Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB452C0911811EF86A1968A762E951A.roa
File: 8EB452C0911811EF86A1968A762E951A.roa (raw, json)
Hash identifier: 4LrNbzqDV4EGnHbzXhc070mNWDnRhN73Wc+bV4mGFNA=
Subject key identifier: 65:79:8C:9F:FF:DD:40:E3:55:84:D3:E4:B9:E0:5E:88:A1:F9:42:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB452C0911811EF86A1968A762E951A.roa
Signing time: Wed 23 Oct 2024 08:26:53 +0000
ROA not before: Wed 23 Oct 2024 08:26:49 +0000
ROA not after: Fri 24 Oct 2025 08:26:49 +0000
asID: 273882
IP address blocks: 154.200.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65734 (0x100c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 08:26:49 2024 GMT
Not After : Oct 24 08:26:49 2025 GMT
Subject: CN=6718b34d-1efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:c2:97:37:58:7e:e0:c6:49:cd:ee:93:43:
3b:5f:ab:c3:9a:cc:44:f6:25:0b:4a:8b:74:ba:62:
75:80:83:43:b4:82:04:ba:c2:95:57:02:c4:a4:1a:
46:0f:4c:de:93:9f:e1:9d:18:2e:fb:aa:4d:6e:5e:
91:20:5b:3a:16:ab:cb:cc:da:dc:97:4e:0a:9c:ec:
99:b6:e2:85:a9:67:38:0c:cf:19:f3:5f:ac:48:99:
3d:8f:9c:7a:67:b1:37:53:ab:88:59:e2:c2:15:7a:
f3:7e:14:27:6f:c3:a4:47:d2:f0:e2:8a:fc:d8:b6:
f1:10:ab:16:de:77:95:b5:8a:2e:e5:1d:5b:d3:0e:
22:66:65:f0:0d:8e:96:e5:a2:dd:10:e0:fa:c4:7c:
45:6a:8f:45:89:05:66:fe:a5:ac:25:c0:af:a8:f9:
dc:d8:f5:e0:14:ee:a5:6b:00:0f:d6:6f:50:0e:90:
29:50:66:90:69:5a:8d:45:79:8b:a7:a1:d6:5f:4b:
6e:6b:0a:f5:ef:2c:eb:13:ca:77:49:ec:4d:61:ff:
2e:80:3e:f3:75:c3:57:d1:75:3e:51:6b:3a:60:90:
9c:39:c1:43:e7:a6:f9:09:bd:ac:81:f4:7f:93:97:
80:96:24:b8:3c:06:05:e4:09:23:ba:35:a7:2e:07:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:8C:9F:FF:DD:40:E3:55:84:D3:E4:B9:E0:5E:88:A1:F9:42:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB452C0911811EF86A1968A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:cf:b8:b5:02:5a:2b:33:9f:d8:4b:51:c4:d9:55:45:84:59:
17:32:dd:71:8e:e5:10:0a:18:0e:63:d3:ae:35:57:d2:97:d8:
ca:70:c2:ec:e4:a9:cb:57:dd:51:3d:71:ad:ea:20:a2:ab:91:
6c:8f:3e:2b:aa:43:6c:94:91:04:b8:f6:cd:73:92:b4:75:7e:
fd:5e:8a:12:b6:b6:15:cd:ef:70:1d:a8:c1:a6:8d:27:6a:37:
4b:ac:ca:03:4c:9b:65:18:f7:ac:47:a3:6c:47:81:79:10:e1:
3e:9b:54:40:5d:58:f0:91:a3:7a:7b:5d:ec:e6:07:bb:36:50:
79:17:f2:bd:c8:01:7b:77:fb:73:3f:ac:2f:10:e8:f2:c0:6c:
ab:31:0e:5e:7a:dc:43:8c:07:8a:27:18:2f:3e:ed:6a:68:f4:
35:2d:3d:1f:0c:34:2b:6d:57:fa:11:9d:07:61:dd:5c:96:88:
ec:a2:6b:ed:dd:8a:cd:c8:22:00:fa:a9:be:63:e2:84:ed:75:
47:72:8a:46:b9:21:fc:4f:29:7d:74:d4:0a:5c:46:7a:75:24:
4a:61:7d:5b:8b:ec:cc:61:49:fa:61:62:d2:28:7a:81:3e:58:
14:84:e1:8e:a3:e9:47:0f:af:29:0b:45:f2:5b:75:04:85:7b:
12:a6:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:39 2024 by rpki-client on console-fra.rpki-client.org