Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87FF000A32311EFB38D6D72762E951A.roa
File: C87FF000A32311EFB38D6D72762E951A.roa (raw, json)
Hash identifier: vrshF01GAljHQ/ctum+gc89MJvzehg/KMQnfZ6QCtdM=
Subject key identifier: 9D:B2:FC:A8:36:C2:A2:8E:4F:D1:EF:C1:5F:16:03:24:7D:86:26:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87FF000A32311EFB38D6D72762E951A.roa
Signing time: Fri 15 Nov 2024 07:32:35 +0000
ROA not before: Fri 15 Nov 2024 07:32:32 +0000
ROA not after: Thu 12 Dec 2024 07:32:32 +0000
asID: 394432
IP address blocks: 154.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68918 (0x10d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 07:32:32 2024 GMT
Not After : Dec 12 07:32:32 2024 GMT
Subject: CN=6736f913-6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:8a:78:ed:ba:c6:88:91:f1:1f:da:2c:37:
8f:44:8f:b7:85:8b:44:95:69:9e:c9:4d:5c:64:23:
b3:c8:38:c7:2b:37:d4:d9:0a:8f:ea:e6:2d:a2:55:
0b:71:b5:fc:8f:87:44:3c:bd:24:11:c9:de:ed:99:
21:c3:7f:d2:6d:30:cc:83:63:57:ab:b0:1c:c9:e5:
74:a9:d2:37:94:8f:87:fc:43:f2:86:5c:b2:70:b7:
73:65:6f:55:f4:6f:eb:b4:65:d0:41:e2:75:78:e5:
da:b3:ac:a1:f0:02:81:2f:7b:94:1e:c1:b0:13:07:
27:ad:20:ef:a7:62:39:8f:c7:86:5b:59:f2:df:ba:
fe:1c:93:06:ee:03:5e:22:76:d9:19:73:bb:3a:32:
0d:3e:30:01:b3:1f:a3:22:22:f2:11:f9:78:58:89:
42:e1:82:3d:58:6d:c0:e5:d4:d9:db:8f:01:c8:c4:
05:1f:4b:eb:43:11:e5:b9:a4:25:86:b2:c5:ba:0f:
80:9e:6b:ad:6f:9d:97:7a:c5:3b:9d:e6:5c:ae:8e:
c5:e3:d0:6d:9e:21:25:c3:fc:15:27:d5:10:36:a5:
a5:17:ed:10:33:f0:10:6a:22:08:81:33:86:5b:20:
fb:e0:ce:76:68:1b:1b:48:2f:70:2c:61:e4:76:f9:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:FC:A8:36:C2:A2:8E:4F:D1:EF:C1:5F:16:03:24:7D:86:26:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87FF000A32311EFB38D6D72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:f5:65:d8:f5:f7:57:fe:e6:b2:3f:39:aa:5b:a9:4d:3d:53:
49:d3:0d:ac:e7:d9:76:86:9c:80:2e:4f:7d:7c:52:a0:56:34:
ec:25:af:06:79:78:10:b9:31:8b:7c:a7:04:7a:09:83:c2:d0:
7d:61:86:c8:06:9f:89:8e:71:57:64:40:48:15:da:0d:c7:21:
0d:ba:37:72:16:1c:a7:6a:de:c9:a1:24:ad:12:6e:3b:69:10:
5e:2f:ff:e1:e5:3b:d7:4f:c9:a8:e9:b5:44:03:d1:ed:e2:b1:
96:02:ca:2a:05:85:a5:55:35:38:3f:99:fc:f0:5f:d4:35:1e:
1e:22:1a:38:b2:11:22:ce:04:0b:fe:dd:d9:6a:bd:77:7c:fc:
04:5e:89:01:f1:07:31:48:bc:f6:31:e7:67:d5:ba:af:81:00:
71:bf:cb:7a:2d:bb:75:06:35:6e:d3:31:3b:8e:41:76:c8:f6:
1d:d1:a0:8c:f1:d6:22:a8:89:d2:a2:d6:9a:50:3c:a1:af:a6:
a7:49:47:96:7d:ab:28:8b:f8:c3:0a:c0:3e:a3:6b:54:b9:77:
6a:78:05:90:d4:83:db:df:21:1e:9f:ad:21:a1:0d:64:42:77:
9e:9e:c0:10:69:34:e5:d0:db:3c:ea:09:df:68:98:5b:94:f3:
e6:90:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:00:21 2024 by rpki-client on console-fra.rpki-client.org