Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D259144951011EFAC4A1589762E951A.roa
File: 7D259144951011EFAC4A1589762E951A.roa (raw, json)
Hash identifier: M5eULGsviE2IPub4yISXIMertP0tnbr/fFSiSapAdTE=
Subject key identifier: BB:0D:4F:FA:CA:A2:B8:9A:12:4D:80:A6:61:95:E3:FE:8A:CE:B5:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D259144951011EFAC4A1589762E951A.roa
Signing time: Mon 28 Oct 2024 09:39:12 +0000
ROA not before: Mon 28 Oct 2024 09:39:09 +0000
ROA not after: Fri 29 Nov 2024 09:39:09 +0000
asID: 23470
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66245 (0x102c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:39:09 2024 GMT
Not After : Nov 29 09:39:09 2024 GMT
Subject: CN=671f5bc0-e100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:52:52:55:28:ea:cc:93:f6:a1:62:a0:dd:
1f:63:f7:77:82:19:3e:02:39:a9:60:40:80:04:a4:
16:68:52:d3:57:cb:b7:91:53:53:7f:02:52:b9:03:
71:e9:1f:75:ea:c7:8f:70:16:d9:8d:fb:7b:76:78:
20:f5:4d:1d:bb:78:7a:2e:2c:d1:cd:94:97:00:b9:
09:36:d2:81:78:b9:fc:10:15:05:9a:e0:ae:63:f5:
bd:5f:a6:71:6e:b1:1d:cf:30:a9:dc:bf:6a:2f:75:
d3:79:b4:be:1a:24:a5:d0:ef:db:2f:34:bf:b9:58:
a2:40:7c:9a:a5:30:fa:51:49:18:34:f7:3e:e8:15:
34:f1:da:5e:3e:61:0f:11:64:f8:e4:42:ac:39:e9:
23:bf:dc:c8:53:1e:52:69:20:94:8b:47:48:c3:00:
6a:ac:8c:f8:0d:fd:52:66:ed:73:96:27:a8:9d:58:
fc:06:94:05:52:ea:c7:be:e9:55:f9:48:f0:06:6b:
2e:b3:8e:ec:e7:b1:9f:cb:ae:0c:bb:1e:30:98:fa:
29:7c:7b:9d:50:42:55:3d:05:50:ec:50:53:cf:46:
9e:63:a1:09:5e:23:a9:bc:76:75:62:f1:0a:69:90:
98:48:3d:da:16:29:5b:8c:0f:fa:07:51:69:ca:5b:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:4F:FA:CA:A2:B8:9A:12:4D:80:A6:61:95:E3:FE:8A:CE:B5:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D259144951011EFAC4A1589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:60:70:f4:5a:59:a1:c5:b1:be:5c:a5:09:ee:8d:09:02:a1:
5c:8d:56:ce:67:5f:c5:53:ee:99:b7:01:94:d7:08:7b:9d:19:
c5:16:f3:a9:5d:67:72:e1:40:1d:e1:e0:25:2d:3d:a1:a5:a5:
e0:74:20:81:ec:eb:49:c8:68:6f:43:27:0a:1f:b2:4f:4f:3e:
67:58:1c:e5:a6:5c:29:ef:8f:f7:53:16:bc:00:41:79:39:55:
df:30:61:5d:06:78:69:1d:0a:3a:74:e1:bf:61:15:4c:8d:22:
92:84:a4:47:85:66:3f:34:e5:73:62:39:49:95:54:53:cd:83:
4e:7e:25:8b:46:f5:e8:22:98:01:34:a8:07:aa:79:1d:f1:c1:
f9:ee:33:51:1d:d4:be:8e:ea:8a:2b:f1:fa:a1:81:bb:10:e9:
28:52:20:26:93:f4:9d:26:04:f8:c6:2c:96:f0:3f:89:2f:cd:
ee:d6:d9:a1:27:e5:cd:c0:46:b6:e6:fc:ab:2b:df:1d:81:fc:
11:11:4e:ea:90:0e:de:e1:0a:69:91:75:16:b1:4b:08:6b:af:
aa:fb:77:30:ea:ca:f8:16:ec:59:bf:04:d4:e0:61:69:2f:c9:
ae:68:95:1f:b5:1b:67:6d:6a:9e:cc:78:1b:0d:e8:ad:c9:fe:
74:9f:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:53 2024 by rpki-client on console-fra.rpki-client.org