Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAB7A484A5011EFAAAE8AA5762E951A.roa
File: BFAB7A484A5011EFAAAE8AA5762E951A.roa (raw, json)
Hash identifier: VXkGNDehNgNzsXPplDGs8W3R7meMhSYO9DkVZVLn0os=
Subject key identifier: EC:BA:10:2D:F5:93:4E:71:62:47:F5:6D:B4:AD:4E:63:98:3E:76:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D692
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAB7A484A5011EFAAAE8AA5762E951A.roa
Signing time: Thu 25 Jul 2024 06:40:15 +0000
ROA not before: Thu 25 Jul 2024 06:40:11 +0000
ROA not after: Sun 23 Feb 2025 06:40:11 +0000
asID: 152920
IP address blocks: 154.208.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 07:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54930 (0xd692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 06:40:11 2024 GMT
Not After : Feb 23 06:40:11 2025 GMT
Subject: CN=66a1f34e-d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:ec:a6:8c:5b:2f:66:59:44:13:60:52:98:
2b:d7:70:3c:42:bd:81:e1:73:65:c0:29:8e:01:a1:
8e:b0:76:46:a7:f1:15:e6:96:1b:07:dd:45:6a:fe:
be:69:8a:2b:6b:d6:ee:b0:a9:24:8e:27:a7:e5:6f:
b9:29:b5:cb:16:76:cb:70:2b:5d:cc:2b:15:14:28:
15:ca:16:f9:89:ab:f1:1e:ae:f8:18:9c:0d:d3:33:
a7:85:d7:9b:60:5e:4d:d3:b5:45:3f:da:ab:42:77:
44:0c:44:79:e5:04:6b:7c:e2:5f:95:69:cc:82:ae:
c8:04:8d:dd:94:ed:ae:63:40:83:da:25:e7:ce:88:
f0:dd:c3:a8:99:ed:88:9d:4c:55:53:df:70:2e:fd:
c5:db:15:cb:89:94:91:bb:d7:1f:56:6d:1f:93:a7:
68:f3:5d:34:75:20:0a:af:cf:24:38:39:d7:6c:fa:
f3:f5:cd:e5:6f:fb:1f:2c:43:5c:ba:25:ea:96:06:
3b:fe:4d:95:b0:4f:4a:29:6a:65:25:f1:44:5f:04:
5c:fe:5e:f3:a9:39:0e:40:39:84:8d:13:09:eb:26:
0d:73:cf:d2:9d:a3:1f:c2:4e:f8:69:c9:6d:90:aa:
5a:e4:b0:84:05:06:80:5b:cb:1d:72:33:f6:b3:ba:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:10:2D:F5:93:4E:71:62:47:F5:6D:B4:AD:4E:63:98:3E:76:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAB7A484A5011EFAAAE8AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.174.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:5d:d9:03:ec:df:f6:6b:13:c9:be:52:d7:fa:ba:ed:9f:
25:bd:21:3e:6c:64:7c:0c:7e:68:39:a8:56:64:c8:c6:94:5f:
a2:f7:3b:74:a1:02:82:e7:5d:85:b6:c9:82:ba:82:c4:5c:b1:
75:80:2b:16:20:de:84:e4:30:2a:c0:45:56:fa:b1:cc:2b:c0:
df:aa:34:82:5b:ba:71:bf:a6:51:8f:ed:c9:ff:14:46:83:2f:
d5:69:9f:e9:2c:41:ad:39:7f:23:8a:12:1e:b0:a2:34:27:78:
92:17:81:0b:3a:48:ce:98:fc:6c:4b:d0:1c:db:8a:23:8b:f2:
a6:80:19:da:c2:14:35:e2:b9:22:55:0f:9c:36:c5:f2:83:05:
81:0a:81:29:68:7b:dc:30:d1:30:dc:ec:79:1e:d7:5d:df:06:
77:01:0b:cd:dc:b1:f7:1e:c2:90:06:29:41:3c:13:07:61:11:
b5:c8:fc:60:70:ba:e2:11:ac:ca:fe:92:88:d6:6c:91:2f:8b:
42:55:7d:c6:e3:cb:f2:a3:f8:2a:b3:00:01:82:aa:6d:f9:7a:
e3:66:3c:e5:cd:c8:66:a1:f5:69:f7:f0:0b:41:21:f9:a4:d7:
89:79:de:b5:95:be:51:21:76:18:10:c2:56:65:a5:9f:b9:05:
0e:09:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 10:24:10 2024 by rpki-client on console-ams.rpki-client.org