Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF0AAAA33A311EFBDE60E8C762E951A.roa
File: FBF0AAAA33A311EFBDE60E8C762E951A.roa (raw, json)
Hash identifier: RvYgjazHu9WffFD8O1Bv7DFkKTlHdpltrudlet0ee8U=
Subject key identifier: 44:EF:D0:6B:C4:DA:E7:5D:AD:B5:3D:98:A6:82:EC:A6:58:F9:97:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C76A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF0AAAA33A311EFBDE60E8C762E951A.roa
Signing time: Wed 26 Jun 2024 10:08:07 +0000
ROA not before: Wed 26 Jun 2024 10:08:04 +0000
ROA not after: Mon 30 Dec 2024 10:08:04 +0000
asID: 984
IP address blocks: 154.83.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51050 (0xc76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 10:08:04 2024 GMT
Not After : Dec 30 10:08:04 2024 GMT
Subject: CN=667be887-e2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:1d:b7:6b:91:d4:65:8c:3c:ca:bb:71:67:
de:1c:fb:ee:27:d1:54:47:27:33:64:4b:43:01:e8:
01:ae:9e:6e:ac:92:48:e5:86:37:1a:9c:89:c1:c2:
9a:48:c8:be:3a:59:26:1a:55:4f:72:b6:ad:70:51:
33:50:af:70:3e:68:49:b1:1a:0f:dd:43:38:dc:58:
2b:68:60:dc:46:37:55:1f:85:ca:c6:9e:0e:77:d0:
b4:61:bb:e6:c2:13:93:e3:bd:66:68:ba:81:a0:8c:
47:3b:00:c8:dc:fa:25:7a:e8:ff:ca:42:56:9f:2b:
d0:9c:16:86:c9:08:3a:45:2b:a2:c9:87:62:3c:59:
48:4f:d3:8c:45:f4:2e:4c:90:90:a9:e3:6f:5a:83:
c7:7a:9c:a0:d0:76:4a:e9:96:02:0a:a7:23:57:a0:
b3:7d:d4:e1:cb:da:ce:dc:cd:80:0f:46:8d:6d:59:
78:10:48:84:a2:49:3b:c8:41:3d:c5:b9:f1:7a:ba:
38:70:66:3a:d6:40:80:16:68:ee:b1:41:41:46:6b:
ba:c8:94:41:ac:71:e9:57:28:ad:9c:95:b8:5b:c3:
9c:14:3d:a1:ff:6e:67:42:e4:f8:2b:46:04:9f:c7:
37:7d:e5:3e:9c:7f:a4:59:bc:cc:84:33:bc:d7:8b:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:D0:6B:C4:DA:E7:5D:AD:B5:3D:98:A6:82:EC:A6:58:F9:97:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF0AAAA33A311EFBDE60E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.64.0/18
Signature Algorithm: sha256WithRSAEncryption
72:92:72:53:ea:22:81:32:28:87:b5:9c:5d:05:14:32:e6:25:
f0:ec:cd:9d:33:8b:9b:28:64:0d:ad:8e:3b:8a:c2:cb:36:16:
3b:81:77:7a:b5:d3:a9:f5:36:1e:8b:c9:6c:9b:a6:c7:4d:88:
b9:1c:2e:32:e3:53:59:55:71:ad:29:33:8b:b9:8e:c3:b6:33:
9a:43:0e:1a:6b:ee:5b:10:2b:a4:7b:a2:48:22:99:ec:a4:d8:
b4:57:ce:0f:f9:c4:4c:e4:45:c2:77:cf:7f:23:35:44:35:d6:
8c:ee:4d:95:20:4a:25:b5:c8:96:16:db:e8:96:ca:92:cb:0e:
3f:e9:6c:12:9f:08:13:9b:00:5f:96:30:fa:97:0d:8b:c1:fe:
86:2b:b6:7d:ec:05:dc:f6:8c:0e:46:08:d5:a1:7f:3a:ac:a2:
18:d9:ad:db:7b:85:85:6d:52:cc:92:36:2d:5c:8e:f7:9a:87:
ab:f2:90:e8:12:97:0f:a5:25:bf:e0:6d:8c:1b:a2:8c:96:38:
40:3e:0a:86:1a:bf:82:d0:cb:f0:80:46:9c:1c:c3:aa:2e:03:
b7:b8:17:2b:d5:1d:98:be:cc:e6:a7:a7:68:47:8a:61:b1:2f:
79:98:b8:c7:d1:7a:77:66:5c:24:f7:99:34:0e:cf:b5:84:a8:
6d:0a:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org