Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032CF764736A11EFB7CE8254762E951A.roa
File: 032CF764736A11EFB7CE8254762E951A.roa (raw, json)
Hash identifier: OVTS1GiGT6o2aUsAd7rC8RzEcDqnvgQoEbogUApkoVg=
Subject key identifier: 9E:D1:E6:54:1C:28:54:2C:91:89:9E:C6:B0:25:6B:CF:EB:13:3F:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032CF764736A11EFB7CE8254762E951A.roa
Signing time: Sun 15 Sep 2024 13:54:23 +0000
ROA not before: Sun 15 Sep 2024 13:54:19 +0000
ROA not after: Sat 30 Nov 2024 13:54:19 +0000
asID: 142403
IP address blocks: 154.83.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61246 (0xef3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:54:19 2024 GMT
Not After : Nov 30 13:54:19 2024 GMT
Subject: CN=66e6e70f-b27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:17:b7:b9:38:99:97:11:58:c2:c9:ab:74:
9a:00:f7:a1:bf:01:8b:54:e8:b0:15:af:a3:e2:f7:
b7:ec:93:7a:51:99:69:0c:82:6d:ef:c7:dd:29:b5:
37:0c:09:cb:9c:65:26:96:ef:97:b2:be:46:17:22:
fc:0c:e2:c1:59:a9:b6:b1:27:b5:1a:13:ed:9f:42:
a8:c9:69:58:95:49:e4:44:1d:46:48:6f:da:1c:17:
bb:9c:80:d6:b6:9e:9f:be:69:0f:b2:84:24:64:a0:
59:d1:03:65:07:8c:be:49:79:3c:e7:b3:be:62:35:
ce:59:32:7c:a7:1b:c0:1a:a5:61:7d:5b:23:08:3d:
07:bf:e3:4a:27:d4:0d:f7:49:82:4f:7c:a4:3e:99:
0d:3a:26:f4:6e:e0:07:19:cc:4c:97:4d:1f:70:82:
61:5c:98:c0:8f:f0:c9:05:d2:87:f9:53:6d:ca:4a:
09:b1:ec:84:90:34:76:8e:b0:3c:99:7e:1a:2c:7d:
ce:42:46:30:e3:7a:04:20:c1:07:8b:9a:df:7f:7c:
ea:d5:31:13:02:2b:52:4a:49:b2:46:61:a9:a7:a8:
6e:8a:00:e5:e6:8a:17:8c:45:b8:ac:e0:b9:dd:d6:
4b:b3:c2:5d:eb:2d:95:3a:e2:56:86:a9:fa:2e:b7:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:E6:54:1C:28:54:2C:91:89:9E:C6:B0:25:6B:CF:EB:13:3F:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032CF764736A11EFB7CE8254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.14.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f6:3d:f1:b6:88:ed:09:5d:67:7f:ec:6d:ab:22:7a:55:a8:
57:d3:e4:0a:0e:c8:94:9b:bf:16:a9:78:6e:3e:fd:3e:61:9c:
f2:c0:4c:fd:34:31:c5:f7:98:59:00:3a:22:34:a6:46:94:9c:
77:6a:30:70:c5:23:c4:68:1e:b1:12:8b:ae:60:f0:f7:f6:a5:
79:2a:93:21:75:80:60:1e:b5:1e:af:3a:30:76:90:7e:04:b0:
d2:76:f8:62:81:b2:ff:b1:89:7a:ce:bd:e5:76:4d:49:cf:27:
ee:d9:33:a4:ea:22:a5:09:28:7d:5c:b3:cd:78:44:c1:5c:9e:
46:1f:fc:27:18:38:b6:81:3b:dd:5c:47:fb:87:7d:5f:74:12:
b3:d7:22:44:1f:8b:ce:07:68:53:13:35:fc:ed:72:30:9e:6c:
4d:35:8e:15:82:29:da:81:f2:f3:bd:19:78:8e:fe:8d:be:6f:
11:0d:68:48:c1:8b:89:82:ba:32:71:2c:1f:54:63:1d:5d:3b:
f3:f9:a5:07:19:a4:7d:54:af:d5:87:30:fd:08:c1:26:9e:32:
c9:a6:5e:bf:97:12:3d:70:fb:90:39:23:93:f1:21:44:ce:ef:
c3:9d:eb:2f:46:cd:9f:e8:9b:1f:da:8e:b8:e9:91:64:3c:7a:
39:c9:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org