Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3CD326768911EF9FC173A7762E951A.roa
File: BA3CD326768911EF9FC173A7762E951A.roa (raw, json)
Hash identifier: e5rq7X7d5jg02TMI7McIXHqPujKhUIK18nmPZtIUGeY=
Subject key identifier: 82:4C:08:B4:8F:90:1E:20:D3:E8:7D:D6:C7:41:BE:78:8A:D1:5F:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F09B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3CD326768911EF9FC173A7762E951A.roa
Signing time: Thu 19 Sep 2024 13:18:58 +0000
ROA not before: Thu 19 Sep 2024 13:18:54 +0000
ROA not after: Fri 08 Aug 2025 13:18:54 +0000
asID: 133861
IP address blocks: 154.204.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61595 (0xf09b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:18:54 2024 GMT
Not After : Aug 8 13:18:54 2025 GMT
Subject: CN=66ec24c2-7db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:35:b8:d3:dc:67:0f:c3:0b:43:c0:0e:74:
64:67:96:9c:28:ed:ba:6b:4e:e9:bd:46:1c:73:1d:
69:b0:4e:37:a5:2a:d3:1c:9a:db:9c:4e:a8:44:b0:
0c:43:94:71:a6:d1:4b:ff:f2:4c:d7:18:95:c4:6b:
07:30:04:56:56:87:df:3d:0e:55:48:e0:40:62:31:
b1:3a:b5:0a:28:1c:1a:24:d8:23:30:41:db:9e:77:
17:62:72:34:8b:03:dd:4a:a7:24:61:0f:d9:af:2f:
b2:29:5b:28:f5:6f:50:df:7f:63:68:20:39:87:27:
54:09:a9:44:a6:b5:d9:b4:9b:80:6c:e1:25:45:23:
ec:72:eb:9e:95:a4:a0:41:81:8d:e3:b5:93:b4:6d:
64:31:04:88:59:bb:63:d3:35:1e:4b:00:4b:05:87:
6a:65:9f:5a:82:a2:ee:e6:9a:fd:9d:23:37:43:15:
64:d4:dc:62:b6:77:d4:80:47:01:b5:7d:33:b4:8b:
7c:bc:4e:93:40:63:32:43:6f:b6:59:85:4c:13:20:
9f:05:97:54:9f:c2:2e:67:cc:79:1a:4f:2f:42:dd:
7d:0f:9a:e2:62:53:61:b7:bd:e3:cc:80:43:9c:86:
78:f9:7e:e0:6e:8a:5e:fb:d2:27:de:d5:07:30:cb:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:08:B4:8F:90:1E:20:D3:E8:7D:D6:C7:41:BE:78:8A:D1:5F:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3CD326768911EF9FC173A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ea:c4:42:78:d2:ca:62:4f:03:cd:60:50:30:46:c9:eb:2f:
ac:14:68:00:bd:e4:c5:8a:50:9f:4b:10:fe:b4:4e:5b:95:8d:
e7:08:f1:34:e6:a2:ef:98:ee:11:5b:74:2a:41:6b:92:eb:78:
fd:98:26:12:95:6b:f2:fe:48:1f:e7:c4:75:3b:30:65:b7:c5:
e0:f4:e0:ce:6f:7a:1a:9a:39:39:a8:94:e8:97:81:21:5f:69:
e3:3e:e4:0a:f7:7b:f8:c6:0e:9c:9e:50:70:46:07:ed:e4:a0:
8d:86:89:14:ec:c1:63:26:5a:93:f8:f2:16:d1:9e:71:5e:3a:
ca:3b:09:9d:a4:a5:d5:ff:8d:62:14:55:c5:18:49:dc:5b:71:
6c:9e:3b:34:7c:52:37:6a:da:ea:35:37:6e:34:9c:81:c0:1c:
22:be:93:86:89:03:5a:c4:dd:d0:3e:d7:d4:67:b5:96:2b:eb:
ba:65:06:52:43:6e:b1:62:a9:4c:3c:9e:c5:37:0f:89:54:62:
5a:2e:c1:b6:89:04:63:81:a9:c4:aa:13:ef:1b:98:63:e1:ca:
d3:f1:ca:96:84:9a:f9:8f:1d:27:e8:dc:10:2f:a4:b9:87:92:
b3:1d:6f:a5:9f:42:11:ae:ab:9c:fc:1d:ed:1d:ba:6b:4c:7d:
17:69:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:22 2024 by rpki-client on console-fra.rpki-client.org