Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEACC9CA32311EFB4395472762E951A.roa
File: 7BEACC9CA32311EFB4395472762E951A.roa (raw, json)
Hash identifier: rmL6pzVZG9s4a2qg9kfO4E6VIiXqDvjwGeEobOeMRKw=
Subject key identifier: 21:BA:D9:DE:37:50:18:F7:3A:30:67:5F:A3:1B:FC:47:4E:A8:C5:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEACC9CA32311EFB4395472762E951A.roa
Signing time: Fri 15 Nov 2024 07:30:27 +0000
ROA not before: Fri 15 Nov 2024 07:30:23 +0000
ROA not after: Thu 12 Dec 2024 07:30:23 +0000
asID: 394432
IP address blocks: 154.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68914 (0x10d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:30:23 2024 GMT
Not After : Dec 12 07:30:23 2024 GMT
Subject: CN=6736f893-b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:3e:bf:6a:87:c0:64:44:1c:b1:a4:68:06:
06:f5:a2:ac:3b:fe:34:a8:2c:93:e6:6c:48:70:70:
6a:0f:2e:8f:ae:2c:03:d6:86:08:f9:f1:84:46:3a:
6f:d3:f9:ff:5d:7c:b2:03:35:f1:8e:fa:a5:cc:bd:
d9:0c:19:21:22:28:74:3d:87:f8:9a:e0:93:e1:6a:
bf:5b:30:b6:4b:df:c3:e4:36:de:4d:b8:0b:23:38:
d6:32:3b:8c:87:0a:aa:df:2c:b3:2b:1b:ff:c1:b1:
cc:c4:7d:4e:32:d6:3a:f5:52:d2:84:44:b6:76:34:
c1:06:3f:7c:f5:67:68:52:62:b0:a8:33:c7:7c:1c:
83:3c:e1:34:ed:5c:09:31:dc:d2:d4:b6:bc:9c:bb:
32:b8:33:4e:fb:32:3f:4e:ee:af:e0:51:9f:27:02:
8b:fd:26:ea:6a:f0:3f:dc:c9:4f:b9:8f:a6:ec:76:
75:d8:5d:eb:8b:7a:c2:d8:d1:e1:7f:14:0a:9d:38:
b0:56:a0:fd:aa:2d:f1:d9:c6:ca:eb:bc:7b:48:39:
21:34:83:3e:62:cc:b0:9b:ce:01:71:22:ed:8c:29:
8c:04:67:e0:8f:aa:81:6d:95:18:31:9f:22:20:c6:
b3:3a:27:a6:85:fc:25:b3:b9:ef:4a:79:78:14:8e:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:D9:DE:37:50:18:F7:3A:30:67:5F:A3:1B:FC:47:4E:A8:C5:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEACC9CA32311EFB4395472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8f:e6:35:60:32:5b:7d:3a:2f:e9:ba:6d:63:67:e9:da:43:
82:8e:a3:4a:ee:e5:d7:51:5c:ef:01:d5:90:f4:36:27:93:a8:
ae:9b:65:18:e2:33:df:36:73:2f:80:39:87:ce:c9:ad:32:8c:
8b:7b:56:c4:4e:f4:54:d5:4c:f2:e2:71:86:f2:69:8c:bc:a7:
d6:a3:28:cf:72:96:6b:2b:96:b6:1b:75:f8:9f:db:fd:f9:7f:
7c:c1:ee:12:ec:97:f9:19:be:97:60:d5:c2:0d:6a:71:cd:60:
da:af:c6:f9:95:77:d9:53:dd:21:d5:ce:48:a3:dd:38:f7:2f:
88:55:ec:b8:e7:04:d7:6c:98:47:a7:c1:f0:2a:ee:c6:ad:f0:
54:a2:b7:70:f9:50:87:42:71:4d:4d:ae:bf:ff:85:1a:22:90:
e1:e3:0f:73:79:d9:93:a4:47:13:19:f2:07:1f:73:11:d8:9e:
31:bc:0f:d4:84:c9:ab:76:da:22:f4:e6:e3:67:5c:fd:e4:6a:
b2:68:0a:30:ab:dc:ae:0d:09:e1:77:31:2f:c9:a5:98:2b:9e:
d3:7c:7e:8b:98:72:a5:87:e8:d2:32:5f:e7:00:a2:a9:b5:41:
3d:48:94:72:39:9a:de:bc:5b:0f:97:36:8d:5e:df:79:e7:0e:
17:8f:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:57 2024 by rpki-client on console-ams.rpki-client.org