Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AB5432530611EFA2D0F778762E951A.roa
File: 83AB5432530611EFA2D0F778762E951A.roa (raw, json)
Hash identifier: QLBZQYT87mNWFCDyxx2GbFNMhnSAPcbbyH+wzL8tHf8=
Subject key identifier: E3:E4:7D:F0:9A:6E:7B:2B:34:60:8C:A3:67:63:81:C8:F9:69:54:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: DC39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AB5432530611EFA2D0F778762E951A.roa
Signing time: Mon 05 Aug 2024 08:41:32 +0000
ROA not before: Mon 05 Aug 2024 08:41:28 +0000
ROA not after: Tue 11 Feb 2025 08:41:28 +0000
asID: 140403
IP address blocks: 154.81.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56377 (0xdc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:41:28 2024 GMT
Not After : Feb 11 08:41:28 2025 GMT
Subject: CN=66b0903b-2fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:d2:67:83:f7:e8:bb:71:9e:57:2e:07:2f:
0f:a6:95:8d:93:c7:09:c6:cd:54:e6:24:71:a7:5d:
e3:ec:21:93:92:80:f8:48:59:1b:e2:eb:eb:a2:52:
78:31:8e:3c:bb:f5:cd:8a:4e:5e:ad:20:88:c3:9b:
6a:8c:bc:0b:39:a8:84:87:e2:f5:bf:fe:6d:80:31:
61:7e:e9:a7:32:68:51:da:ee:75:51:2b:72:4a:ff:
bf:95:c9:78:0d:0f:d9:5b:fd:fe:78:95:ad:bf:55:
11:97:04:c5:80:48:b7:35:7f:b6:72:91:56:e6:c3:
5b:83:bc:51:d2:14:c1:d4:53:61:2a:06:2c:a5:90:
fe:46:a0:c1:22:0c:fb:82:89:c9:7f:ae:5a:20:e5:
b4:7f:0e:57:7d:94:bc:02:a0:87:5e:ef:e9:ac:b5:
d0:a0:aa:b6:9e:23:8d:70:8d:bf:a5:7e:15:bb:13:
98:ab:80:ac:47:8a:23:20:1d:c3:7f:46:5c:04:47:
0b:0e:64:9b:44:87:d5:82:ea:8b:6d:56:b3:ef:6d:
4c:03:c3:c9:85:b2:99:26:b1:f9:74:62:01:fd:c9:
86:71:26:a3:d8:2a:a9:37:7e:5d:a0:50:05:0a:a5:
13:db:6d:53:c1:da:33:4f:f7:68:5f:f4:80:04:29:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:7D:F0:9A:6E:7B:2B:34:60:8C:A3:67:63:81:C8:F9:69:54:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83AB5432530611EFA2D0F778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.48.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f8:19:82:9a:c1:05:0e:a5:81:3f:75:02:ff:a7:fd:e7:48:
4a:3a:84:06:9e:0c:95:ec:f6:9f:69:07:06:19:d3:91:65:e2:
39:6b:cd:ca:ce:26:f2:47:06:bc:47:8d:08:8e:98:28:78:65:
29:85:9e:06:d1:96:64:0d:c0:40:29:82:56:d1:d7:ae:20:58:
6c:c3:ad:6d:96:f0:5e:3e:9c:77:e6:aa:74:f2:fa:00:f0:f0:
85:d8:61:6a:c2:18:ed:76:51:02:5d:e1:ab:fc:03:1a:bb:5f:
f3:5e:c0:c1:c8:22:9d:38:9a:14:48:09:36:d0:87:4c:8c:f2:
08:01:c6:83:0d:b6:52:84:13:46:94:17:38:0b:d2:be:53:a0:
92:19:1d:43:21:8a:f8:80:27:33:9f:14:c5:d7:d3:77:ec:8a:
cf:fc:9e:50:b2:f2:c1:34:55:f3:16:5a:d5:09:ff:4d:df:e2:
f3:2b:f7:75:b3:03:53:8c:1f:e7:e4:ff:c6:32:50:13:66:99:
99:ac:43:d7:95:4f:91:48:08:0d:e2:05:65:5c:83:ef:28:97:
ff:71:61:89:f2:62:52:a8:c9:6a:bd:30:d7:72:38:5e:ab:6f:
89:8a:98:e0:c3:7f:7e:0e:ed:86:3b:7b:91:55:c2:3d:31:89:
48:f7:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org