Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D446F274D311EFAFB05170762E951A.roa
File: E0D446F274D311EFAFB05170762E951A.roa (raw, json)
Hash identifier: ci8oGOg03T60rnBMzIMqNYd3M6Ua+YOVH3VeZjwqtJw=
Subject key identifier: 31:DA:2C:DE:2C:4A:CD:97:38:71:D2:75:F3:49:41:BB:0B:DE:84:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F03E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D446F274D311EFAFB05170762E951A.roa
Signing time: Tue 17 Sep 2024 09:04:43 +0000
ROA not before: Tue 17 Sep 2024 09:04:40 +0000
ROA not after: Sun 09 Mar 2025 09:04:40 +0000
asID: 24203
IP address blocks: 154.84.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61502 (0xf03e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 09:04:40 2024 GMT
Not After : Mar 9 09:04:40 2025 GMT
Subject: CN=66e9462b-e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:ff:96:c6:92:80:b7:eb:a9:ec:70:92:43:
20:08:05:39:ad:56:36:8c:c9:f7:b7:86:02:d6:c0:
d6:a7:30:b5:36:90:3b:4c:ca:57:89:ff:a4:b6:c8:
85:2a:ba:c2:32:27:39:a6:c0:01:07:75:c9:4f:21:
0f:ad:9b:8f:e9:1e:db:56:15:52:e0:e1:6d:e3:8d:
52:86:32:43:18:b9:33:8f:ea:f5:19:e4:17:8f:4a:
a2:10:cb:54:47:bd:70:06:8f:b8:fc:0e:53:60:0a:
39:d6:84:14:db:d4:18:da:da:bb:f6:06:98:6d:32:
6a:2c:a2:e3:2f:be:2e:99:19:bd:c7:f5:e6:45:22:
5f:37:75:48:c3:f5:d3:36:f1:1e:23:6b:31:b1:84:
fb:99:bd:00:03:e3:30:15:b6:5d:37:92:5b:6d:05:
ad:27:bd:c3:c9:68:6d:ad:73:96:f6:99:5b:86:a4:
83:59:a9:d5:63:51:a8:41:20:2b:1a:92:28:f7:9a:
45:ac:f8:43:29:7d:a4:27:62:5e:ba:44:5a:50:1f:
54:f1:3a:e6:a6:f0:e4:e3:09:2e:a4:c0:e4:a1:21:
0a:c6:83:66:b5:4c:d1:e8:c0:6c:9b:9f:5f:3c:56:
cd:89:e9:d8:14:0c:75:c7:b8:97:30:fe:da:74:ee:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:2C:DE:2C:4A:CD:97:38:71:D2:75:F3:49:41:BB:0B:DE:84:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D446F274D311EFAFB05170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:13:f7:bf:ff:d4:f7:01:d3:59:df:45:b1:f3:c8:82:b3:a3:
8b:71:4e:dc:96:66:a6:a1:57:b2:67:23:33:13:ce:0a:e1:57:
64:d7:21:5b:6e:b6:1f:65:37:d3:6a:6d:67:66:a2:fd:43:19:
cb:6b:5e:df:b7:0e:99:ce:5c:fe:24:3a:ef:bf:45:49:73:a1:
eb:a0:67:bf:96:45:e8:e2:96:c0:d4:5b:c1:5e:34:7f:19:a2:
98:57:70:12:51:7a:91:47:77:a6:cb:70:92:e7:84:13:b9:34:
ec:50:62:8f:2c:96:f8:dd:5d:be:44:b9:84:b0:61:2c:c6:81:
eb:21:f5:15:af:3d:55:b2:44:55:bc:da:4d:0a:d9:3f:b1:f2:
9a:a6:77:28:b1:14:fc:ad:5a:c8:8b:b0:f1:f6:60:b8:72:c7:
11:8e:2f:c0:74:43:b6:46:02:9d:ae:6a:fb:5e:a5:ad:a4:e0:
22:9c:b8:0d:af:1f:4f:16:d2:14:1b:b5:30:ba:26:4c:c1:46:
ff:33:bb:64:91:67:b9:bc:ac:28:e1:fd:a7:6a:86:87:37:bb:
2b:d6:83:d9:02:d2:5e:83:04:bc:bb:4d:50:dd:dc:ea:9f:a7:
aa:5b:f1:e9:a8:0f:71:e3:13:2b:4b:fe:21:f6:b0:3c:dd:82:
4a:90:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:38:01 2024 by rpki-client on console-fra.rpki-client.org