Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79BDCE8D3611EF85925A92762E951A.roa
File: BD79BDCE8D3611EF85925A92762E951A.roa (raw, json)
Hash identifier: OnsLT6sPDUcI9Ut/DBfHYcpnfrww8yZLg0Tb+rRoa8Y=
Subject key identifier: D3:8E:4D:1D:39:41:77:CB:88:67:6C:B3:3B:E7:11:2D:91:1C:B2:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79BDCE8D3611EF85925A92762E951A.roa
Signing time: Fri 18 Oct 2024 09:52:52 +0000
ROA not before: Fri 18 Oct 2024 09:52:48 +0000
ROA not after: Sat 04 Jan 2025 09:52:48 +0000
asID: 142062
IP address blocks: 154.206.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65485 (0xffcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 09:52:48 2024 GMT
Not After : Jan 4 09:52:48 2025 GMT
Subject: CN=67122ff4-0ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:61:04:1b:cb:2e:05:84:2f:01:19:ce:74:
d5:41:d0:25:f1:f3:ca:06:95:e7:71:2b:2f:24:4e:
63:51:a4:e9:77:14:9c:01:23:79:89:15:b2:9a:b4:
62:9e:48:86:77:87:29:d0:51:4a:74:89:69:9e:0a:
c1:19:d4:04:e5:14:66:81:1a:a5:fa:87:6f:63:84:
1e:02:49:26:6a:db:67:5d:a3:0f:91:95:93:58:0a:
26:e7:02:df:60:4b:ff:3f:4b:66:02:28:dd:f5:7f:
6a:23:44:93:ab:fa:b6:ac:13:53:e6:60:90:41:04:
96:a2:26:3b:ef:3d:9e:a0:e1:4b:38:19:7e:e0:36:
67:ef:00:6d:c4:76:99:82:34:16:f9:c0:a5:3a:7c:
7f:cc:ee:b2:a4:cf:26:e0:b7:5c:7a:dd:08:46:fa:
03:26:b5:5e:be:5b:06:a8:34:43:c1:48:52:c6:dd:
26:66:2d:be:99:00:76:dc:dc:94:54:36:4b:a9:3a:
29:1c:f6:d9:77:f7:ec:b3:0c:c4:81:d5:9c:07:fd:
94:3b:89:09:51:28:e0:34:42:f4:0e:d4:09:9d:53:
d5:bb:30:bb:30:68:6c:47:23:89:ab:82:c3:84:6c:
53:d5:11:c7:ca:4d:89:47:15:fe:9c:04:f5:74:f2:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:4D:1D:39:41:77:CB:88:67:6C:B3:3B:E7:11:2D:91:1C:B2:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79BDCE8D3611EF85925A92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:7e:30:92:d2:7e:03:85:e5:76:f0:46:46:ae:b9:eb:ca:8d:
21:c2:59:af:c4:7d:f9:d7:d6:68:42:43:59:53:27:8f:20:ba:
9e:2a:12:1c:71:f3:bb:18:5c:0c:00:2a:b2:d3:93:a5:db:26:
a6:00:f7:d9:1f:77:ce:79:3a:d2:6e:5a:c8:a3:10:6f:d7:02:
21:d7:49:69:4c:33:8d:3b:ab:d6:59:81:b6:2b:4d:9a:bc:35:
4e:e9:9b:e0:b5:1d:fb:8d:46:27:74:00:ff:10:5f:70:ba:00:
3c:e8:44:c3:a5:bc:66:b8:2f:00:e9:a1:ba:e7:88:20:09:d1:
5f:54:de:29:0c:97:d1:f2:36:a4:c3:01:97:43:b0:39:17:91:
11:94:0d:d2:f1:2e:a5:6f:f1:70:c2:68:c1:51:bd:e1:b7:45:
05:17:d0:48:48:7e:af:e2:f3:a8:6c:2f:8c:13:25:40:6b:0e:
95:90:5c:00:d6:f9:69:7c:ce:d9:9c:bd:b3:f8:3c:30:13:54:
f2:ff:90:ac:77:cd:8d:63:47:fe:ba:d7:2d:84:2d:c9:32:9d:
86:82:14:43:28:2d:ad:e4:e5:87:09:fe:6b:d4:a2:ed:f9:ef:
3e:bc:25:da:93:94:02:fa:f6:61:f6:5e:7e:66:0e:43:0a:ce:
31:90:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:25 2024 by rpki-client on console-ams.rpki-client.org