:51 +0000
ROA not after: Tue 03 Dec 2024 14:34:51 +0000
asID: 203020
IP address blocks: 154.204.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66769 (0x104d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:34:51 2024 GMT
Not After : Dec 3 14:34:51 2024 GMT
Subject: CN=6724e70e-694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:a9:4d:ed:be:96:aa:55:c8:69:f8:58:42:
48:ed:b1:50:a1:04:fd:67:d3:4e:68:3f:2d:f9:64:
9c:4b:71:e9:8d:37:6f:33:cd:54:88:92:12:45:44:
3f:87:f4:f5:c1:9c:f8:09:54:7a:1b:bf:79:a7:7e:
27:ec:8c:19:7d:44:e0:93:57:8e:c6:b5:5e:69:15:
f6:e3:5d:17:e3:03:8c:07:e2:b5:b6:ef:02:73:4e:
87:ee:8b:83:2a:6a:0f:31:30:5a:5c:db:21:28:ed:
a1:3e:c5:1b:f4:14:ba:d1:cd:76:dc:9f:46:93:23:
23:a4:3e:14:57:5a:84:f1:80:dd:9b:63:2a:c0:fa:
8a:d8:30:72:2a:64:55:bf:7a:4f:a3:b2:7b:50:f8:
c0:c3:48:36:a0:ea:a2:fd:59:88:8c:75:29:6d:1e:
9e:70:a2:ad:a3:8e:94:07:15:44:f8:4c:23:c7:8b:
cb:73:09:e3:94:98:7e:07:43:bf:56:9c:0e:2e:e9:
e7:69:d0:d8:4c:0f:7c:1f:ed:cd:9f:38:f9:c1:3a:
78:92:b0:16:73:0d:78:0b:55:e0:92:05:91:e5:b8:
3f:90:72:b5:4a:c7:66:bb:c0:cd:77:9b:36:f8:8e:
e7:36:09:98:fe:ea:09:02:a1:43:d6:20:c2:33:6f:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:CD:63:26:A8:BE:F9:BE:63:C3:16:4C:E2:09:18:1D:3E:CE:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E79138985E11EFBA7BAF5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.48.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:d4:e8:f0:a1:b1:82:1a:63:f0:b6:94:b2:9c:05:b8:e7:
aa:f7:dd:6c:09:a8:46:cd:6b:76:2c:df:83:8e:ed:df:eb:ad:
c2:02:fe:59:7a:62:83:99:df:e0:c5:ae:64:33:64:fc:7a:dc:
21:bb:25:c2:5f:02:9d:5b:d5:fe:c5:26:d5:22:d0:9a:12:bc:
40:7c:a3:9d:7e:a9:1f:c0:72:60:f5:1a:86:25:bf:f5:01:96:
fb:8f:00:16:a6:2e:e5:c4:33:0f:76:62:ff:74:e8:4b:2a:e7:
d1:78:76:83:c2:57:17:7c:8b:57:c1:6b:10:ed:d5:bc:1c:11:
6a:2d:8e:37:04:27:38:53:83:50:63:28:9b:78:2e:fe:a8:fc:
56:d1:a1:f3:1d:54:80:b8:c1:e1:af:11:f0:0a:de:18:ac:89:
01:e4:d4:c0:68:3a:c6:3d:75:dd:ed:74:39:1f:9c:c2:db:a5:
5f:07:12:8b:16:59:87:38:f2:5b:13:62:c5:70:cc:ba:42:c2:
2a:89:3d:18:69:f3:15:88:0f:c6:92:ac:05:34:5b:58:05:00:
8a:dc:2b:75:d3:96:79:52:59:4c:51:16:53:a8:af:c0:5c:ac:
e1:d8:3b:d9:6a:0e:56:c7:f6:fa:78:9a:f6:3d:25:4c:ae:a4:
01:ff:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:11 2024 by rpki-client on console-fra.rpki-client.org