Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2F7048B9011EFA3866CAE762E951A.roa
File: F2C2F7048B9011EFA3866CAE762E951A.roa (raw, json)
Hash identifier: WB5fXW1WfyMyvaGYJSOMmw+u15oXQwtJzdGiy3fy7Qo=
Subject key identifier: 4D:F9:69:B1:C8:88:FD:A0:F3:A6:28:E6:58:69:24:3C:23:7D:86:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2F7048B9011EFA3866CAE762E951A.roa
Signing time: Wed 16 Oct 2024 07:33:34 +0000
ROA not before: Wed 16 Oct 2024 07:33:30 +0000
ROA not after: Thu 18 Sep 2025 07:33:30 +0000
asID: 135391
IP address blocks: 154.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65151 (0xfe7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 07:33:30 2024 GMT
Not After : Sep 18 07:33:30 2025 GMT
Subject: CN=670f6c4d-9f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:86:ce:e6:e4:f4:b5:17:8e:06:0a:71:b5:
dc:2a:94:9b:eb:1f:1a:ef:9a:7f:91:b9:50:98:80:
39:5c:ed:52:26:80:b6:a2:db:2f:39:fe:5c:93:93:
f7:fe:d6:03:14:8d:46:64:ab:27:b1:f7:01:5e:e4:
dd:9d:ba:82:85:a8:b5:04:f5:53:d0:91:7a:cc:3b:
fe:18:58:af:52:ae:ce:a8:57:eb:99:b5:51:ee:41:
b9:76:50:41:b1:bf:21:a3:14:25:2a:05:cb:70:e1:
e4:72:b3:1c:55:e3:75:41:a4:9e:33:8e:a4:0f:96:
21:9b:6e:33:7d:ef:a5:4a:97:62:3c:7c:34:31:1d:
4a:bf:54:9f:03:c5:70:05:6c:e4:67:07:a3:e7:37:
a5:66:84:1d:cb:91:ec:2d:71:7e:b4:cf:3b:91:90:
d8:a0:fc:94:32:80:27:01:bb:80:ee:90:c7:97:15:
fc:eb:44:d3:90:19:aa:7c:be:94:f8:0b:0b:a5:e9:
e2:f2:b6:45:c4:07:d3:22:ad:09:12:a2:6b:a9:db:
ec:08:0d:25:db:d3:c9:0c:0c:47:22:a3:e0:59:98:
d4:1f:15:0d:59:2b:57:3e:c2:2a:1b:da:6f:57:1f:
e1:6c:d3:c1:70:8d:5e:ae:56:4d:8f:31:1f:83:fd:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:69:B1:C8:88:FD:A0:F3:A6:28:E6:58:69:24:3C:23:7D:86:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2F7048B9011EFA3866CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:30:54:7d:be:60:9b:d7:60:a9:a4:e1:eb:4a:3d:6c:64:98:
c2:ef:c6:84:d0:b3:14:0f:05:9f:59:d8:38:63:c2:41:fa:bb:
a5:62:b9:d3:b2:2e:f0:f3:c6:01:26:53:76:eb:2f:91:ff:77:
77:f5:f8:d8:b4:a6:26:03:1c:99:85:00:d4:3c:03:50:34:9b:
65:16:86:21:f2:f3:45:6b:c9:fd:3a:1f:75:5e:09:a7:ab:d2:
7a:7d:61:6f:bd:58:e1:2a:ce:4e:94:e7:9f:d5:14:70:64:4e:
74:96:68:f6:43:4f:c2:7c:6f:e5:ba:8d:77:7a:e5:23:a0:4a:
c2:13:b9:f2:e5:d0:44:5f:52:0a:7c:87:93:f9:82:3a:c0:7a:
2d:72:df:9d:c4:1f:eb:e5:e1:f8:b8:42:01:1d:39:96:83:08:
9d:37:5f:b1:8b:15:02:f1:d9:c8:cb:db:ed:6e:11:54:da:83:
8b:0c:a8:4e:bb:42:10:2f:21:10:9f:4a:0d:5a:fa:ee:0e:9a:
32:15:d7:9e:c7:74:39:df:8e:e9:b4:be:49:a7:4f:04:80:5c:
af:53:06:af:ea:16:b5:56:be:a6:d9:bc:33:d3:b4:fd:ed:50:
69:ff:d4:c3:d6:a4:35:94:81:53:af:b5:cb:b1:bc:c4:11:5f:
1c:1a:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:54 2024 by rpki-client on console-fra.rpki-client.org