Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB201DAAB0FC11EE85B13659775412E6.roa
File: BB201DAAB0FC11EE85B13659775412E6.roa (raw, json)
Hash identifier: WgCMuW5Iq8myZX/TkfVyPK1kWZfon/u2d8EPfrri7X8=
Subject key identifier: AD:F1:04:AC:CE:BE:52:66:4F:68:1B:3D:A3:23:98:CF:AB:DC:BC:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 746F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB201DAAB0FC11EE85B13659775412E6.roa
Signing time: Fri 12 Jan 2024 03:43:21 +0000
ROA not before: Fri 12 Jan 2024 03:43:18 +0000
ROA not after: Fri 13 Dec 2024 03:43:18 +0000
asID: 140224
IP address blocks: 154.205.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29807 (0x746f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:43:18 2024 GMT
Not After : Dec 13 03:43:18 2024 GMT
Subject: CN=65a0b559-e105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:4d:4d:2f:4d:a5:08:fd:ac:3f:34:41:52:
85:28:b2:55:b5:69:a7:46:ff:e6:1b:49:df:52:ad:
8e:8b:ad:16:7c:27:f8:11:ca:d9:82:b6:fe:14:29:
b8:de:a1:66:20:7e:1a:1d:f3:4a:95:5f:57:44:0f:
c9:fe:fc:6c:e5:a1:68:a3:3f:d0:ec:35:4f:b3:00:
ee:2e:1d:19:94:6a:5a:8c:de:72:7f:85:db:bd:7c:
ee:25:f9:19:01:46:19:e2:df:f6:c5:84:35:6a:ad:
f8:41:a5:3c:d9:6e:40:35:f6:2a:ce:a6:e8:27:b9:
c6:96:7a:9d:48:e2:bb:1e:55:32:5f:0a:ab:45:98:
3d:5b:b8:8b:d5:c1:8c:6e:ea:03:c9:1c:62:25:54:
5c:72:0b:58:ea:88:2a:00:ee:e9:00:d6:54:df:f5:
ad:e4:e6:5c:47:d9:81:0a:a6:7e:38:da:1c:a3:2d:
51:7e:e1:51:4a:3e:ca:54:f6:58:c8:01:40:fc:75:
c4:06:7f:d5:1c:59:81:69:fb:68:55:5a:95:b6:f6:
fd:0c:b0:d9:99:8b:44:9d:5a:1b:3c:4c:97:df:8c:
9d:d2:b6:53:b5:2e:24:f6:c9:8f:08:11:f6:1d:f7:
48:c1:72:a4:95:02:bd:05:0b:3d:c2:72:47:4e:4b:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:04:AC:CE:BE:52:66:4F:68:1B:3D:A3:23:98:CF:AB:DC:BC:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB201DAAB0FC11EE85B13659775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e1:7e:e5:24:8c:0a:3c:b3:51:74:e0:a9:a4:cf:cf:50:1d:
bb:b2:8e:54:e6:50:d3:a9:b9:66:6f:e4:e5:bd:8f:c2:5b:b6:
a6:b6:56:8b:64:73:d0:93:f6:ce:e3:19:b8:58:29:fa:e9:a9:
de:a7:c8:24:e5:a9:bb:bf:89:a2:a4:25:e1:ad:f5:68:54:cf:
cf:03:5b:d8:e9:5a:eb:51:75:07:97:ef:59:52:b4:64:b9:96:
06:dc:5b:3e:08:3f:81:5f:25:9f:19:5f:7e:6c:35:e2:9f:f3:
e3:5a:4e:df:82:e4:b6:ae:20:41:8c:df:a5:5d:47:48:58:be:
c8:af:3e:d5:9a:00:77:d7:3d:47:6a:db:37:f8:0d:9f:61:7c:
d9:e7:d7:7c:58:e0:e9:38:ab:27:81:bd:bd:15:1b:58:c5:99:
76:9f:00:04:9e:c3:15:18:b3:19:6e:2c:2f:0b:cc:74:db:b8:
b8:cc:a7:90:b7:d6:fc:e2:c6:19:98:11:e6:62:ef:ad:8a:60:
c3:86:38:4a:2a:70:93:b3:56:35:48:9a:bd:bc:5f:9e:ad:c0:
04:71:96:dd:2a:11:50:91:7c:d7:36:a3:5a:53:18:48:29:a0:
30:31:ef:b3:7b:c9:bd:39:18:f2:94:cb:2d:c7:de:57:62:32:
df:e6:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org