Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7064E4A8DC11EF97868961762E951A.roa
File: BB7064E4A8DC11EF97868961762E951A.roa (raw, json)
Hash identifier: 5kcKuVkD4XjPSi9qxzciAx4Bz4r5emqcF6RjGqWgKzA=
Subject key identifier: E7:00:4E:3D:67:0C:58:3D:D1:47:00:54:BA:A2:92:DD:04:21:CF:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01105F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7064E4A8DC11EF97868961762E951A.roa
Signing time: Fri 22 Nov 2024 14:19:06 +0000
ROA not before: Fri 22 Nov 2024 14:19:03 +0000
ROA not after: Mon 09 Dec 2024 14:19:03 +0000
asID: 5065
IP address blocks: 154.206.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69727 (0x1105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:19:03 2024 GMT
Not After : Dec 9 14:19:03 2024 GMT
Subject: CN=674092da-b449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:fc:48:34:29:81:e6:7c:5a:2d:09:63:f1:
1d:47:dc:51:bf:ed:07:f2:66:e5:09:b9:9f:c5:1e:
91:fb:c2:ac:c3:f4:05:56:a6:44:5c:40:84:d7:a0:
06:6b:ad:2c:71:3b:b4:f2:b9:0e:f4:2c:a4:5e:1f:
ac:5c:49:ad:97:66:8f:06:cf:9c:51:69:18:aa:a7:
97:e1:3d:cc:0e:02:bd:b6:29:a2:a4:6d:63:63:44:
92:48:68:5a:96:bf:35:32:e4:e2:dc:c5:24:91:79:
e5:b4:5b:3f:d5:08:e4:3c:df:26:a9:a9:e9:85:97:
80:96:dc:d6:b9:70:fd:4e:0a:9f:1f:2b:50:2f:76:
ee:bd:a4:e2:fb:d6:71:02:4a:86:38:e3:f0:59:54:
a8:07:9e:d5:7d:75:bc:08:37:1d:60:0a:d7:75:74:
49:5e:35:02:72:60:a1:99:07:1b:64:df:1e:68:1a:
a6:6a:6f:e4:15:b7:4e:64:b2:26:24:73:7d:93:18:
83:01:c0:33:0b:ae:33:54:3d:52:15:1b:f5:45:a2:
22:df:23:5e:5c:dd:1b:5f:49:01:52:e1:10:2b:0a:
5f:b4:8e:d5:45:20:d3:f5:92:91:94:30:15:8e:8f:
e3:2d:ff:d3:f7:e0:5e:86:9a:f2:c0:76:57:e2:65:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:4E:3D:67:0C:58:3D:D1:47:00:54:BA:A2:92:DD:04:21:CF:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7064E4A8DC11EF97868961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.39.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a3:62:1d:75:31:58:2e:ed:eb:c2:84:25:ef:bc:6d:b0:61:
3c:3f:83:33:cf:da:44:27:8f:cb:f4:51:d6:42:42:0b:6e:4f:
bd:4f:ee:d4:d2:60:da:86:99:90:8b:b6:34:06:01:e3:7a:f4:
04:53:a8:99:40:1d:13:b0:e8:fb:29:25:79:06:5c:99:fe:4b:
d6:23:6e:f5:75:58:91:ef:a3:0a:98:05:bc:0f:1d:14:9b:6d:
75:42:6c:97:5b:b7:c4:93:42:41:59:b5:51:32:f8:c7:89:66:
5a:02:cb:2e:49:ec:83:5a:01:6d:18:e2:77:ac:7c:09:19:d7:
56:36:d0:d7:28:c6:4c:3f:c9:93:fa:1a:f9:ed:17:4c:8c:c3:
ef:f8:85:33:33:23:64:2c:48:0a:a6:ad:98:75:c5:96:36:4f:
37:61:18:81:ed:96:69:a6:a7:df:20:74:62:92:2e:3b:e4:d8:
99:6e:11:f4:eb:af:75:15:97:41:56:5b:37:34:d9:60:e6:ce:
0b:24:fe:3b:ef:4f:81:66:2c:c0:17:ca:eb:4b:e5:95:fb:bf:
2f:57:27:ac:bc:0c:17:28:22:cf:ce:fe:4c:87:bc:c5:67:fb:
e5:8c:0e:b3:69:b7:17:e6:dc:54:a3:cd:50:a9:b2:11:50:cd:
51:c6:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:44 2024 by rpki-client on console-fra.rpki-client.org