Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D015148A7B1E11EF84C1B48F762E951A.roa
File: D015148A7B1E11EF84C1B48F762E951A.roa (raw, json)
Hash identifier: qfJIddDMrYmA4zlugkPAd39qm6t0JryAtJB5jD6K+ZI=
Subject key identifier: F5:2D:6B:F4:F5:AD:1C:5C:3E:05:63:D2:02:93:C3:F6:92:BC:4F:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F332
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D015148A7B1E11EF84C1B48F762E951A.roa
Signing time: Wed 25 Sep 2024 09:16:14 +0000
ROA not before: Wed 25 Sep 2024 09:16:11 +0000
ROA not after: Wed 18 Dec 2024 09:16:11 +0000
asID: 47890
IP address blocks: 154.214.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62258 (0xf332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:16:11 2024 GMT
Not After : Dec 18 09:16:11 2024 GMT
Subject: CN=66f3d4de-6f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:0e:4f:45:1f:5e:c9:a8:8d:dc:c2:cf:55:
77:2d:0b:47:75:2d:e7:b2:a0:46:ad:40:66:62:7a:
b6:49:2f:b3:83:7e:58:e6:35:8a:59:0e:e6:d2:6c:
19:09:f2:83:6f:8e:a3:1f:2a:f1:78:09:8d:30:1d:
1c:e9:ca:01:0d:06:51:23:e2:55:57:16:09:b1:a6:
92:ee:c8:a9:e5:50:5b:51:af:3f:e0:2e:a4:78:6d:
99:db:49:f3:b3:22:d3:34:c9:6e:15:c2:ed:04:82:
f5:2b:93:d1:7d:34:da:2e:93:43:71:aa:84:b0:f4:
d3:a7:a3:3c:30:16:58:a5:c8:be:1b:a2:ce:b8:ed:
fd:8a:a5:52:17:79:22:e1:a3:36:49:f0:6e:e8:5a:
c3:ad:1a:2f:66:e8:c0:ef:7a:9f:a5:a5:c1:03:c7:
f9:21:36:9d:fd:db:8d:11:d0:d1:cf:26:0b:8b:24:
4d:f4:07:73:bb:5c:b6:b0:ad:22:27:b7:80:91:3f:
84:a2:51:d0:90:74:2f:95:fa:71:d0:c2:e7:fa:4c:
4a:4e:37:06:ce:04:7e:08:9f:a7:63:9e:f2:fd:55:
b0:8e:83:c3:21:2d:19:80:f8:81:e1:98:cc:38:7b:
2e:3d:36:ae:e9:1b:fa:76:d3:b9:90:94:1e:b6:b1:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:6B:F4:F5:AD:1C:5C:3E:05:63:D2:02:93:C3:F6:92:BC:4F:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D015148A7B1E11EF84C1B48F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e7:e2:a9:f0:f4:6d:8d:4c:55:56:58:10:bf:88:86:e5:31:
d7:09:10:6c:be:97:55:b5:66:fc:c1:55:0a:8e:a1:93:7f:8a:
c0:fb:42:6f:f1:02:8d:4f:5d:0b:e4:6f:1b:77:a2:b9:38:de:
d6:5d:cf:26:e9:48:76:62:3d:0e:08:d5:49:47:72:9a:f8:e5:
fb:35:bf:8d:f6:56:78:b3:97:fa:fe:dd:a2:95:c2:03:46:b9:
02:6a:d5:c1:e0:54:48:06:da:c6:f7:32:70:e7:2f:0d:91:e0:
2b:00:b7:4d:c9:e6:c8:08:d9:da:18:04:f7:d3:c7:5b:62:54:
01:04:73:de:fd:ed:01:55:15:f3:9d:fe:f1:1e:c3:2a:40:75:
8a:c6:e0:7d:b8:e5:fe:77:a8:38:cf:a2:31:74:e6:fd:b4:1f:
2f:28:d6:56:98:dc:73:2d:8f:e7:2a:d0:62:be:ff:e3:83:94:
cc:84:35:3e:11:24:9b:0b:ed:9a:5e:25:18:da:39:7b:8e:35:
47:6b:2a:ea:2e:f4:74:57:13:eb:4a:fa:97:b9:e8:38:dd:39:
17:29:03:2f:84:27:82:6c:ff:3b:3b:d6:9d:71:21:44:72:85:
3e:19:c8:70:68:6a:b3:2f:db:12:18:31:65:ae:3c:bc:d0:74:
28:a7:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:22:12 2024 by rpki-client on console-ams.rpki-client.org