Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E687F19E7F0911EF9A3834AF762E951A.roa
File: E687F19E7F0911EF9A3834AF762E951A.roa (raw, json)
Hash identifier: TU2VxHAcBxy05AQG6MJ64buEEfP4lXKQDnbrKWiF8xk=
Subject key identifier: 00:8A:97:A3:C7:9E:2F:38:0E:5B:20:40:86:2D:EF:25:B0:2B:3B:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F59C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E687F19E7F0911EF9A3834AF762E951A.roa
Signing time: Mon 30 Sep 2024 08:56:37 +0000
ROA not before: Mon 30 Sep 2024 08:56:33 +0000
ROA not after: Sat 27 Sep 2025 08:56:33 +0000
asID: 15169
IP address blocks: 154.82.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62876 (0xf59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 08:56:33 2024 GMT
Not After : Sep 27 08:56:33 2025 GMT
Subject: CN=66fa67c5-6ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:3d:e9:1c:72:f3:ba:7f:5f:f6:c6:52:fc:
88:38:2b:b3:5e:e4:9f:a5:66:2b:5a:4f:b0:a5:2e:
a7:9e:6c:51:75:9f:08:d4:f9:4c:a5:90:be:16:88:
cd:51:0e:9f:d8:83:d3:f9:7a:d1:b3:89:77:bf:56:
e2:1b:67:ae:18:70:06:43:95:c8:4a:21:c7:24:e1:
89:a7:ad:c4:2a:62:36:b1:4e:8f:2d:de:83:e9:79:
72:9d:e7:20:00:48:ac:e1:fe:ef:c1:6c:66:9c:89:
8f:4d:aa:47:2f:ce:bf:1c:b1:37:f0:13:04:80:fa:
2d:8f:9b:40:59:0c:5d:1f:ef:2c:82:a7:e0:e8:84:
5b:ce:84:c4:91:86:fa:19:44:71:fe:af:d5:0c:13:
9a:9a:5c:40:29:41:b5:33:77:f2:6d:3e:02:53:08:
00:85:70:a9:fa:b3:82:7a:3b:0a:30:e5:80:47:b1:
5d:a2:77:6c:3e:2f:21:de:26:7a:9c:96:e0:06:14:
54:73:06:2a:66:c5:73:b5:1e:3a:b3:05:a9:90:3b:
b0:b1:bb:20:58:72:ca:3d:6b:f9:71:38:3c:29:ec:
60:c2:7c:d6:e3:0c:28:b2:ac:9d:e3:36:74:e8:ae:
1b:dd:bb:89:69:6d:33:86:8d:66:32:46:af:a9:9e:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:97:A3:C7:9E:2F:38:0E:5B:20:40:86:2D:EF:25:B0:2B:3B:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E687F19E7F0911EF9A3834AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:34:20:7b:78:5a:09:9b:30:89:cb:7a:d6:21:17:d6:0a:
86:eb:aa:69:a1:35:e2:39:99:27:70:ac:2e:9b:0e:ab:87:af:
8d:eb:88:5a:33:46:dd:9a:70:cd:f0:71:ae:0e:45:1e:39:f5:
36:91:6f:da:3f:5c:3d:d3:05:69:62:25:2f:17:03:02:af:81:
95:23:ed:42:d6:bb:be:0c:1d:9c:42:01:f2:e3:84:18:a4:dd:
5d:2e:b0:8b:b4:86:31:42:3d:7c:e4:1b:04:cb:0d:7c:eb:38:
6b:07:a5:88:57:d5:2d:4f:55:93:0b:65:ab:ad:7b:a0:14:16:
8e:39:e2:b4:30:d2:a9:05:d1:64:30:e2:7e:9a:df:66:6a:c2:
21:3f:ee:c9:cd:55:40:59:01:95:79:bf:78:5f:a0:b6:39:60:
7d:cb:cf:41:32:4a:97:73:8e:a2:70:c3:65:76:24:05:6d:b8:
e3:5b:7d:59:60:10:72:e7:88:76:8a:a5:65:5b:4e:cf:a8:7f:
3a:c3:66:a4:0d:c3:35:ad:8f:d1:2b:19:e2:56:38:5b:7f:33:
d9:b3:db:ef:d8:83:78:5e:64:23:6e:9d:50:3d:85:e5:e2:9a:
85:d3:9d:20:55:9a:1e:c1:59:0b:c8:4c:72:48:ab:73:e7:6f:
de:aa:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org