Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16BF5BE86F511EF8DF2E68F762E951A.roa
File: D16BF5BE86F511EF8DF2E68F762E951A.roa (raw, json)
Hash identifier: YVNXQDAjPcZBxq6CosPRyk3c9DVhdlW9gTdcbY2eQE0=
Subject key identifier: 9B:FC:90:55:F5:98:03:89:82:AA:BD:8C:04:6A:5E:02:68:54:EB:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FCBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16BF5BE86F511EF8DF2E68F762E951A.roa
Signing time: Thu 10 Oct 2024 10:53:01 +0000
ROA not before: Thu 10 Oct 2024 10:52:58 +0000
ROA not after: Sat 11 Oct 2025 10:52:58 +0000
asID: 132139
IP address blocks: 154.200.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64700 (0xfcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 10:52:58 2024 GMT
Not After : Oct 11 10:52:58 2025 GMT
Subject: CN=6707b20d-5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:63:c3:2e:97:69:06:f0:42:0f:98:31:c2:
63:6e:dc:e9:66:96:b0:bd:b4:ab:a4:fb:63:ee:5c:
9e:36:ff:73:0c:b2:c8:90:9f:4e:d6:ec:67:45:1a:
09:75:44:63:80:66:84:19:58:64:89:9f:7a:da:d0:
9a:73:db:5f:be:2c:f0:6d:bb:b9:da:42:f1:74:3a:
4c:f0:dd:96:f5:65:7f:f5:88:05:40:f8:86:0c:ba:
20:24:c0:03:17:fb:e1:c7:b9:bc:c5:c8:29:1f:a1:
03:dd:3c:42:43:85:ab:ea:4a:30:43:34:20:4b:9e:
21:86:9f:af:7d:c5:cb:89:37:24:ac:c7:6f:39:34:
9f:3e:4a:aa:03:bc:e2:a9:a8:f4:15:dc:ff:ca:01:
76:5d:c3:ba:71:0e:90:fe:63:cf:f0:2d:7b:1c:40:
12:fe:97:6d:e3:04:94:41:86:8f:48:b9:a5:4c:fc:
e3:4d:20:20:f0:c9:8e:ed:bf:a5:a0:55:bc:03:7a:
0e:48:74:76:b6:88:d3:a9:2b:79:9f:e3:ba:dc:5c:
1a:2f:61:14:98:ad:db:b3:7f:1c:3d:eb:23:91:ea:
0f:03:a5:f6:0a:2c:5d:83:61:78:50:65:c9:d1:89:
68:3c:5b:b2:4e:dc:be:bb:b3:2c:4e:d1:6f:eb:ce:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:90:55:F5:98:03:89:82:AA:BD:8C:04:6A:5E:02:68:54:EB:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16BF5BE86F511EF8DF2E68F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8a:6b:c3:9c:b4:3e:f3:48:21:47:34:d5:a4:8f:d7:ba:81:
45:f8:cd:3d:41:d5:18:83:87:34:15:06:df:42:a3:98:ce:64:
5d:41:77:4b:8a:12:e0:2e:52:98:6c:82:b0:47:c7:e2:26:c7:
b6:fe:f9:49:81:0f:30:d4:4f:fe:eb:93:54:1c:29:33:87:4a:
31:60:bb:30:76:a4:57:ce:3d:e7:12:a0:17:f2:6d:5f:94:03:
6b:a9:69:f9:b2:e6:87:b1:03:f9:69:96:c6:c5:09:28:50:50:
ea:19:c0:b5:a6:64:f8:3d:38:b4:67:30:91:a6:a7:f6:63:f6:
13:aa:34:50:c3:b6:3f:e0:24:c2:ca:a0:d6:c7:6d:8c:f4:67:
57:98:1d:9c:2f:70:40:bc:50:9f:04:1d:0b:c5:14:8d:78:25:
73:93:22:b0:7e:fa:11:5d:47:44:39:77:6c:6b:d6:0b:0a:77:
9c:c9:15:94:c1:a3:19:46:d9:5b:36:ed:6a:21:a2:ce:14:c9:
c1:d1:34:3a:fb:6e:8d:5a:f2:84:db:ed:24:71:4f:e3:e9:5d:
79:7b:72:d9:42:c0:fa:3b:b1:69:0a:82:bf:c9:7e:9c:9f:db:
5d:fb:b8:a5:10:40:6b:04:62:69:35:fc:7c:53:c1:6a:44:6b:
b3:22:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:47 2024 by rpki-client on console-fra.rpki-client.org