Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A768FEA8E911EF90D001AE762E951A.roa
File: 04A768FEA8E911EF90D001AE762E951A.roa (raw, json)
Hash identifier: L+hd7w3NSJX0ahDymEP+5EGdPfUfefqzt5rccW7zTNw=
Subject key identifier: 9A:6B:5A:16:15:BF:F6:32:F2:8B:1A:D9:FE:93:34:20:0E:49:9F:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A768FEA8E911EF90D001AE762E951A.roa
Signing time: Fri 22 Nov 2024 15:47:03 +0000
ROA not before: Fri 22 Nov 2024 15:46:59 +0000
ROA not after: Tue 03 Dec 2024 15:46:59 +0000
asID: 62240
IP address blocks: 154.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69875 (0x110f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:46:59 2024 GMT
Not After : Dec 3 15:46:59 2024 GMT
Subject: CN=6740a777-bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:73:57:67:95:a2:b1:1e:2b:7c:a6:a7:49:
07:b0:73:ab:f8:f2:b0:ae:f8:c6:9c:a6:01:b6:96:
53:37:7a:45:61:13:d4:3b:df:dd:6e:47:23:c6:09:
bf:41:3d:26:7a:7c:fa:f0:48:eb:4c:25:1a:06:55:
26:38:4c:2e:48:a8:ca:ec:c8:39:ef:5c:bd:37:d7:
e1:af:c5:7c:d4:9b:b0:31:15:ca:23:2b:53:2c:d4:
60:70:11:9a:94:fc:cf:8a:15:07:55:b9:bb:65:0d:
b3:7c:04:d3:d8:e6:c4:d1:c9:23:4b:d7:2f:cc:7d:
08:4a:38:e1:27:5e:7e:ba:c6:72:05:74:2e:09:4a:
fb:83:15:ce:21:4a:46:72:2f:d2:02:c4:af:5b:7e:
ef:f3:eb:8d:22:71:f6:16:41:8a:9d:02:a1:dd:19:
70:3c:2d:54:65:5c:4a:49:3d:85:08:02:5c:40:a3:
2d:ab:f4:5a:6e:25:cf:cd:d8:21:0e:3f:c1:d9:fb:
78:c9:d5:59:ae:db:b3:e2:23:14:85:4a:ca:96:e4:
f7:d0:11:33:39:51:69:5b:01:69:c8:43:63:02:27:
3f:b5:15:18:17:2c:fb:9e:1c:9b:37:b8:1c:3c:27:
9e:df:ee:31:7c:45:d6:ab:5b:4c:1e:74:aa:b6:be:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:5A:16:15:BF:F6:32:F2:8B:1A:D9:FE:93:34:20:0E:49:9F:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04A768FEA8E911EF90D001AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:81:b2:b2:3a:84:a7:04:f5:4b:43:d9:5a:39:9c:1c:82:b3:
ce:03:37:38:b5:ad:dc:8e:f5:05:dc:83:e8:4d:56:28:64:93:
8d:18:ec:7e:39:e3:c3:71:34:04:53:27:7e:93:7f:a7:3e:43:
54:fc:0a:4e:11:57:7b:c3:cd:91:25:5c:8e:f2:b4:ab:55:19:
7b:a1:b5:39:37:c2:49:a4:20:46:df:31:13:c7:ee:4b:de:77:
88:6a:11:d0:3f:da:6e:4b:8d:1e:24:5d:72:77:28:a1:65:ac:
23:18:4c:d5:e7:d6:e7:8b:13:e2:fb:29:9a:54:1b:52:e4:b2:
f1:d8:dd:9e:4e:01:3d:f9:26:3a:ad:ca:02:f3:41:84:d9:8d:
30:eb:30:2e:68:22:e9:d0:fa:74:9a:80:19:cf:47:c0:f4:87:
b7:dd:ce:6c:0f:be:a5:ed:74:9d:4c:a3:e1:f8:ca:3e:ea:90:
5d:12:c4:4a:00:b9:94:1e:b7:55:9e:d2:0e:b6:a5:af:7b:e6:
aa:3b:ba:5e:fb:e9:ec:b1:28:36:25:81:b2:64:6f:0c:26:79:
91:fd:e0:c9:8c:c1:0a:2e:b6:91:2c:39:a6:9e:6c:66:88:f9:
b0:aa:46:4e:04:e8:9b:a7:e9:e7:9c:18:69:0a:c5:8a:3c:43:
36:d9:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:53 2024 by rpki-client on console-ams.rpki-client.org