Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA3FD5444D811EF8EC5007A762E951A.roa
File: BAA3FD5444D811EF8EC5007A762E951A.roa (raw, json)
Hash identifier: YFjryO1VDim9a2pvlEciMXuk97CXv2Yg0h212PKsVdk=
Subject key identifier: 14:48:E5:49:42:88:01:8D:C6:AC:01:A2:BE:36:32:20:0C:65:C3:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D37C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA3FD5444D811EF8EC5007A762E951A.roa
Signing time: Thu 18 Jul 2024 07:38:31 +0000
ROA not before: Thu 18 Jul 2024 07:38:27 +0000
ROA not after: Mon 21 Jul 2025 07:38:27 +0000
asID: 212552
IP address blocks: 154.211.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54140 (0xd37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 07:38:27 2024 GMT
Not After : Jul 21 07:38:27 2025 GMT
Subject: CN=6698c677-bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:9c:f2:bf:01:86:97:5e:21:c3:70:b2:d8:
97:35:25:d9:05:ef:e2:91:0a:82:0c:dc:fd:f2:96:
06:26:a9:61:49:8e:67:ea:72:ee:e8:17:ef:a5:6e:
39:aa:83:f2:b3:1b:f5:42:b1:d2:1d:06:ef:91:6e:
b6:9c:32:ad:e6:55:d4:f8:04:fa:53:00:50:51:67:
53:f1:30:e1:a6:df:c1:c2:f9:ae:74:c0:4d:fb:c2:
9d:35:d7:03:b7:4d:df:21:f5:06:fb:86:79:8c:82:
96:9f:63:71:fd:98:04:9d:d8:5f:b3:e3:81:9f:f8:
14:7d:5d:62:ae:77:dc:7a:c3:74:55:f4:5f:c2:ee:
74:19:a4:b9:cd:39:4a:11:07:a0:09:0c:dc:b1:b2:
2f:1a:55:fd:17:0b:2c:58:73:4d:19:08:5d:0f:4e:
5e:b6:e3:9d:57:29:9e:9b:33:c4:9c:5d:10:02:7b:
ac:b1:c6:d6:1c:8c:da:7e:a8:c6:15:6a:cc:86:c3:
80:ed:a7:41:24:5a:24:f5:97:50:76:fa:65:f3:3b:
6d:aa:85:2b:6d:35:c3:15:15:c5:68:b2:6b:99:89:
40:06:65:4b:ee:cc:85:40:8d:81:9b:7d:42:ae:03:
7c:43:8b:9b:b6:23:69:2e:40:f2:d9:38:e6:e1:18:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:E5:49:42:88:01:8D:C6:AC:01:A2:BE:36:32:20:0C:65:C3:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA3FD5444D811EF8EC5007A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:fd:9e:0a:6f:f2:40:e7:29:9f:2e:3d:36:be:d6:bc:ef:
1c:a3:c4:93:99:7f:7b:dc:ff:6c:56:82:29:9d:86:11:5a:fe:
c6:f9:01:20:59:ac:fa:3e:af:ce:88:6c:de:9c:54:54:ff:14:
3b:4f:60:f2:92:b3:d9:21:48:74:fc:fd:d3:63:3a:77:8e:9c:
71:06:0f:d5:b7:86:62:b0:57:f5:5d:92:37:73:5d:1d:e5:7e:
93:5d:8e:cc:35:ff:ca:b0:55:e4:d0:3a:ab:43:8e:38:60:e4:
77:c8:ef:ee:ed:cb:90:76:34:84:92:aa:5b:3a:ad:d4:78:06:
cd:b0:eb:f7:03:9a:8a:a7:97:fe:b1:ae:11:1c:9f:f7:3b:dc:
2a:dc:d1:53:24:22:c6:09:16:f9:18:b5:21:80:40:6d:02:0a:
a4:fe:f6:97:e4:db:0b:f7:38:d2:75:cf:c3:8f:db:02:d1:93:
a8:61:9c:71:c8:19:c2:52:f6:8f:a0:c7:13:f5:ff:34:1f:43:
9d:ab:f8:fa:aa:f5:30:2b:2a:b1:45:aa:8d:87:69:7b:67:5c:
7b:45:0a:55:54:1b:04:b3:62:89:a8:69:9b:e4:b9:4b:be:d6:
cb:81:08:2a:35:fe:70:4e:4e:50:12:6f:21:a1:b1:6f:0f:09:
2f:94:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org