Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F81ABE7A4611EFB50C19BD762E951A.roa
File: F4F81ABE7A4611EFB50C19BD762E951A.roa (raw, json)
Hash identifier: 2dJa6noYK/wjgC4OUuOy8e3KdduPPX6CMJ1A4skU/nU=
Subject key identifier: BC:51:1D:D1:D4:82:8B:AD:89:3C:95:10:40:5B:77:69:DD:D3:A8:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F2C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F81ABE7A4611EFB50C19BD762E951A.roa
Signing time: Tue 24 Sep 2024 07:31:05 +0000
ROA not before: Tue 24 Sep 2024 07:31:01 +0000
ROA not after: Sat 27 Sep 2025 07:31:01 +0000
asID: 142629
IP address blocks: 154.82.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62149 (0xf2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 07:31:01 2024 GMT
Not After : Sep 27 07:31:01 2025 GMT
Subject: CN=66f26ab9-a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:5a:8a:d1:f1:57:bd:39:9a:c2:58:c7:a5:
92:a3:65:c6:b1:3c:c5:e2:bc:b2:19:fc:0f:a6:c7:
ac:d6:14:1a:90:1f:bb:02:66:a4:66:cc:7a:10:56:
c7:40:dd:a5:33:61:23:5d:c7:ee:e7:ec:4f:8d:46:
49:02:72:21:e1:59:73:4d:4c:cb:f0:75:6b:c6:1a:
02:a7:47:f1:b0:41:51:8b:13:81:f4:9a:0b:8d:83:
40:0a:21:26:df:6c:78:a1:ce:32:ba:0c:89:e1:7e:
94:d6:ba:a1:03:70:cb:60:cc:8a:90:d5:37:5c:45:
e0:21:32:1b:29:c9:68:9f:7a:33:55:f1:9f:27:08:
0f:24:34:a4:84:03:7f:9b:70:a3:71:5b:e5:6e:d0:
76:87:2c:29:bf:8b:0a:ce:9c:bd:57:20:23:d1:5f:
16:a7:f7:ca:d7:19:7b:48:2c:76:18:d4:05:b0:b6:
06:ae:bd:c8:ef:e8:fe:ae:96:ca:46:e0:17:bd:d6:
dc:c2:60:6e:cd:90:dd:99:cc:8c:2c:b1:56:d4:b9:
6e:bf:77:07:db:eb:80:7c:3d:e1:5a:dc:e9:66:d8:
24:41:da:1d:46:5e:c1:08:e4:ad:e1:c2:c3:9d:79:
5a:a7:87:17:0d:b2:59:eb:00:4c:a2:7c:33:ff:e6:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:1D:D1:D4:82:8B:AD:89:3C:95:10:40:5B:77:69:DD:D3:A8:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F81ABE7A4611EFB50C19BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.151.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d3:07:f8:8b:63:ba:82:94:c7:c5:6d:8e:92:b1:05:d9:42:
4c:b1:d2:28:77:af:f9:be:dc:97:2b:fb:30:cb:43:3c:c5:52:
03:f0:80:30:53:3d:15:c8:c9:e5:43:01:f0:9d:08:aa:2b:f8:
bc:1e:04:82:29:01:da:8e:93:7f:32:2e:dd:b3:91:d6:32:16:
79:1c:3e:7a:fa:7b:0d:f7:2c:50:f1:fa:b6:c0:4d:0f:7b:35:
da:b8:ca:23:8a:59:f2:b6:99:5f:18:72:4e:bd:44:97:19:8d:
c8:58:06:2e:3e:f4:bc:05:4a:42:d0:ab:4a:ab:97:cd:51:4c:
0c:c5:fe:05:2c:aa:f9:3f:5c:da:56:08:e3:c6:f3:60:b7:83:
41:40:8c:b3:13:77:2d:1f:cf:e1:84:7f:dc:64:63:14:e9:e3:
0a:06:28:d7:fe:c0:68:b4:f2:e7:de:c9:c8:0f:50:c1:f0:ca:
12:f5:21:75:88:53:d2:a3:93:ac:b8:82:54:48:31:23:ae:f7:
d9:1f:10:9c:58:a2:ab:a9:08:24:cc:d2:0d:49:28:b5:7d:e5:
d3:64:c8:ff:77:28:ab:0c:b2:85:fb:b7:45:b0:81:d7:3d:75:
6a:9c:d2:2a:4f:36:ee:63:62:3d:e3:ed:5b:71:50:75:1d:96:
1c:95:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:53 2024 by rpki-client on console-fra.rpki-client.org