Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082E30A2A0D811EF89B95348762E951A.roa
File: 082E30A2A0D811EF89B95348762E951A.roa (raw, json)
Hash identifier: n1grCk/1ZIQ7z9YFtM3t8FOyEQOrQ0/sWt1aeK/lMRQ=
Subject key identifier: 51:61:38:28:99:E3:1B:44:B4:4A:AD:28:01:BA:DC:CE:67:AA:25:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082E30A2A0D811EF89B95348762E951A.roa
Signing time: Tue 12 Nov 2024 09:25:18 +0000
ROA not before: Tue 12 Nov 2024 09:25:15 +0000
ROA not after: Sat 07 Dec 2024 09:25:15 +0000
asID: 138915
IP address blocks: 154.223.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68620 (0x10c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:25:15 2024 GMT
Not After : Dec 7 09:25:15 2024 GMT
Subject: CN=67331efe-5be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:5f:ca:24:b6:96:70:a0:a9:b0:68:e5:8c:
63:60:0a:22:39:19:c3:c6:f2:5b:95:18:8a:c9:ac:
26:14:ba:1d:7a:51:1b:9f:4b:ae:77:94:ff:67:60:
d4:21:e7:b5:3a:12:bd:06:d4:a2:52:90:68:74:a5:
9e:97:df:5a:5e:12:22:43:4c:76:7c:0c:0e:1e:e9:
0e:58:7e:9c:f4:4b:13:60:f2:8e:9a:57:b2:0e:a8:
6f:09:59:88:42:3d:14:8c:d9:88:c4:8e:91:d7:6d:
2c:b0:ed:8c:75:03:0f:4d:93:67:aa:53:ff:22:27:
37:5b:3e:ee:f6:08:5e:ae:56:be:cb:af:1f:1d:e7:
b0:90:64:d8:80:10:64:8e:3f:82:08:25:c5:3d:38:
fe:ce:1b:c4:75:e5:a4:37:e3:dd:61:92:de:64:82:
4f:da:a3:3a:80:d8:4e:aa:42:82:c2:0d:02:a5:1c:
fd:11:da:d9:26:ed:7e:24:d7:06:ac:d3:7e:ed:e9:
e2:f3:25:96:47:05:16:45:a2:0e:e5:b6:6a:13:26:
e5:71:41:2b:b5:47:0f:b3:45:0a:26:f0:c4:84:f4:
ab:f3:5b:13:23:06:d5:91:04:fe:1c:75:00:e1:6d:
6b:40:7d:cc:94:dc:f4:ad:28:24:86:ea:4c:64:41:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:38:28:99:E3:1B:44:B4:4A:AD:28:01:BA:DC:CE:67:AA:25:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/082E30A2A0D811EF89B95348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.32.0/23
Signature Algorithm: sha256WithRSAEncryption
73:42:bf:74:af:aa:bf:b0:52:d7:e5:b5:a6:62:67:54:dd:05:
92:30:69:84:96:a6:16:8f:56:9b:7f:57:51:92:fe:71:c4:02:
0b:2d:0f:8c:97:0f:5f:fb:fb:0d:35:be:30:ca:f7:34:48:ba:
8d:5e:0b:4e:9d:d0:db:e4:62:e2:15:68:e9:97:24:9a:b0:26:
3b:14:e3:c3:8f:44:75:3e:c5:df:06:58:09:f7:cb:cc:f9:4d:
26:59:bd:9c:2e:be:00:82:cf:e3:f9:82:42:4d:4b:f4:ad:e7:
ef:64:83:fc:ec:be:56:de:c2:f3:f5:b6:f9:45:48:38:a1:1b:
b4:d3:78:7e:00:15:a3:44:f3:d9:e9:6e:69:50:a2:72:59:4a:
01:84:27:14:1d:20:75:4d:4c:00:d5:c0:0f:c7:10:4f:4b:6e:
51:19:17:c7:0a:00:af:ae:3c:20:46:5d:38:fb:e6:5c:90:c0:
b0:3c:2a:ba:a0:f8:49:d5:64:ae:0b:14:12:bb:8e:2b:d2:c9:
98:24:1a:6d:70:3c:49:5f:73:21:fb:ae:9d:22:d3:71:b1:90:
db:87:c4:ec:a3:a5:cf:4e:c4:52:cb:9e:fc:a8:46:87:b5:5e:
9e:96:fd:52:37:c8:97:2e:88:9b:21:0b:b3:99:eb:d0:c8:8b:
44:b0:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:54 2024 by rpki-client on console-ams.rpki-client.org