Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D54184A64D11EF81DDF74C762E951A.roa
File: 84D54184A64D11EF81DDF74C762E951A.roa (raw, json)
Hash identifier: vIShUlaFlTPlQT2+e9Cn6ea2DSq4RRzIGELPqJr0oNU=
Subject key identifier: D9:80:39:FD:61:E8:5E:A9:93:0B:58:4F:D9:37:44:B1:C9:3A:90:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D54184A64D11EF81DDF74C762E951A.roa
Signing time: Tue 19 Nov 2024 08:08:54 +0000
ROA not before: Tue 19 Nov 2024 08:08:51 +0000
ROA not after: Sun 15 Dec 2024 08:08:51 +0000
asID: 51396
IP address blocks: 154.213.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69396 (0x10f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:08:51 2024 GMT
Not After : Dec 15 08:08:51 2024 GMT
Subject: CN=673c4796-2616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:aa:4d:33:ae:e3:03:7d:01:e0:12:55:ac:
82:fb:b9:72:f3:de:4a:b9:4f:60:aa:22:9a:60:4b:
52:a6:17:27:47:3c:99:5b:21:0f:4c:16:bb:e9:aa:
4e:78:eb:47:df:1d:08:e0:c9:28:7e:dc:57:6d:93:
8b:c6:c7:2c:43:9a:06:1f:91:3d:82:a2:63:3f:da:
f2:c3:08:df:56:84:b5:ea:3d:45:98:41:23:d9:6b:
a9:5b:c2:3b:59:36:79:79:84:e7:90:0a:99:53:d9:
4f:9b:c4:03:22:d9:8d:cd:84:30:8c:72:22:b4:b5:
5f:55:b5:67:45:38:bc:4a:59:b6:99:0d:1e:52:7d:
d3:58:f2:0d:d4:81:94:08:42:cd:1d:4c:b8:c8:08:
fa:20:23:2e:66:fa:f0:d8:42:fd:ed:39:f5:d7:b7:
2f:f8:c9:e0:b6:eb:eb:c4:fd:4f:8e:28:bf:3a:a7:
03:4d:3d:1e:53:a8:4f:00:4c:91:87:8d:0f:09:b5:
e2:cf:09:28:80:c4:01:3a:60:32:a4:be:3b:db:73:
60:b0:0b:3f:10:4c:1e:41:a1:8a:db:ce:87:b6:e4:
2a:db:7e:36:4c:d7:5f:07:77:32:41:c7:8f:2c:6f:
19:72:91:c2:af:46:16:c9:1c:b0:93:4c:c9:30:b2:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:39:FD:61:E8:5E:A9:93:0B:58:4F:D9:37:44:B1:C9:3A:90:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D54184A64D11EF81DDF74C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.188.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:85:d5:41:13:ae:83:27:2b:2c:8f:a0:a3:31:b0:be:a4:
6f:b5:5c:41:d3:76:30:eb:43:b4:2b:b9:97:73:87:1e:48:a1:
5c:c7:ec:e4:b6:f7:ab:6c:39:56:ef:f6:19:09:d8:a7:9d:2f:
86:c7:2b:5e:c9:be:54:27:83:0f:38:c2:45:4b:8d:fb:ad:73:
b6:0a:09:76:61:c7:0b:a9:67:b3:28:d0:39:6b:86:ce:12:4a:
59:4a:e8:b7:86:6d:90:ce:28:6e:d0:bf:5c:f4:23:12:39:33:
98:41:57:ce:02:21:93:e4:cf:4d:31:f6:2d:6a:64:e4:59:b6:
da:74:63:d2:5b:f1:90:0d:b6:69:f2:fb:74:ea:77:fb:53:bc:
27:2a:03:72:96:fd:77:6b:8c:fb:81:0f:84:0f:e1:9e:ac:39:
70:5c:b5:79:1b:57:62:af:49:43:10:7d:da:ff:04:4c:c6:5d:
7d:6f:dc:82:dc:b1:2f:96:d2:f9:3e:ff:b6:88:9a:aa:af:1c:
40:7b:80:3f:4c:7c:a8:5c:a1:fa:ee:38:b0:9e:3a:0f:b2:66:
aa:93:07:0c:15:a6:9f:b6:5f:d8:bc:e7:0d:a8:ab:f0:d1:04:
e7:d2:e3:42:c6:0d:00:a8:e3:9d:09:22:f6:17:d2:a5:f3:38:
04:23:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:16 2024 by rpki-client on console-fra.rpki-client.org