Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65AE37C9D1A11EF8A6AD6BD762E951A.roa
File: A65AE37C9D1A11EF8A6AD6BD762E951A.roa (raw, json)
Hash identifier: 9pURqfR2hwuwCBtUFkexYUni1npwMRgIIRO+SiV3T+I=
Subject key identifier: 46:BF:F2:42:4D:4C:6B:7F:E1:61:2E:A7:DA:EF:96:E2:A6:AC:4B:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01097D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65AE37C9D1A11EF8A6AD6BD762E951A.roa
Signing time: Thu 07 Nov 2024 15:12:06 +0000
ROA not before: Thu 07 Nov 2024 15:12:02 +0000
ROA not after: Wed 11 Dec 2024 15:12:02 +0000
asID: 203020
IP address blocks: 154.201.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67965 (0x1097d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 15:12:02 2024 GMT
Not After : Dec 11 15:12:02 2024 GMT
Subject: CN=672cd8c6-ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:e1:80:c9:60:0f:1a:f2:cc:2f:1f:17:41:
7f:da:5d:71:3e:86:64:99:e3:d5:d2:e5:e8:3d:a6:
d6:a0:57:cb:12:73:1a:4f:04:8a:40:e4:68:be:21:
fd:99:87:9e:0a:65:a5:e4:78:fe:95:8a:3d:6a:85:
1b:a7:51:cc:b0:c2:0b:ff:63:aa:78:24:13:15:b3:
8b:ff:b6:10:0c:6d:ae:56:f2:b7:47:7c:2c:e9:74:
d5:55:6e:41:10:cb:9c:50:30:f9:aa:8d:09:80:f7:
6e:8c:8e:f3:37:fc:bb:d1:55:a0:ca:89:88:c8:68:
e7:96:af:dc:db:a4:ab:23:e8:76:b1:c6:a7:0e:2f:
77:34:02:c4:ae:e0:a8:92:bb:87:b7:e6:a1:32:07:
b2:b8:6e:88:50:25:1d:75:5b:3a:62:b6:1b:f1:1c:
9d:10:07:ed:31:ea:e2:cf:3e:96:06:05:5b:b9:51:
70:9e:54:25:cb:30:30:a1:9c:4f:97:dc:bf:5f:0f:
a8:8d:6c:65:d2:fd:df:59:19:8e:6a:6b:38:48:54:
2c:a8:a9:7b:b7:d0:db:d3:63:71:be:46:5b:38:bd:
00:7f:b6:36:6f:de:fd:4b:96:3f:34:bf:75:bd:d6:
93:45:4c:b0:d5:2d:ee:5d:58:cb:23:60:66:c7:d0:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:F2:42:4D:4C:6B:7F:E1:61:2E:A7:DA:EF:96:E2:A6:AC:4B:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65AE37C9D1A11EF8A6AD6BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.38.0/24
Signature Algorithm: sha256WithRSAEncryption
18:46:92:63:97:cc:08:72:e1:71:a4:12:4a:59:bd:40:ae:1f:
df:51:5a:bb:95:c1:2d:61:25:6a:30:f7:c1:30:dc:2c:2c:01:
85:03:c8:9b:a5:81:7d:4a:12:a8:ff:55:4b:89:2d:fe:f6:9a:
8f:9a:fd:41:a5:e1:80:c8:ba:75:dc:a8:11:fd:93:c3:22:62:
ad:75:00:9f:69:0b:c3:f0:50:73:c5:22:ec:17:21:d9:14:bd:
40:6e:d2:da:e3:78:21:83:25:52:04:59:74:75:55:79:d0:66:
c0:73:08:96:98:ce:9c:53:d5:4b:b8:8f:77:fb:eb:48:35:9f:
f9:08:e4:8a:f3:eb:4a:4b:54:b5:1c:7e:34:cb:85:90:02:f5:
88:3a:53:00:7b:4c:ca:8d:0f:03:45:c7:ef:6e:92:ee:ac:da:
d4:ac:6e:af:d6:8b:d3:88:95:03:2a:a9:50:95:07:31:a3:16:
f2:b3:5b:f4:d0:a9:41:ea:5f:77:6f:fe:7b:bd:88:01:75:04:
de:a5:a7:9d:e6:c2:d9:2b:44:70:e7:63:a4:7e:41:36:1d:7e:
ac:50:eb:46:a1:63:41:0a:3a:8a:5a:79:04:7f:42:66:c7:4c:
ac:f5:fa:3b:17:80:d7:5b:09:b4:2c:55:50:fd:02:67:30:e8:
30:a0:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org