Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE2449A8E2311EFBB226A65762E951A.roa
File: BEE2449A8E2311EFBB226A65762E951A.roa (raw, json)
Hash identifier: dtKfM7EKl5yFbIqkhaaWokvPafKVgsa2F178U+RLHjM=
Subject key identifier: F8:EB:4D:1E:8D:43:82:69:7F:6A:AE:E1:CF:37:27:9A:70:B6:87:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010006
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE2449A8E2311EFBB226A65762E951A.roa
Signing time: Sat 19 Oct 2024 14:09:25 +0000
ROA not before: Sat 19 Oct 2024 14:09:21 +0000
ROA not after: Sun 12 Jan 2025 14:09:21 +0000
asID: 328608
IP address blocks: 154.201.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65542 (0x10006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 19 14:09:21 2024 GMT
Not After : Jan 12 14:09:21 2025 GMT
Subject: CN=6713bd95-591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:27:fb:d4:ba:25:62:7b:56:ff:f2:42:7c:
dc:69:63:c8:98:f1:79:02:3d:fe:80:4c:a1:01:33:
24:38:3d:b4:9c:dd:99:c6:81:22:e3:71:cc:c5:0e:
4a:53:a5:ff:54:38:ab:e5:f7:46:f0:68:13:7f:8e:
2e:d4:da:1f:58:61:7d:07:d0:a3:76:cd:a4:2f:14:
ca:bc:a5:26:c5:ae:9a:05:71:56:16:6f:54:71:56:
cd:f9:8b:35:ca:c6:89:66:e5:82:e1:53:8d:06:18:
71:42:b5:6e:b0:93:85:31:8d:3c:1d:4e:4e:a1:f0:
fb:ee:6e:41:0f:25:32:94:cc:c1:54:89:71:db:d9:
1c:0d:d5:a9:64:6a:fe:4f:05:a2:7e:92:c3:ad:e1:
4f:6b:f5:35:ac:9f:e8:85:fa:db:3e:ec:7f:56:38:
a0:2a:e9:9c:3b:f3:e2:66:d4:b5:51:aa:e6:7d:2e:
90:3e:ec:b5:42:60:fa:88:a9:aa:9a:98:0f:52:c3:
d0:3f:91:de:53:d7:a6:76:88:2a:2c:8f:df:ea:9e:
c8:eb:2f:36:0f:d6:6e:1e:31:9d:4d:19:76:1f:2b:
f1:43:5f:67:ea:4e:ed:95:97:65:b6:bb:a9:44:e3:
87:a9:59:0b:7e:56:e3:fe:32:d8:db:7b:22:ec:60:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:4D:1E:8D:43:82:69:7F:6A:AE:E1:CF:37:27:9A:70:B6:87:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE2449A8E2311EFBB226A65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:28:af:a2:0a:41:20:fc:f7:60:de:9f:04:80:61:77:1b:ec:
0a:88:88:17:a8:c3:6a:94:8f:36:67:8c:2b:f9:97:31:5a:5e:
4f:3f:0c:c1:16:1f:0d:a8:e8:48:88:bd:a6:57:03:8e:ae:20:
19:d0:b7:10:55:42:ba:4d:6b:93:b3:81:9c:88:8f:a7:84:ae:
9e:c5:29:1f:6c:38:fd:31:b4:8b:8d:49:f3:1a:f8:58:70:63:
65:2e:7a:38:d4:e9:34:29:d8:24:c5:f9:5c:90:bb:c1:12:1b:
9b:f4:f3:60:69:39:f1:7d:d2:dd:75:86:da:57:44:a0:b8:29:
26:6f:b4:63:aa:67:b7:06:65:e0:e0:68:ea:70:ab:c6:9a:44:
58:2a:0a:1b:24:4f:21:ec:79:13:75:28:33:c1:e1:5b:34:f5:
53:39:85:8b:58:22:fa:77:8e:8f:e5:22:7c:f2:ac:43:3b:10:
13:d9:8b:1d:3b:55:50:0e:71:87:7a:e8:8f:be:1c:df:e4:cc:
e9:86:49:20:5d:63:83:04:c7:68:fa:32:86:a6:96:32:4d:16:
73:41:8f:5c:5d:2c:2f:c8:9c:9d:9b:1d:27:57:61:1a:2e:c3:
11:a4:e7:33:8c:2a:26:c0:22:c9:4f:a9:cd:4f:83:83:30:d7:
8e:06:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org