Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD11E078768A11EF827E0EAC762E951A.roa
File: AD11E078768A11EF827E0EAC762E951A.roa (raw, json)
Hash identifier: +0BhlBRJbI4LrSp75gYZ888kJ9xjxuZnYeUyDRpCDm8=
Subject key identifier: C6:E4:91:FE:D2:B7:57:C2:B3:90:DD:5A:D7:D6:65:AA:41:78:74:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD11E078768A11EF827E0EAC762E951A.roa
Signing time: Thu 19 Sep 2024 13:25:46 +0000
ROA not before: Thu 19 Sep 2024 13:25:41 +0000
ROA not after: Fri 08 Aug 2025 13:25:41 +0000
asID: 133199
IP address blocks: 154.197.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61603 (0xf0a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:25:41 2024 GMT
Not After : Aug 8 13:25:41 2025 GMT
Subject: CN=66ec2659-93aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:81:dd:42:ec:68:34:ec:56:64:38:5f:32:
65:2e:12:f7:15:f3:34:27:0c:f2:77:a5:c5:56:9d:
a0:ad:04:a9:e2:97:d1:82:c3:a1:0d:65:f2:0e:b4:
13:bd:fb:95:24:69:42:5b:7b:32:f8:10:c8:0a:66:
d3:0d:e1:58:56:e0:f6:cf:1f:ac:81:f4:53:fc:d5:
03:e9:5b:38:58:14:f5:54:bf:b2:c5:4a:75:3f:30:
0d:e6:e3:18:19:31:e7:0b:6b:b4:b5:88:11:cc:39:
c4:3c:a6:c0:78:0e:30:dc:dd:59:68:de:73:ab:28:
6c:96:a7:d8:86:32:b6:44:42:59:e1:1d:f2:e6:8d:
b6:c4:83:98:f0:71:5a:e0:82:da:be:0e:da:23:b4:
ed:4a:8d:c7:0d:5b:ca:73:ac:7d:d3:de:ec:4a:4c:
09:d9:f5:16:e8:55:05:3e:d4:09:4f:bf:fb:ad:14:
b8:32:ad:0d:4a:ea:b6:e9:f3:90:17:17:e5:e5:39:
0e:c5:30:9b:79:07:7b:4d:f0:6c:ad:73:33:1e:36:
47:fd:70:00:30:30:89:d8:bb:33:c4:5d:2d:a0:0d:
17:2b:87:d1:92:97:a5:69:91:85:c5:5f:43:3a:28:
00:f5:74:64:b7:ae:20:49:9f:e7:46:13:84:37:d7:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E4:91:FE:D2:B7:57:C2:B3:90:DD:5A:D7:D6:65:AA:41:78:74:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD11E078768A11EF827E0EAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.48.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:d7:9a:6a:25:53:29:2a:cb:32:19:ce:a9:39:7d:f8:1a:41:
c9:14:7a:12:ff:97:e5:6a:b2:9a:33:86:c1:83:1b:a8:6f:58:
2a:5f:3f:5b:6e:ce:e4:2d:9d:1d:05:c5:c8:e8:36:1b:a8:5d:
b4:ca:8b:a4:b7:cc:b3:27:27:38:36:a7:d8:16:89:c8:58:4b:
4b:dc:69:82:d0:6b:e2:d9:d4:c0:0b:8f:88:71:aa:cb:58:22:
10:bc:fb:f3:29:0f:ce:15:e2:b1:6f:92:c1:10:b6:d8:5e:28:
80:c5:9f:fa:3d:91:35:41:5d:5a:a3:fc:c6:8b:62:48:8a:9d:
c0:8e:2b:57:f1:88:ba:1d:e1:ad:5b:72:2c:5e:cf:d1:a3:7a:
18:d9:a9:ab:80:b8:a1:61:91:cb:2d:77:76:9d:18:aa:7f:d0:
a7:73:55:c1:35:33:f4:93:56:e8:25:2b:b2:6c:1a:e3:7d:2b:
7b:b3:9c:18:bc:8a:b0:ab:1c:49:e9:74:72:77:af:cd:1a:df:
80:ad:19:c3:bf:23:9a:92:16:2d:a1:3a:7f:23:0f:f2:60:38:
d4:c5:89:fb:08:34:a4:cb:dc:cc:c7:06:6c:1e:91:01:ca:e9:
9c:7f:74:7a:5e:6f:70:10:9e:8e:c7:33:ee:b8:ad:ca:96:a2:
43:bc:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-fra.rpki-client.org