Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6331522A64C11EFA6377F48762E951A.roa
File: B6331522A64C11EFA6377F48762E951A.roa (raw, json)
Hash identifier: rcWwdYjXAmohYdQB1Y2D2c92D8QadaQIu1p/tMtCoC8=
Subject key identifier: A8:C8:CA:AB:EE:F3:96:29:96:08:6E:00:6F:39:E3:80:91:54:0B:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6331522A64C11EFA6377F48762E951A.roa
Signing time: Tue 19 Nov 2024 08:03:08 +0000
ROA not before: Tue 19 Nov 2024 08:03:04 +0000
ROA not after: Sun 15 Dec 2024 08:03:04 +0000
asID: 51396
IP address blocks: 154.213.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69386 (0x10f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:03:04 2024 GMT
Not After : Dec 15 08:03:04 2024 GMT
Subject: CN=673c463c-fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:42:a5:0e:0c:2c:84:09:f3:58:67:a7:ca:
4e:38:e8:d5:59:df:9f:27:4b:e7:9e:0d:e6:0f:82:
b4:c0:36:93:12:ff:db:a6:21:41:c9:24:3f:cc:9c:
ff:2c:da:f7:1e:cf:34:39:48:9c:8f:d3:ab:7e:57:
30:1f:2c:9c:c7:0b:63:6f:7c:9c:c2:20:ad:94:41:
9a:80:0b:30:0a:f0:3d:f6:01:9a:a7:12:7b:00:e7:
d6:4c:cf:f1:78:58:f6:00:db:25:03:b8:80:6b:4f:
2b:d6:f3:26:62:e6:a9:23:db:52:58:9d:66:08:a8:
98:b0:91:ea:42:df:84:e2:8e:47:6b:2b:b3:c3:7f:
ae:f4:f9:1f:77:ce:0b:c7:b8:37:28:0d:03:8d:29:
ed:6e:bb:18:5a:71:99:17:31:2e:cf:f4:f5:bd:84:
6b:56:06:63:9b:02:61:fa:20:2c:93:8a:d6:ca:89:
0a:df:95:4b:7f:b8:79:89:e1:1f:e7:97:e7:f7:08:
ff:8f:bd:59:39:bc:d9:68:1b:d1:ae:0d:17:a7:7d:
16:39:63:73:7c:3f:2f:eb:21:6a:f7:f6:6f:0e:4a:
27:68:74:6c:72:a6:f9:62:9e:60:39:9d:ed:57:77:
7b:31:77:0a:c3:fa:eb:87:81:c3:7b:1b:b0:e3:30:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:CA:AB:EE:F3:96:29:96:08:6E:00:6F:39:E3:80:91:54:0B:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6331522A64C11EFA6377F48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7c:4b:fb:3a:d5:32:1e:7f:02:5b:d3:de:41:2f:1f:43:64:
ed:2d:2f:1d:1d:d4:84:5c:d1:df:fa:bb:15:f9:e6:a2:da:ba:
fc:5e:6f:ce:9b:43:1e:c9:c9:e4:0d:cb:da:3a:77:ac:5b:a0:
4e:ed:4a:f4:5a:9c:c9:3b:40:8c:3b:6e:2d:84:a7:69:27:a4:
37:9d:85:72:7a:7c:e0:b1:51:32:8f:4d:f5:f1:a9:ff:9b:82:
ae:c5:ca:09:5d:28:63:8e:25:99:d5:9b:27:1b:87:00:23:90:
7c:1b:68:66:3e:41:b5:a8:27:a2:ef:88:1a:bc:73:5c:50:e9:
c8:85:ff:37:d3:a2:9e:9b:5a:13:b3:91:be:32:19:3d:73:25:
ec:61:cc:58:64:d7:66:0e:0c:8e:62:82:94:06:5b:2e:8e:56:
10:b3:8a:a5:4c:6a:ad:92:50:b9:a7:d4:83:5e:aa:a1:9c:be:
e7:aa:5a:db:3f:98:7c:16:e3:43:38:a5:23:00:d2:79:a8:9c:
25:c2:69:3f:c3:c9:4a:49:96:ee:96:ce:59:08:11:2d:92:f8:
db:64:70:b5:91:db:f7:9c:4b:8c:8f:b7:e8:ef:8b:f8:ef:2b:
0e:fb:b9:a9:32:49:05:6a:3f:22:79:88:a5:32:e8:c7:03:93:
df:c9:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:23 2024 by rpki-client on console-fra.rpki-client.org