Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1B0DB76A71C11EF89DF525F762E951A.roa
File: B1B0DB76A71C11EF89DF525F762E951A.roa (raw, json)
Hash identifier: uE2dyyvFpV4qpr4+13Bxy1iwv1IGzsj+quUFJC/OdNk=
Subject key identifier: A4:28:ED:04:55:68:2B:79:F0:9C:B0:78:0D:AA:40:A4:7B:85:D9:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1B0DB76A71C11EF89DF525F762E951A.roa
Signing time: Wed 20 Nov 2024 08:51:55 +0000
ROA not before: Wed 20 Nov 2024 08:51:52 +0000
ROA not after: Thu 05 Dec 2024 08:51:52 +0000
asID: 39600
IP address blocks: 154.94.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69437 (0x10f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 08:51:52 2024 GMT
Not After : Dec 5 08:51:52 2024 GMT
Subject: CN=673da32b-b200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:fa:c1:07:62:7b:8b:0c:ee:b7:07:d0:99:
71:6b:68:9b:5f:78:b1:b3:be:6e:37:44:9c:97:a8:
3a:8a:0a:9f:b3:6a:0e:27:43:04:f1:14:12:52:c2:
fc:17:b7:6b:1b:42:8e:e3:3e:7f:5e:91:20:56:30:
bd:0c:68:a6:79:ca:8b:9b:c2:74:b2:69:d7:38:38:
93:72:e6:3b:a0:30:5e:ea:9c:4d:f8:14:2f:e0:85:
53:58:0f:69:89:8c:eb:05:18:f6:99:e6:b0:60:69:
36:cf:d2:a8:47:90:8c:a9:db:d6:be:1b:60:c7:90:
7d:db:77:d6:62:54:c2:c7:72:05:ac:73:ee:82:59:
71:ab:55:1f:c4:6d:dd:bb:f8:2a:a9:ef:8d:63:dc:
44:ce:20:3a:b8:95:44:22:41:cc:c0:87:0e:99:e5:
ef:e2:cd:16:0d:1a:5b:35:87:30:08:f7:a8:e0:24:
89:4b:4e:92:1b:e9:a2:c5:37:84:f3:a8:a1:fc:8d:
7e:aa:74:ca:ad:fe:34:fd:af:14:f8:39:6b:da:a4:
01:f4:41:5d:b6:1f:dc:4f:b3:2a:69:47:30:9a:57:
f8:7b:b3:c2:04:11:5e:1d:0a:6e:6d:91:78:cf:4c:
1d:0d:2c:3f:20:6d:ee:bd:51:0f:e9:b8:66:e1:80:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:ED:04:55:68:2B:79:F0:9C:B0:78:0D:AA:40:A4:7B:85:D9:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1B0DB76A71C11EF89DF525F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:62:09:fd:15:37:25:8d:7f:6d:07:98:df:1e:07:76:12:
df:e9:14:58:e6:32:27:0e:51:2d:4c:08:ce:47:dd:0f:96:33:
5b:54:50:31:88:b4:e6:a8:fb:c4:13:39:6b:b0:0d:9d:f7:13:
d0:bc:f2:5c:af:e7:69:db:43:91:f6:d4:ae:5b:b8:e1:24:a0:
91:c8:dd:47:d1:73:b3:78:d7:13:59:ff:1b:d8:7a:68:eb:13:
8c:f5:a9:c3:e8:a7:6f:45:6b:30:2f:6e:18:55:d0:84:c9:e1:
38:40:3b:6e:e3:5e:71:fe:d9:e4:e8:e2:af:af:0d:34:04:9a:
0c:93:b1:3c:21:d6:c5:27:35:80:02:20:44:95:f7:69:70:b8:
3e:67:b5:f4:d4:b7:4d:88:3a:d0:ea:fc:b3:e8:fa:95:ca:12:
7e:7f:00:68:ce:03:b2:b1:7f:92:84:61:3a:27:23:2c:62:ff:
2a:7d:6f:9a:a5:64:31:2a:dd:72:ce:37:22:98:9d:e8:4f:7a:
42:fc:30:44:02:69:26:30:5c:b0:63:8c:bb:a8:20:24:61:6b:
1d:54:b5:b0:64:53:93:e1:cb:ba:db:75:1d:e9:66:4e:2e:96:
29:1f:ac:58:cb:14:4e:fa:a0:b7:c7:7a:6b:14:71:77:7f:85:
3e:c9:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org