Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0465721044D911EF978A917A762E951A.roa
File: 0465721044D911EF978A917A762E951A.roa (raw, json)
Hash identifier: 1xuL3WzII/AgXfnSpGS7b/59bZg3mGvfjE82APIEIhs=
Subject key identifier: A9:11:8C:9B:5B:4D:3E:26:B7:2E:64:52:18:CC:5F:EC:76:C2:CE:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D380
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0465721044D911EF978A917A762E951A.roa
Signing time: Thu 18 Jul 2024 07:40:34 +0000
ROA not before: Thu 18 Jul 2024 07:40:31 +0000
ROA not after: Thu 01 May 2025 07:40:31 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54144 (0xd380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 07:40:31 2024 GMT
Not After : May 1 07:40:31 2025 GMT
Subject: CN=6698c6f2-497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:cd:61:15:3e:93:a5:51:e5:62:32:67:16:
05:de:64:6f:dd:30:a5:ba:34:c2:85:af:a9:7f:37:
60:b7:9d:ee:25:58:0e:92:d1:c5:0d:7e:2a:c4:4c:
e9:36:82:d9:71:bf:fb:a7:3f:de:28:86:ef:f9:68:
02:30:bf:ec:ab:d3:68:d0:55:76:66:b2:7c:3f:99:
8b:aa:25:aa:3b:a8:38:26:4a:62:4a:a3:33:4e:d7:
f2:dd:20:6c:dd:f6:d5:de:82:1b:3f:b3:da:b7:c4:
82:12:92:48:2e:6d:cf:30:1b:89:47:d9:7e:33:42:
64:71:38:77:0f:54:2b:14:d7:5c:d5:24:c4:6b:53:
2e:94:af:fb:a3:54:4d:44:02:5a:8c:54:a8:a4:b1:
87:cf:7e:61:78:f3:33:d6:83:f3:7b:07:e7:ef:fd:
c1:4c:17:bb:74:66:93:b8:74:e8:27:62:32:20:6a:
1f:0d:46:61:6a:ed:ab:64:96:66:8a:95:4f:ff:86:
0d:54:2e:33:1f:f5:10:31:07:19:11:b6:bc:4a:0d:
a4:48:c4:35:aa:dc:f9:5c:59:cd:4d:d9:13:12:68:
a9:e2:6b:29:64:7d:14:40:95:41:fa:0d:b9:98:d8:
ad:2c:cf:53:03:88:67:60:f1:a4:1e:6e:44:6e:96:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:11:8C:9B:5B:4D:3E:26:B7:2E:64:52:18:CC:5F:EC:76:C2:CE:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0465721044D911EF978A917A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:22:66:06:6c:e9:ce:bc:ed:90:d7:a5:7f:f0:83:19:98:2a:
0e:f6:33:7c:e0:bd:b0:88:e7:0a:56:0d:13:d0:5e:11:18:46:
29:d2:e0:ad:07:d3:e1:e7:6a:12:59:8e:27:69:13:6d:f9:ca:
57:02:36:74:7c:4b:2c:32:fd:b9:f6:5a:9a:6e:82:e4:c5:af:
2f:e9:b7:2f:c8:47:d4:d7:a9:24:3e:54:96:54:ef:99:8a:6d:
5b:db:64:ef:5e:76:55:bb:e2:e5:1a:0d:44:a5:af:a5:71:1f:
f9:c5:f7:3d:33:7e:94:db:cc:70:29:c4:65:29:9c:86:91:4a:
c0:93:49:8c:48:df:39:99:4b:3c:2d:04:a9:86:f1:6e:4d:f3:
cd:7a:98:01:a3:c6:19:3b:75:d8:bd:12:66:cb:38:b1:11:5b:
37:39:3e:a9:1d:41:7e:6d:89:97:3a:7f:47:dc:d7:ac:76:e4:
0a:be:66:99:27:1f:f8:9b:96:90:16:0a:80:96:e7:53:23:c4:
bd:78:b6:e9:ab:a4:f7:6f:a5:23:6a:b2:d9:f7:86:be:54:b2:
ef:9a:bd:82:cc:bf:03:ed:7e:f9:ba:11:d5:40:6d:46:f1:88:
b0:3d:eb:86:14:33:8c:18:64:af:bd:c9:4f:12:de:7d:59:88:
01:cd:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org