Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA16D2B0725711EF932A0166762E951A.roa
File: BA16D2B0725711EF932A0166762E951A.roa (raw, json)
Hash identifier: zRoLpTLXYLcXjJqcV2c7+o07a4uOjVf1K2iWN1nYXGI=
Subject key identifier: C4:BA:66:B3:CC:3A:FD:BE:AE:F4:82:85:44:5A:9A:BA:E6:B8:D2:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA16D2B0725711EF932A0166762E951A.roa
Signing time: Sat 14 Sep 2024 05:10:58 +0000
ROA not before: Sat 14 Sep 2024 05:10:55 +0000
ROA not after: Tue 31 Dec 2024 05:10:55 +0000
asID: 17561
IP address blocks: 154.217.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60886 (0xedd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:10:55 2024 GMT
Not After : Dec 31 05:10:55 2024 GMT
Subject: CN=66e51ae2-68d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:1f:2a:eb:dd:15:fb:d3:bf:35:df:69:3b:
52:4a:ca:f5:b4:0a:d6:26:d0:77:81:bc:75:c4:93:
0d:30:77:0a:e2:3f:15:1c:03:5a:6e:d5:20:1b:ae:
f7:06:26:f3:80:f7:62:45:f1:be:ff:bf:59:c8:c8:
95:e4:ce:63:d6:7b:d9:9c:92:4b:22:52:db:06:3a:
10:14:5b:bf:2a:0b:c9:66:9e:e7:80:f4:04:8c:fa:
7b:5a:3c:bc:2d:39:6b:de:49:a2:5a:f2:d4:91:a8:
5c:47:67:f0:59:47:df:f5:ab:59:f1:f2:75:a3:58:
03:5b:56:dc:ce:7e:65:75:7b:75:91:39:fe:b2:7d:
84:be:f0:b9:5b:53:15:e2:78:11:33:57:b0:f0:be:
75:a3:13:9b:12:2d:20:6a:59:e9:cb:96:ab:38:b4:
ed:59:5f:3c:fc:db:71:6a:a9:78:ff:85:f9:3d:f3:
c5:5a:24:10:f7:26:7b:c2:41:b5:bd:6d:71:f1:84:
43:79:8f:7e:99:83:29:36:ee:c3:12:98:a5:81:f9:
d3:09:58:c3:bd:c8:4e:72:1f:e4:ad:bc:5a:f9:6f:
55:d2:da:ff:1e:94:91:da:06:d1:0c:41:e0:19:8c:
27:77:27:6b:f6:a0:86:b3:7b:70:bb:df:02:17:a2:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BA:66:B3:CC:3A:FD:BE:AE:F4:82:85:44:5A:9A:BA:E6:B8:D2:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA16D2B0725711EF932A0166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:dd:73:a7:53:36:20:90:80:4f:7c:14:26:ab:9b:00:9e:76:
c9:8d:cc:19:c7:10:54:b8:b2:c6:cd:08:05:8f:8a:f2:45:69:
e5:4a:bc:a2:ea:2f:8b:ff:88:ec:3a:bd:1d:23:12:c2:08:c2:
12:dd:47:97:28:3e:d6:38:77:37:a9:aa:b5:e8:b1:87:d5:9d:
9e:0e:93:5d:33:72:45:8a:4d:af:3e:73:34:d1:12:06:41:30:
16:8c:40:2c:af:e2:e5:c7:6a:e6:51:fc:a9:0c:f9:df:c8:27:
20:38:23:32:7d:62:d9:68:33:24:8b:ad:0b:e2:03:15:f2:71:
60:58:8c:ee:d7:b9:bf:90:57:1c:66:b3:52:9e:b4:4c:20:69:
7d:09:5d:b5:5e:45:3a:fc:fa:20:f6:54:e5:f5:48:33:bc:a6:
13:8a:27:e1:ba:40:90:ad:5c:03:35:21:e1:16:12:9d:5f:32:
31:1f:28:c3:5e:a2:62:2f:34:aa:d1:5a:8e:f0:ad:07:b0:e4:
b5:5c:08:b9:b7:eb:83:9a:6f:81:21:18:f1:89:24:e5:ef:52:
66:4b:09:e3:3a:0b:72:4c:70:a1:47:73:df:87:fc:7a:81:77:
13:14:6f:70:f0:4b:1d:39:4e:6e:ee:1a:1f:41:7a:f2:76:02:
c4:96:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:22 2024 by rpki-client on console-fra.rpki-client.org