Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47A82F68B9711EF9127DE5B762E951A.roa
File: D47A82F68B9711EF9127DE5B762E951A.roa (raw, json)
Hash identifier: qAF3IwUz393d+/7CHJbpsJJIiOJxCu0JbsPa4fntTwI=
Subject key identifier: CD:C1:F7:42:47:31:84:7C:BD:04:68:CE:60:50:DA:CF:C1:9A:82:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47A82F68B9711EF9127DE5B762E951A.roa
Signing time: Wed 16 Oct 2024 08:22:49 +0000
ROA not before: Wed 16 Oct 2024 08:22:46 +0000
ROA not after: Thu 21 Nov 2024 08:22:46 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65175 (0xfe97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 08:22:46 2024 GMT
Not After : Nov 21 08:22:46 2024 GMT
Subject: CN=670f77d9-cf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:c2:e9:91:dd:55:4c:45:0c:18:70:a6:de:
09:89:4d:f6:7f:9c:f8:96:99:c7:2b:73:08:1f:dd:
f5:90:4a:d2:41:94:c2:75:75:ad:42:2d:58:1c:b7:
28:49:29:a8:59:3c:03:5b:c2:f4:c9:27:cc:ff:32:
41:0c:6c:73:e3:ea:d1:82:96:6f:3d:25:48:c4:1d:
d4:5f:76:a0:0f:0b:2a:85:4e:c5:13:e3:ac:3a:6e:
f9:3f:4e:22:4c:a4:02:5e:b6:43:8a:24:ab:4d:a7:
1d:8f:5d:06:f5:8b:5d:da:2a:1d:64:88:98:b7:0e:
10:2e:f6:c4:98:a1:c6:6d:c3:0f:8a:fe:95:f8:7d:
2f:50:28:d9:c7:62:31:44:4e:94:35:18:97:e2:cd:
11:42:73:b9:f2:3b:c2:fd:6e:4c:6d:57:c4:72:eb:
b9:52:53:69:0d:32:a2:ef:23:e0:5f:34:08:f4:b1:
39:00:64:d7:55:bd:e3:f8:a4:09:df:e6:f1:8a:82:
c8:50:64:9c:9a:9b:f5:e7:b2:c1:42:32:f3:20:58:
c8:92:a1:cc:68:dc:6f:ab:15:43:ab:5f:6a:53:a3:
7c:6d:d5:86:cb:25:52:4f:d5:0f:00:5b:1a:fc:54:
12:ef:24:d2:30:2d:52:4f:5b:63:84:f3:83:05:bb:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:F7:42:47:31:84:7C:BD:04:68:CE:60:50:DA:CF:C1:9A:82:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47A82F68B9711EF9127DE5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:07:ed:4b:0c:2d:03:35:d6:f3:88:0c:75:2d:6e:35:8f:f6:
1b:c3:93:c0:a8:a8:b3:ed:a7:96:40:18:5d:7f:ab:8e:ce:9f:
2a:54:19:71:c6:f0:18:d5:6e:47:3f:5c:e3:6e:85:69:14:63:
d2:be:5a:04:eb:ae:a9:01:af:a1:f8:41:13:fb:92:97:a0:89:
ae:60:07:ad:15:38:f3:a3:9d:3a:8b:2e:5b:d5:c1:2f:b9:c3:
86:be:6b:06:8f:eb:f6:72:05:6b:41:69:18:a0:ea:da:ec:5b:
88:68:0e:ab:21:0f:46:23:95:11:81:c8:5e:ba:e5:85:39:f7:
09:ab:13:96:75:64:03:cc:75:70:63:fc:5c:09:d8:16:97:ac:
06:40:ae:73:60:72:00:38:c5:79:64:b2:1e:53:4e:66:f5:47:
90:2d:c3:ad:c5:15:50:e2:d1:c7:76:c9:fa:cc:e6:e6:8b:c1:
6b:3f:af:25:4e:6f:b3:34:fb:d1:7f:cb:cc:79:df:d9:74:3d:
fc:5f:1b:8a:46:2d:c1:41:d4:3f:bf:bd:71:26:36:92:5f:4a:
bf:81:9b:bd:dc:b9:63:d1:32:72:b1:04:ed:07:ff:ec:89:8d:
c1:7c:1c:33:7d:26:f3:05:66:50:bb:c1:1f:aa:ca:90:48:1a:
71:a9:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:12:09 2024 by rpki-client on console-fra.rpki-client.org