Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E512838E8D3611EF9DD17194762E951A.roa
File: E512838E8D3611EF9DD17194762E951A.roa (raw, json)
Hash identifier: F0e3i6KJgrfF23sALduM3PJcEAtO/MOpj/++b9l/vfw=
Subject key identifier: F7:CA:2E:07:28:94:32:46:D4:51:32:E9:3D:A0:46:21:9F:BD:57:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E512838E8D3611EF9DD17194762E951A.roa
Signing time: Fri 18 Oct 2024 09:53:58 +0000
ROA not before: Fri 18 Oct 2024 09:53:55 +0000
ROA not after: Sat 04 Jan 2025 09:53:55 +0000
asID: 132325
IP address blocks: 154.206.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65487 (0xffcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 09:53:55 2024 GMT
Not After : Jan 4 09:53:55 2025 GMT
Subject: CN=67123036-b20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:25:5e:b0:c5:f7:17:a0:54:f7:c1:39:75:
80:da:db:2e:21:77:f8:ce:65:89:76:11:1d:d3:5f:
b4:8c:7e:51:2b:eb:ee:d2:df:8a:9d:38:70:e1:1d:
da:42:45:24:53:52:c2:35:a4:78:89:bc:d7:f5:20:
3b:04:97:fa:91:c3:bc:17:0f:ea:da:45:11:4f:96:
d5:8e:d9:e4:58:e9:cc:85:36:77:1d:d6:a3:39:7c:
70:e8:07:f1:da:bb:a8:42:5c:5a:5a:12:cb:01:3b:
ec:bd:fe:11:41:21:b8:5a:4d:b3:63:15:38:8f:5d:
c3:70:79:92:c6:68:71:63:c5:9d:eb:8b:aa:bb:76:
fe:89:ae:d7:0e:4d:6d:1a:6d:df:25:26:3c:f6:00:
0a:7f:79:8b:b7:57:71:f8:71:10:68:34:2a:d7:37:
c4:11:26:60:52:46:17:47:df:fe:2c:c7:bc:8b:8a:
57:8c:09:25:79:16:91:7f:ac:2a:ae:30:57:55:91:
6a:aa:92:d9:8d:75:2e:3b:b6:cf:cf:9c:ee:1f:63:
1d:3c:5d:9b:d7:fb:85:6b:a1:02:ce:46:09:99:d9:
e6:5f:c9:04:3e:a5:e8:fd:a4:53:9f:e8:f1:ad:d4:
88:dd:9e:1c:3a:57:a1:c1:89:18:2b:75:4b:98:62:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:2E:07:28:94:32:46:D4:51:32:E9:3D:A0:46:21:9F:BD:57:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E512838E8D3611EF9DD17194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
63:99:9f:e9:27:30:06:76:ec:32:71:b0:56:44:13:f7:24:ca:
91:ee:b5:95:12:1e:5d:67:0f:f9:78:87:2d:7c:a4:59:12:0a:
54:f0:bc:e5:85:4d:4a:a0:36:d9:c8:0e:d2:6f:32:de:33:98:
6a:24:1f:8e:ca:99:12:ba:d9:f9:4d:6d:84:3c:2a:c7:62:98:
10:2c:2e:e3:63:19:86:e4:26:01:f7:b6:87:b7:f4:d3:78:65:
90:f1:cf:d8:0f:84:59:c7:a7:a6:09:e1:8e:fe:d8:1c:72:39:
45:8e:80:b2:e4:33:e9:12:e8:23:66:d4:5a:ba:67:4c:a7:b8:
0d:72:c9:7e:1c:93:bf:df:2a:bc:e7:11:0b:a0:27:b9:f4:c4:
b8:cd:31:d9:4d:5d:5d:fd:e5:95:4c:b0:09:29:9e:64:1a:3b:
1d:db:53:8f:7a:60:13:1a:69:b5:76:ac:9b:ff:99:35:9b:85:
3b:0a:10:1f:d3:9c:9b:a8:48:da:23:59:37:0f:ce:f1:4e:e0:
fb:1e:1a:e4:86:c0:a0:9d:1e:38:6a:9a:3a:70:0e:7f:db:1e:
bd:6f:60:9e:2e:8c:15:22:43:5b:e7:52:1d:cf:af:68:6d:bd:
71:3b:20:98:fd:2f:24:43:bc:f2:00:93:84:75:9b:f5:44:e6:
76:05:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:32 2024 by rpki-client on console-fra.rpki-client.org