Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4FCAAC9D9F11EF9E637D8B762E951A.roa
File: BA4FCAAC9D9F11EF9E637D8B762E951A.roa (raw, json)
Hash identifier: U9BTrRjor0pJzF1GGaf7IACRPJ3aypf3cm+pqxT8P1c=
Subject key identifier: B1:75:96:9B:F1:A3:0F:58:19:1D:A1:C8:8B:E6:ED:12:B8:F1:7A:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4FCAAC9D9F11EF9E637D8B762E951A.roa
Signing time: Fri 08 Nov 2024 07:04:42 +0000
ROA not before: Fri 08 Nov 2024 07:04:39 +0000
ROA not after: Tue 10 Dec 2024 07:04:39 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68004 (0x109a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:04:39 2024 GMT
Not After : Dec 10 07:04:39 2024 GMT
Subject: CN=672db80a-177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:fe:b6:46:00:5e:35:52:c0:08:aa:1e:fe:
27:75:4b:dc:99:90:02:9c:fd:20:a3:76:24:54:ca:
f9:db:36:bf:8b:84:5b:69:c6:c0:dc:8a:82:f4:45:
ff:ff:3b:84:bf:7b:52:73:6e:56:ea:b6:1e:60:bb:
af:82:dd:b3:07:95:78:24:21:e4:e5:5e:83:05:68:
34:59:3f:ee:89:52:c0:ae:18:6f:64:cf:eb:53:b4:
51:b9:94:7c:11:78:82:f8:ba:9a:54:ea:ef:98:31:
17:7e:7d:ce:35:6d:6a:02:2c:d6:eb:e0:4a:83:1e:
cb:dd:8b:db:98:35:75:c8:46:b0:61:30:50:80:bb:
47:9c:cc:38:61:82:8c:06:be:05:e2:46:46:e2:44:
bf:f9:e3:96:6b:5c:f4:7b:10:36:23:d1:35:a7:f1:
6b:e7:47:22:6d:32:30:7c:be:cd:e3:bc:80:db:b9:
3c:d9:db:1c:76:34:bc:b6:ea:0d:04:46:4c:66:00:
9e:2d:fb:23:b5:06:f2:cf:1d:4c:98:cc:d6:e1:e3:
fe:39:03:4f:10:c5:93:20:a7:9a:16:af:30:80:9a:
52:ac:fe:4f:72:f6:7c:02:be:5c:5b:d8:e8:f8:f3:
90:3d:df:22:2d:84:dd:82:1a:74:4f:de:53:c8:c2:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:96:9B:F1:A3:0F:58:19:1D:A1:C8:8B:E6:ED:12:B8:F1:7A:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4FCAAC9D9F11EF9E637D8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:24:01:9b:ce:e0:ad:7a:1a:3f:54:a9:ca:e1:ed:e3:cd:c6:
20:e4:0a:9c:42:0b:f6:3d:b0:39:12:c3:97:f4:b2:ab:23:6d:
88:84:36:6d:24:66:da:82:2c:43:af:4b:2b:54:6d:03:0a:6f:
56:97:9d:b5:f2:b0:7f:83:67:7c:62:ee:b2:15:1c:0a:63:82:
5f:f3:f0:55:03:82:a0:cc:7b:ef:35:14:17:bb:f1:af:1c:7a:
de:20:d1:21:64:cf:98:f7:12:55:52:5a:ad:ff:f9:25:76:55:
39:8c:95:e7:4f:01:41:89:04:ea:4c:80:2d:90:11:b7:46:64:
c2:d9:b9:e0:2b:a0:cd:a7:10:b5:1d:23:57:8c:dd:fc:57:f8:
11:fd:1f:b7:be:68:e0:82:65:36:25:d0:68:56:f2:cc:c8:97:
2c:e2:17:46:da:db:4d:7e:c1:e1:9e:3e:da:8f:8b:8a:c9:85:
77:63:53:28:b8:c8:3e:5d:a2:77:30:ee:1f:24:5c:ed:45:5b:
18:60:ea:9e:70:e5:84:1f:27:f9:5e:21:6d:55:da:c8:0f:18:
84:6d:58:a7:47:d3:dd:6d:6d:71:38:c8:7e:7d:84:da:89:0f:
17:17:4b:90:e9:1d:04:f1:b3:96:f3:f6:b7:fe:59:bc:59:a7:
e5:54:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org