Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88455BF4768911EFA82A99A5762E951A.roa
File: 88455BF4768911EFA82A99A5762E951A.roa (raw, json)
Hash identifier: UsBxL0BQqiQeNi/Xpq8L9xL+yLkewZmh39LBzGsrw/k=
Subject key identifier: 69:9B:03:8B:F4:ED:82:42:4B:21:6F:EA:D8:05:36:4B:FF:E5:FC:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88455BF4768911EFA82A99A5762E951A.roa
Signing time: Thu 19 Sep 2024 13:17:34 +0000
ROA not before: Thu 19 Sep 2024 13:17:30 +0000
ROA not after: Fri 08 Aug 2025 13:17:30 +0000
asID: 133861
IP address blocks: 154.204.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61593 (0xf099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:17:30 2024 GMT
Not After : Aug 8 13:17:30 2025 GMT
Subject: CN=66ec246e-5bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:79:6e:f7:c1:b0:42:d4:af:cc:d7:cf:a4:
c1:7d:c4:31:6c:f7:f3:3c:a0:96:46:f5:2a:a9:0b:
dd:88:17:ce:f3:28:4a:68:42:6e:74:aa:48:89:cf:
c2:3c:27:2c:ff:1f:e8:a0:27:a6:39:3c:df:3d:21:
80:bd:1a:a2:b4:84:62:ec:48:92:60:88:0f:15:75:
9c:da:0a:72:97:7b:f1:95:a0:e5:32:05:2e:52:c8:
21:53:5f:b6:b5:ce:e3:1c:99:8d:08:47:e5:e2:8d:
dd:7c:ce:96:12:9f:21:2f:ae:c7:ce:18:93:dd:e7:
1d:96:e6:80:ec:4c:25:46:a2:21:93:ac:c1:20:28:
a3:f5:95:b5:7e:8d:5d:2a:b7:5b:67:d2:16:f3:27:
07:b6:1b:01:6d:d7:f8:b8:33:1e:53:db:f4:91:c2:
96:16:db:37:a7:05:81:4d:c7:cd:5f:98:51:bf:1b:
cd:62:a0:94:78:b9:94:d3:1a:1e:90:27:68:87:97:
8f:ec:78:47:25:9e:6b:99:d7:65:58:e7:27:60:b6:
2e:86:48:ce:91:a3:5f:38:e6:eb:bd:70:0a:a9:8a:
1b:e0:98:72:6a:3b:5b:60:8f:57:65:32:9f:d4:bb:
d9:d1:6a:3e:09:87:1c:58:62:68:7d:5e:cc:4f:72:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:03:8B:F4:ED:82:42:4B:21:6F:EA:D8:05:36:4B:FF:E5:FC:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88455BF4768911EFA82A99A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.41.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:4c:10:2a:ae:10:90:44:ab:55:29:0e:8f:bc:b1:53:e5:
cc:bb:8b:97:cc:c6:8c:10:ef:7e:33:86:2a:33:af:30:dd:8f:
fb:ef:e1:00:c1:0d:cc:c1:63:09:5d:bf:e0:27:33:8a:0c:07:
42:33:f2:43:29:8f:f0:2a:8f:a2:f4:f7:38:7d:90:54:f2:39:
2f:21:7a:d8:99:ec:b0:3d:83:98:f2:6f:95:ba:06:c8:b0:da:
e2:85:28:c7:1d:fe:8e:72:5c:0b:37:8d:2d:69:b8:f5:25:e2:
d9:9c:80:c4:45:e8:20:c3:5b:ed:b6:db:d9:72:bd:d3:78:53:
d2:33:a2:4e:fc:96:d7:7a:86:5a:8b:dd:7f:d4:f3:53:93:ad:
3b:96:81:dc:fd:35:50:de:90:e3:dd:a4:4e:6f:b5:7b:0e:93:
f3:64:40:94:cc:1b:cc:ee:30:66:d2:46:43:a1:ef:cb:5f:52:
51:20:a0:a0:a0:36:be:bb:e9:40:ad:7a:29:48:a2:1c:39:20:
6e:7f:fd:86:5f:32:0c:62:1b:6e:84:a8:4e:8b:09:a1:9b:35:
4c:8a:a3:ce:21:25:d4:9f:51:5b:2c:87:d6:14:9a:c5:54:3a:
33:2a:72:b9:5f:3e:6b:5b:62:6f:85:83:6b:89:2e:91:e1:67:
76:a4:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org