Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDDCCD587A4611EFA84C9EBC762E951A.roa
File: CDDCCD587A4611EFA84C9EBC762E951A.roa (raw, json)
Hash identifier: UEwI0uGZHQGBAx7ivoAjxKBdjhVKspiMJzspU2bzgxw=
Subject key identifier: 40:3A:62:A7:70:CB:E1:43:6A:FF:D8:98:51:DD:A8:47:38:64:F6:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F2C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDDCCD587A4611EFA84C9EBC762E951A.roa
Signing time: Tue 24 Sep 2024 07:29:59 +0000
ROA not before: Tue 24 Sep 2024 07:29:56 +0000
ROA not after: Sat 27 Sep 2025 07:29:56 +0000
asID: 142629
IP address blocks: 154.82.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62147 (0xf2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 07:29:56 2024 GMT
Not After : Sep 27 07:29:56 2025 GMT
Subject: CN=66f26a77-2084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:ef:52:b6:e1:c5:fa:b3:69:27:4c:08:b9:
14:e3:c4:20:66:e6:81:f1:0d:e7:3b:a3:1b:2a:a7:
8d:6a:03:3e:62:47:39:b7:ce:f0:19:1f:85:32:91:
89:db:40:d6:26:5d:70:98:5d:62:a6:c5:1e:83:bb:
bf:31:98:42:7a:49:a1:20:42:8a:b0:11:2d:d8:17:
c3:80:2b:9f:10:81:d1:8f:0b:b3:ba:6b:5e:d4:d4:
20:ea:64:65:19:b0:f8:8a:1e:e4:d8:b0:8d:7a:ff:
82:a0:b7:36:07:1b:b6:9d:9e:a2:60:f0:c8:60:32:
7b:ed:95:2d:10:25:7a:ed:3e:80:41:c3:1c:23:5b:
73:6e:a6:86:15:94:d9:a4:b8:35:56:7b:02:c8:ef:
ec:cd:b0:6a:6b:5d:49:9c:bd:0c:ac:04:02:a4:d4:
a9:12:5c:d4:44:33:3b:07:d0:e5:0f:2c:3b:e4:88:
67:ac:18:dd:28:13:49:30:48:73:80:52:c3:ba:9f:
b2:b8:d8:92:a1:0f:01:5d:35:2d:dc:fa:d1:1d:a3:
5c:cf:6d:89:e8:4e:2a:91:3b:64:51:16:e5:82:3b:
4c:23:e1:27:8c:77:17:b0:af:2d:31:27:0b:80:c7:
1b:f9:69:e9:76:a0:e9:7d:e2:8a:21:25:a0:08:6c:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:62:A7:70:CB:E1:43:6A:FF:D8:98:51:DD:A8:47:38:64:F6:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDDCCD587A4611EFA84C9EBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.152.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e6:d0:63:92:4c:37:99:53:98:99:ff:fa:ae:bb:0a:cf:e5:
e2:1d:0d:f0:f6:3a:56:e7:78:4a:da:95:ca:8a:23:6d:55:84:
eb:17:ee:bc:8d:c6:89:ba:6b:50:9c:0a:f5:ba:98:7b:db:14:
46:d5:5a:72:20:24:3a:60:b7:97:7c:79:5e:8a:63:28:ae:72:
32:35:26:ce:9b:6e:14:59:96:ed:05:e4:88:53:c5:b0:d9:aa:
6f:03:3c:d7:17:e4:ce:24:2d:97:59:71:fa:fd:6a:70:34:c3:
9e:c1:f0:c9:60:d3:78:b0:09:5b:66:d2:47:14:d9:6e:a1:7d:
65:7e:ff:84:16:40:bd:02:3f:1e:f5:20:c3:0b:a6:5f:06:c3:
61:05:1a:02:01:fe:55:d0:3d:17:1d:41:9f:75:e8:0d:b4:c9:
8b:8d:04:e6:5a:c1:b8:81:2a:ec:f1:11:9f:64:1b:08:75:10:
cb:5a:6e:51:96:e0:70:7b:08:51:5b:88:0f:63:98:1d:14:75:
20:dd:08:01:21:59:e2:e1:7f:b9:f8:0b:4e:24:0c:48:10:50:
92:a7:04:8c:4e:9b:8b:71:2d:4e:0e:77:24:38:d0:83:92:23:
6a:bd:f4:37:0e:31:fb:0c:b1:70:f1:9c:fc:63:d6:a9:07:35:
d3:0e:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:47 2024 by rpki-client on console-fra.rpki-client.org