Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D506B586339B11EF896CF058762E951A.roa
File: D506B586339B11EF896CF058762E951A.roa (raw, json)
Hash identifier: 3uWmPW0/VdsTO1fh0qSMvEVAplPvA5QVyvwR4t8MdWg=
Subject key identifier: 50:A3:F2:D7:A1:26:B5:38:8B:D9:F9:02:1E:82:3E:E1:FF:8C:E9:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C760
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D506B586339B11EF896CF058762E951A.roa
Signing time: Wed 26 Jun 2024 09:09:46 +0000
ROA not before: Wed 26 Jun 2024 09:09:43 +0000
ROA not after: Mon 30 Dec 2024 09:09:43 +0000
asID: 984
IP address blocks: 154.211.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51040 (0xc760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:09:43 2024 GMT
Not After : Dec 30 09:09:43 2024 GMT
Subject: CN=667bdada-e245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:02:7a:7a:76:2a:91:ca:0a:b1:3b:bb:8c:
78:50:93:49:34:8a:2e:02:2c:5f:e8:dd:df:57:29:
31:87:ff:2a:0f:f8:15:83:9e:2a:67:0a:52:50:6f:
34:47:79:75:87:ac:cb:1b:b8:cb:0c:76:c4:c6:0c:
2d:db:85:2e:9d:64:c3:7a:17:d5:36:23:aa:e5:11:
44:ef:89:1d:73:3e:3b:e5:f4:01:7c:25:31:b5:af:
ca:ce:d7:f5:4e:4d:9b:2c:bf:b4:7f:9e:6a:4e:01:
bc:c4:f9:f7:d9:d5:2e:d0:4c:d9:6d:f9:cc:3f:40:
4f:b2:26:d4:02:1b:59:01:d1:03:c2:90:e0:34:b9:
0e:af:3f:5e:5b:47:2e:da:39:e4:a5:63:25:b8:74:
da:b8:ec:47:b0:31:c3:c9:6f:93:0a:01:55:10:18:
77:b1:c9:9c:df:92:d1:0e:37:73:a0:d3:ca:56:69:
68:51:c6:48:4b:09:54:65:ae:b1:4d:de:60:f6:ca:
63:c3:07:d9:ac:3e:90:dd:c5:67:fd:a0:04:55:30:
48:a5:9c:35:e0:a7:7c:3f:47:fb:a0:7d:73:c3:a3:
4d:a7:ff:ca:0c:a7:a6:f4:f8:fa:0d:ce:5a:d1:9d:
93:b9:a8:44:e0:28:e1:8f:ca:20:19:be:d7:bb:c8:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:F2:D7:A1:26:B5:38:8B:D9:F9:02:1E:82:3E:E1:FF:8C:E9:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D506B586339B11EF896CF058762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b9:fb:21:f8:dd:da:b8:dc:bd:01:4b:8f:50:df:77:cc:15:20:
02:a5:31:43:50:22:33:36:13:cb:24:5d:f2:23:2d:60:fb:b0:
db:50:ac:7b:ac:70:46:7d:17:1f:a4:36:ed:30:04:36:7a:7c:
12:67:f3:7f:34:d0:31:2e:fe:99:25:e0:3e:1e:55:b4:d9:c0:
14:a7:1e:e0:f0:f8:72:d5:48:ec:e5:6a:8b:4d:3a:ef:a6:f8:
7c:00:46:3b:7b:f5:12:61:d7:e0:4d:e5:9b:af:a8:05:09:de:
4d:a4:41:c1:bc:ef:de:e2:63:94:bd:4a:68:31:28:c0:7f:37:
d6:08:b9:ba:a7:40:ef:bd:4a:b4:38:90:39:af:20:92:eb:16:
c1:c8:36:73:30:e9:e6:e5:55:54:21:5e:50:60:fd:2f:a6:86:
56:ee:ff:25:d3:44:65:f1:1c:2b:e5:71:56:eb:6b:70:4f:39:
0b:8b:d4:34:65:ba:f9:bf:0f:10:08:8b:0e:29:ab:80:5f:3a:
dd:73:89:7c:f1:dc:42:e3:9e:2f:54:d1:e0:47:86:6f:8e:79:
24:b0:d7:4c:b4:6c:74:c6:5e:67:ca:7b:16:47:3f:86:f3:e5:
6e:3f:2c:07:fc:91:ad:ed:bb:b5:b7:77:9d:fd:61:41:15:8e:
f1:2d:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org