Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0CBD4C985F11EF967C1866762E951A.roa
File: BF0CBD4C985F11EF967C1866762E951A.roa (raw, json)
Hash identifier: 9zAGNfHPrh/e27PYpyTPbO8oSejAlYuwPwFCj+d1SO8=
Subject key identifier: 03:C4:2B:6E:46:A7:25:00:97:87:1A:21:07:15:A4:8F:18:85:16:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0CBD4C985F11EF967C1866762E951A.roa
Signing time: Fri 01 Nov 2024 14:44:07 +0000
ROA not before: Fri 01 Nov 2024 14:43:58 +0000
ROA not after: Tue 03 Dec 2024 14:43:58 +0000
asID: 203020
IP address blocks: 154.207.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66785 (0x104e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:43:58 2024 GMT
Not After : Dec 3 14:43:58 2024 GMT
Subject: CN=6724e937-4d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:c3:99:d7:b0:d8:1f:2b:ed:fe:d6:6b:19:
99:d0:a7:ce:07:0c:f9:11:aa:59:2e:b2:60:df:a9:
1e:46:81:df:79:25:91:cf:61:0b:ac:20:af:58:41:
25:e0:c9:ad:74:35:a3:b3:d9:c7:69:91:99:4c:64:
fa:a7:7e:52:b3:1a:b2:c7:6b:3d:c6:3f:46:be:27:
3c:1e:d6:3b:3e:18:73:90:83:b8:d3:61:b5:ad:6f:
7b:b2:68:36:c0:56:ea:a6:0f:d6:0a:37:b6:d8:07:
3b:97:e4:f7:20:17:b6:8e:51:48:81:34:6c:1c:67:
5d:89:11:a2:e2:b4:f5:71:95:e5:b8:4a:87:67:90:
53:81:8a:3d:e3:a9:1c:37:b3:e2:51:b5:1f:e3:8a:
92:df:f6:91:6d:c7:92:57:88:60:7a:32:32:1f:e4:
92:59:a5:99:1d:74:26:0e:f1:56:5b:89:20:47:7c:
6e:b6:29:d8:ec:c7:6f:84:11:5f:c4:32:6c:f8:71:
e9:e2:2d:b3:a5:4f:48:e1:ca:c2:9d:5c:aa:f8:a5:
bd:fd:1a:ec:9f:47:38:51:1e:03:41:f5:5a:88:bf:
50:d8:79:ed:9f:2d:70:41:12:29:ae:57:55:18:2a:
19:5f:80:89:6b:34:4c:75:c1:8f:33:65:71:77:57:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:2B:6E:46:A7:25:00:97:87:1A:21:07:15:A4:8F:18:85:16:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0CBD4C985F11EF967C1866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.248.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e5:82:ee:f4:71:95:cb:68:a8:24:0d:3a:fa:72:2f:66:3e:
2a:46:64:a2:ab:31:7f:e5:73:fb:6d:1a:0b:f3:9b:94:76:dd:
31:2b:35:c0:93:5a:36:7d:20:04:18:e2:c0:43:58:69:2b:63:
0d:ae:73:b7:db:79:d5:a3:a1:a5:e3:9c:80:9a:83:1b:5e:06:
14:95:04:50:ee:fd:3f:fd:72:eb:cf:c5:08:8a:bd:ca:2d:d1:
60:9c:03:03:ba:e7:fd:5e:e2:b4:86:a5:54:ef:f0:dc:6d:1c:
97:0e:f6:b8:18:c6:f3:15:70:81:f2:d5:5b:ee:a0:87:5f:ba:
6b:5e:73:12:20:bd:af:bc:5d:1f:c3:8c:51:41:ad:18:57:68:
03:61:c7:2e:4a:18:85:b1:43:e3:75:1b:22:90:22:a7:81:99:
ae:4e:3b:67:bf:80:25:02:d5:00:b3:0d:9b:5a:07:e2:44:e4:
0b:9b:ae:e0:97:03:69:34:df:09:ee:88:2b:8b:18:0c:7f:f8:
ea:c5:77:4b:33:58:8b:ba:a1:53:22:47:92:43:b0:a8:ac:26:
50:2f:63:e8:ca:be:42:5b:36:ed:6a:4a:fe:31:59:82:6f:9b:
f9:56:0d:5b:be:a5:1c:3f:8d:9a:91:4c:c9:ee:de:7a:3e:d7:
0f:8b:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org