Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5F88B4C8D3811EF80914A9F762E951A.roa
File: A5F88B4C8D3811EF80914A9F762E951A.roa (raw, json)
Hash identifier: KegXOIT6Of74pNgeMIUQAKkLfrbYjPr2dYo9562Wv18=
Subject key identifier: 6F:A1:39:44:D3:00:DB:45:25:82:13:E8:04:86:AA:26:41:B3:CE:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5F88B4C8D3811EF80914A9F762E951A.roa
Signing time: Fri 18 Oct 2024 10:06:31 +0000
ROA not before: Fri 18 Oct 2024 10:06:28 +0000
ROA not after: Sat 04 Jan 2025 10:06:28 +0000
asID: 136933
IP address blocks: 154.213.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65505 (0xffe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 10:06:28 2024 GMT
Not After : Jan 4 10:06:28 2025 GMT
Subject: CN=67123327-0969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:e5:72:37:0d:8c:0a:4e:72:56:6f:6f:18:
63:10:40:6e:1c:5d:85:80:1d:47:f5:81:09:1d:31:
f4:48:f0:47:8f:16:91:b0:1d:70:5c:38:48:2c:53:
9a:7a:83:41:92:ab:08:c7:5c:88:b4:f9:82:68:ec:
b6:a3:78:4b:57:c6:32:1a:8d:77:c8:02:d4:57:35:
57:a7:07:d4:43:23:cd:11:8f:90:99:93:89:ac:fe:
a3:86:ab:79:2b:13:00:3c:33:6b:43:70:4b:9f:29:
fe:17:ae:3b:f7:a3:5d:99:99:1c:cd:71:ce:c4:75:
71:f3:47:41:4f:8b:64:93:3d:b8:52:49:b3:a7:3d:
e1:36:8d:4f:48:91:48:89:0c:f9:cb:c3:2d:60:ea:
2b:bc:4c:c7:8c:2b:73:c7:18:de:8f:fa:74:63:26:
82:7d:5e:ef:cb:8b:5e:19:79:1c:66:97:8e:ca:28:
15:0f:c5:6c:4b:e1:4a:de:22:ff:34:98:2f:c2:43:
8e:b9:89:e7:72:2c:f3:c3:16:79:1b:13:ab:51:c8:
18:4a:ae:88:c3:21:cd:21:b1:3d:bc:12:2c:a1:4e:
2a:0e:67:5e:cb:01:77:d2:d1:d0:aa:c9:8f:7f:73:
26:ad:93:b5:19:77:28:0c:bf:89:d2:5c:77:a2:7b:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:39:44:D3:00:DB:45:25:82:13:E8:04:86:AA:26:41:B3:CE:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5F88B4C8D3811EF80914A9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:42:a8:57:d6:28:4b:ed:ba:b3:de:bc:b6:07:d1:c4:62:ec:
76:29:a0:af:83:95:60:ef:f3:82:38:89:4c:b2:72:06:de:35:
6d:31:a3:1e:c5:8b:7d:d4:a4:c5:49:ca:19:7b:5f:9b:88:a7:
42:4a:de:a4:d0:be:ad:eb:a2:94:f5:7d:f1:c5:43:68:11:0e:
c7:f6:e2:90:87:58:26:8f:c8:d2:89:ef:b1:64:78:7e:fb:54:
d0:e9:34:94:ef:c2:64:0d:26:15:90:1c:1f:13:53:80:49:c0:
03:b0:87:9c:03:87:b5:10:a3:ee:fc:34:9a:95:53:a4:3b:d6:
06:fd:ab:c4:84:26:35:a4:fa:f1:e6:db:6a:6d:bf:f3:03:e3:
da:d8:d1:d5:b9:40:3a:d2:14:b8:47:7d:f4:85:12:ff:63:04:
a2:33:f7:97:40:85:05:3e:a6:2c:d4:93:3b:84:a9:89:f0:b3:
41:8d:96:f4:7f:c3:1e:34:a9:69:c6:8a:8f:c3:b5:8b:a6:8a:
7f:6f:12:4c:8d:04:da:2b:dc:17:c3:c9:5c:87:11:a5:bd:7f:
aa:e1:e2:10:a0:48:96:20:40:86:01:13:de:fd:7d:49:a5:de:
d3:bf:8e:6f:9c:17:06:ce:63:3f:b3:a4:bf:23:10:97:4a:82:
65:c9:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:41 2024 by rpki-client on console-fra.rpki-client.org