Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8D3DEA69B7111EF8FC47946762E951A.roa
File: A8D3DEA69B7111EF8FC47946762E951A.roa (raw, json)
Hash identifier: 86+M+LS+AhObimAJP4yl88TJYbkL9sNR1cZgylvQgs4=
Subject key identifier: 1A:51:86:F1:01:7A:DA:75:26:01:4F:10:6F:52:14:1C:B9:52:AB:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8D3DEA69B7111EF8FC47946762E951A.roa
Signing time: Tue 05 Nov 2024 12:29:54 +0000
ROA not before: Tue 05 Nov 2024 12:29:50 +0000
ROA not after: Mon 13 Jan 2025 12:29:50 +0000
asID: 7018
IP address blocks: 154.195.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67519 (0x107bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:29:50 2024 GMT
Not After : Jan 13 12:29:50 2025 GMT
Subject: CN=672a0fc2-4cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:58:af:4a:19:d6:a4:8b:48:f9:d0:c2:44:
89:78:c6:01:1d:fc:0e:97:fc:ba:ad:21:b6:ad:e5:
07:a1:93:7d:1b:1c:71:46:a9:91:76:a8:ba:58:eb:
96:ff:57:b1:2a:a3:d3:10:bf:b6:a1:9f:a8:86:6f:
fb:c9:37:5f:d7:86:a5:f7:08:14:73:e2:f9:54:6f:
5d:d9:d0:07:82:77:f5:41:50:64:3a:ee:c7:5d:ec:
46:6f:5e:94:0b:18:db:b4:c0:a8:2a:55:40:8e:04:
ff:09:90:6b:ee:fc:06:7e:4f:5a:52:c0:84:ab:aa:
8d:0c:1e:03:16:58:aa:ab:a4:6f:84:cf:f5:a1:f8:
4f:f9:99:2e:45:e6:50:0c:b9:1d:7b:40:1c:21:0f:
ec:ea:c3:f6:3a:ca:b7:d1:60:e7:65:15:48:cb:f1:
2c:41:3c:77:6e:f7:26:79:c8:2a:e6:96:ee:4d:b7:
f6:50:a2:ec:b6:49:f4:bf:3a:9e:6f:ba:3d:ce:cc:
f2:cc:7d:b1:3e:e2:e3:82:a1:7f:5c:0a:ea:66:5d:
32:38:5f:bc:2f:de:70:36:a5:3a:05:07:67:a3:5b:
05:a5:3d:96:a1:5d:28:00:32:c2:9f:e4:10:39:b6:
15:99:1c:60:87:70:68:4a:dc:0d:bf:32:80:59:e5:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:86:F1:01:7A:DA:75:26:01:4F:10:6F:52:14:1C:B9:52:AB:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8D3DEA69B7111EF8FC47946762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.48.0/20
Signature Algorithm: sha256WithRSAEncryption
78:82:3b:6f:31:df:73:d7:ce:04:6a:32:5c:52:e9:38:aa:1b:
45:fe:80:10:18:a4:68:7a:9b:4a:7e:db:f8:8b:83:03:7e:eb:
63:d4:2c:b2:65:54:76:dd:ac:09:99:48:1c:95:80:e2:5b:4e:
e8:7a:bf:d4:17:b8:3c:1a:ec:b0:5e:03:1b:5e:dd:e1:f0:8e:
23:cf:82:ac:04:73:35:86:16:b4:d9:0e:36:9b:60:5e:a4:d4:
46:35:6c:0a:c3:be:d4:8f:99:0a:0b:c2:8f:ec:7b:1f:4e:d1:
6d:68:eb:57:37:7b:d4:c6:45:4a:4e:bc:f1:fd:78:2a:26:35:
d9:e9:6b:d5:48:e6:fc:58:83:06:f6:43:ab:0c:74:02:10:d4:
3f:7c:64:4f:c7:78:1b:10:f8:5d:dc:25:b6:41:b4:bb:e6:d5:
0e:d3:b7:8b:81:87:ec:9c:ee:4a:cf:7b:b7:20:20:46:16:79:
fc:16:4a:6c:d6:de:ae:db:3e:38:c4:92:48:25:54:cf:47:40:
5f:ff:81:15:51:c5:19:26:31:52:69:4f:0b:be:4b:fe:c2:98:
31:d8:21:e4:54:fc:fe:41:a4:69:50:af:2a:c8:73:54:95:91:
6f:fc:d9:3b:36:55:a5:a8:5f:c5:ab:dd:e5:ca:dc:cd:c3:42:
61:83:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org