Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C9ECF47B1E11EFBAAB9491762E951A.roa
File: F6C9ECF47B1E11EFBAAB9491762E951A.roa (raw, json)
Hash identifier: l8A6Ac2SjL7Fy/PBfAKL40t7UGjrqCVtjpxonu/O9fs=
Subject key identifier: 96:2B:12:F6:61:60:07:7D:75:D3:42:D4:63:5C:E5:14:57:15:24:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F334
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C9ECF47B1E11EFBAAB9491762E951A.roa
Signing time: Wed 25 Sep 2024 09:17:19 +0000
ROA not before: Wed 25 Sep 2024 09:17:16 +0000
ROA not after: Wed 18 Dec 2024 09:17:16 +0000
asID: 47890
IP address blocks: 154.214.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62260 (0xf334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:17:16 2024 GMT
Not After : Dec 18 09:17:16 2024 GMT
Subject: CN=66f3d51f-8413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:fd:35:0b:0f:5c:7d:7d:8c:1c:00:c3:0b:
da:b8:2a:ac:d7:ec:8c:13:db:4f:53:fe:a4:63:50:
8f:b7:6f:7d:ad:11:fa:79:cd:8e:06:52:2d:2f:d9:
bf:ee:30:34:f3:66:a7:bb:a2:7e:e1:be:c7:c8:f5:
8a:a4:7b:33:6d:b0:be:ad:c0:e5:f2:7a:98:8e:40:
31:7c:e7:82:de:c3:4f:86:0f:d4:75:a0:52:c6:cb:
c7:17:f4:a2:fa:81:ef:b9:df:d1:bb:ea:14:ff:a0:
7b:52:59:96:9c:2c:f2:90:1e:9a:5d:73:43:09:0c:
3c:25:62:a9:ff:72:e9:72:18:ef:df:fe:56:cb:82:
3a:c7:c8:8e:31:44:83:5b:20:1c:ac:dd:c3:de:4e:
ae:1f:a1:86:80:59:4d:1e:36:33:1d:43:76:22:37:
30:fb:0b:23:3f:33:1f:26:0b:0c:93:54:6e:e5:8d:
40:f0:dc:53:2b:35:45:dc:92:09:66:f7:59:07:ee:
c4:f8:6b:69:e4:ce:ba:2a:39:8d:fb:ff:38:6c:47:
ac:04:1a:06:a7:e7:eb:e0:51:c1:7c:71:dd:27:c1:
77:d4:b8:87:3b:d8:c4:37:35:e8:61:aa:4c:64:91:
1a:ac:e6:9b:96:0b:98:7e:02:71:03:8f:44:0f:95:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2B:12:F6:61:60:07:7D:75:D3:42:D4:63:5C:E5:14:57:15:24:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C9ECF47B1E11EFBAAB9491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a0:96:6e:9d:9f:36:82:4f:19:b7:e0:e0:e6:9d:6b:7b:4a:
47:4f:bf:41:97:cc:1c:2d:21:cb:66:ca:2b:bf:0f:80:a0:23:
4a:83:4e:05:94:3a:df:a0:19:68:39:6a:69:5c:20:c3:c6:a8:
2a:91:90:72:db:e2:c0:d8:4d:51:c6:18:1a:87:5d:04:2b:a9:
60:e1:86:77:a9:17:29:88:a6:e9:22:04:14:35:48:4b:c3:14:
f4:16:a7:27:da:80:a3:1f:f3:58:5e:e6:3f:a8:db:25:91:27:
7e:5a:ec:33:24:06:15:5e:fa:1b:4b:44:72:bd:2f:0a:9c:eb:
e1:84:22:59:15:46:47:99:f9:ec:64:97:c4:6a:ec:1c:75:73:
ef:89:d9:2d:a1:45:be:5e:16:b8:bd:5f:4e:56:20:d7:ad:a3:
f8:ef:64:68:82:24:16:5f:5e:90:06:0e:0e:1f:a2:e0:95:64:
a0:63:7e:48:51:8a:60:98:6b:0b:3b:2d:96:66:4d:03:67:8b:
71:c6:60:28:30:7b:64:33:72:5b:65:ea:e9:bf:8e:46:34:67:
ef:89:24:f9:f3:45:0a:35:10:d1:04:2c:f9:c3:d1:1d:c6:aa:
aa:b9:e3:3e:d7:d1:14:0e:82:f1:2e:98:70:4f:8a:0a:61:0e:
87:f2:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:45 2024 by rpki-client on console-fra.rpki-client.org