Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AE3178983311EF87411E4F762E951A.roa
File: 04AE3178983311EF87411E4F762E951A.roa (raw, json)
Hash identifier: 4Yi7k6YaeqgkG9+rfTz2Lzy6yF5mYQA9SOVtDHQmjBY=
Subject key identifier: 6C:47:28:21:D3:67:88:1C:53:9A:07:3F:51:AB:83:D7:5D:4D:2A:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AE3178983311EF87411E4F762E951A.roa
Signing time: Fri 01 Nov 2024 09:23:56 +0000
ROA not before: Fri 01 Nov 2024 09:23:52 +0000
ROA not after: Sun 01 Dec 2024 09:23:52 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66743 (0x104b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:23:52 2024 GMT
Not After : Dec 1 09:23:52 2024 GMT
Subject: CN=67249e2c-5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:93:80:d4:f4:d0:53:30:78:a6:be:6e:af:
57:0f:79:9b:cb:35:2f:7a:29:6a:98:57:44:03:be:
31:0a:e3:85:b9:de:99:72:74:ba:d9:2a:fd:66:01:
9b:0c:f0:82:86:85:8d:cb:ec:7e:69:f5:bf:ff:c8:
ee:1b:ea:21:b2:d6:95:a9:15:37:f3:a3:c8:85:3e:
2e:c5:52:39:25:a4:c9:fe:78:a6:d5:86:46:a1:5f:
40:b9:ad:52:53:ec:e8:5b:e5:6c:58:fc:05:33:84:
d0:39:17:96:a9:fe:3a:00:2d:ee:13:a6:e0:a2:e0:
8f:d4:7e:83:8d:b9:2c:3c:77:5c:0d:25:fd:7d:29:
11:cb:18:a4:af:92:f5:b7:c9:6d:0f:b3:94:36:a0:
fb:ba:15:be:b4:ad:21:b0:66:0d:11:01:ab:9c:57:
35:41:3e:0c:36:af:70:48:ba:cf:c4:e4:1e:6e:af:
e9:c0:8a:b4:44:b8:61:ac:a1:e7:a9:63:7d:ca:fa:
6d:86:18:c3:f7:75:8b:f9:c6:ca:82:86:c4:c7:51:
57:61:47:34:9f:f7:44:53:f7:be:4a:53:bb:90:dc:
57:08:88:17:cc:0f:3d:6c:42:8c:63:02:0d:8c:9c:
d1:71:5a:62:c2:a5:62:9e:17:c0:8a:f9:8c:45:f1:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:47:28:21:D3:67:88:1C:53:9A:07:3F:51:AB:83:D7:5D:4D:2A:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AE3178983311EF87411E4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:b6:ec:0a:c0:42:f9:c2:e9:b9:43:19:7a:28:31:14:50:cd:
94:01:20:89:56:39:e3:60:21:7e:cc:68:93:f0:cd:30:e4:81:
03:31:73:68:4c:de:32:56:78:6a:f3:56:c9:51:0d:d5:48:b7:
d4:72:6f:b3:12:25:fc:a6:b8:bc:1a:24:08:e9:ae:e4:c6:73:
75:a3:b7:cb:90:d9:2a:e4:db:eb:c7:5f:04:2d:16:18:f9:41:
94:66:97:7f:25:e4:33:a7:02:21:b7:d3:e6:c8:b6:9c:82:7f:
cc:f8:e7:35:41:1c:7e:c8:bc:c6:17:29:3e:24:7e:6c:c6:6e:
49:57:5d:5a:29:4e:94:72:47:cd:88:4b:2b:b8:cb:6d:8d:d1:
03:1c:6f:bb:89:75:bd:5f:40:36:25:f5:c1:e4:84:cf:30:dd:
84:c7:ae:3b:8e:40:5e:d8:db:8d:88:c5:6a:94:13:8d:b4:ca:
76:6c:65:40:5e:03:07:e0:95:08:af:89:27:03:74:41:f7:2c:
7c:57:be:5f:ea:c5:90:48:34:1f:7f:94:51:4d:43:7f:f3:9c:
7e:fc:9f:96:3e:18:6b:88:87:4c:a6:bb:7c:88:97:c0:65:64:
ff:60:43:d6:ee:94:22:66:86:4c:00:38:35:05:b7:d6:a1:f1:
29:b0:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org