Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB1C336A9CF11EF93F45F5C762E951A.roa
File: FDB1C336A9CF11EF93F45F5C762E951A.roa (raw, json)
Hash identifier: IrLCZ46XaEsNFWnkHJeX84sxaeiWtJ+CyxWeBK3DoVc=
Subject key identifier: 2C:8C:51:BB:9A:DB:40:D8:72:FF:E1:E2:B2:08:E1:67:F5:2C:7C:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011210
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB1C336A9CF11EF93F45F5C762E951A.roa
Signing time: Sat 23 Nov 2024 19:20:25 +0000
ROA not before: Sat 23 Nov 2024 19:20:21 +0000
ROA not after: Tue 03 Dec 2024 19:20:21 +0000
asID: 21738
IP address blocks: 154.206.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70160 (0x11210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:20:21 2024 GMT
Not After : Dec 3 19:20:21 2024 GMT
Subject: CN=67422af9-35d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:87:99:34:4e:7f:f1:63:08:db:aa:54:0c:
41:78:1d:6b:16:fb:2e:1a:36:2e:35:9d:d2:9a:8d:
65:49:c4:30:79:3a:0e:b3:95:77:e9:7b:47:4c:25:
00:18:7d:11:c8:97:35:33:0d:e2:87:4f:be:f5:59:
37:47:4a:95:ba:e9:6c:bc:e9:7d:ec:e3:2a:78:31:
3d:67:72:48:66:a2:e8:ab:cf:b8:4c:21:00:ff:d9:
a6:6f:12:5c:5c:b8:53:2a:c9:10:be:33:18:a8:c8:
45:7e:e7:3d:e1:0a:8e:72:24:80:4c:8f:e2:12:11:
5b:35:44:69:47:92:cf:18:75:e7:3c:fb:09:83:e2:
14:93:d6:45:1b:d7:81:89:ad:9a:fe:f9:f3:4d:1e:
b3:91:4d:85:9c:75:cc:aa:6f:0a:9e:f6:9d:d6:10:
ca:3a:fc:5f:28:23:71:f7:b9:46:dd:2b:63:3e:c6:
e1:7f:dd:a8:a0:b6:e0:7a:12:d0:49:38:04:dd:35:
95:84:38:49:b2:13:a2:7b:9b:33:ee:64:1b:3d:a5:
73:15:e0:0d:41:90:2c:a9:54:bd:e2:88:d3:89:8c:
79:cb:eb:e8:03:2f:ed:8a:ec:47:a3:5a:fb:80:fb:
82:24:37:aa:3d:61:17:98:b9:9d:f3:ad:26:c5:de:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:51:BB:9A:DB:40:D8:72:FF:E1:E2:B2:08:E1:67:F5:2C:7C:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB1C336A9CF11EF93F45F5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.19.0/24
Signature Algorithm: sha256WithRSAEncryption
61:27:6b:9e:91:2f:32:bf:5d:fd:c8:82:e1:e2:0a:a5:c5:a6:
f2:90:19:b6:a3:16:31:b5:07:c4:11:b3:84:4a:da:6a:e3:8f:
a7:45:b3:49:0a:27:a2:f0:d4:9a:2b:81:78:50:52:44:b9:ec:
43:26:25:b4:34:62:ca:94:02:c5:ab:dc:00:db:0c:94:55:92:
28:3b:b7:7a:b1:d1:2a:76:b2:c7:fc:66:4a:84:6e:fd:c4:82:
7d:db:aa:6e:b9:3f:a0:96:3e:28:2b:3b:a0:e8:dd:6d:84:46:
55:4a:06:d0:75:51:7d:6a:7e:a7:60:bb:b6:e4:7a:78:54:6b:
37:3b:f9:11:72:05:37:b2:d1:77:f8:48:c9:80:3e:ec:0a:99:
8a:22:88:b3:7e:c3:2f:bc:b3:4a:3a:9d:b9:6c:19:d0:50:b2:
64:07:e2:99:37:c7:01:03:2c:87:a1:2a:20:0e:30:11:36:e6:
4c:06:dc:65:70:dc:8c:d1:1a:80:1d:ec:fd:40:e5:3e:f2:af:
af:9f:5f:7e:25:96:f7:6f:a1:11:ca:4e:cd:18:e2:89:9b:5f:
4d:6e:72:d1:b0:72:58:aa:d1:62:36:a4:4c:74:1f:b7:34:11:
ef:73:4d:ff:85:73:5f:e6:7b:d2:f8:be:b2:ff:2b:16:d7:3d:
2e:22:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:47 2024 by rpki-client on console-ams.rpki-client.org