Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09819FF69B8411EFA2FDB8B8762E951A.roa
File: 09819FF69B8411EFA2FDB8B8762E951A.roa (raw, json)
Hash identifier: d5TtPcroapEZ24ni45zfwP30ZzEpv0p5dZmkAZBDVYk=
Subject key identifier: AF:24:6D:95:F4:1C:EE:9D:1C:9B:DA:8B:B9:3B:8E:8E:26:12:34:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010807
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09819FF69B8411EFA2FDB8B8762E951A.roa
Signing time: Tue 05 Nov 2024 14:41:27 +0000
ROA not before: Tue 05 Nov 2024 14:41:23 +0000
ROA not after: Mon 20 Jan 2025 14:41:23 +0000
asID: 135097
IP address blocks: 154.212.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67591 (0x10807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:41:23 2024 GMT
Not After : Jan 20 14:41:23 2025 GMT
Subject: CN=672a2e97-fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:32:a8:44:ca:53:17:f8:bf:1a:ae:a8:8b:
dd:fa:1f:62:6a:7d:6b:0c:2e:2f:e3:0d:e8:52:7c:
d0:32:fa:82:4d:ce:f7:03:2e:95:e4:19:f8:b0:a3:
91:3f:2b:d4:b0:ea:b2:8e:85:13:b4:85:38:64:de:
4e:29:53:47:fe:0c:81:fc:92:fa:52:a7:ae:f4:fd:
15:59:dc:85:c6:4b:e5:b4:3c:11:f5:23:29:63:b2:
6a:75:54:46:e2:db:28:f0:7a:ee:c2:ba:0b:00:ef:
a3:65:e5:36:84:c6:95:72:e1:b8:c0:ec:ec:49:f4:
76:07:a1:9f:e4:a2:18:ca:2f:69:3e:0b:4e:a4:f6:
4e:da:6f:46:bf:e4:2f:39:69:b6:9f:c5:c8:1a:a4:
65:ac:72:74:31:4b:13:fa:5a:cc:36:c8:09:ee:c2:
56:ee:ac:b3:a3:e5:97:99:c5:76:92:b9:f4:1d:b0:
59:ea:dc:7d:37:09:e7:57:9e:69:33:02:9e:b6:d1:
64:db:d5:82:98:05:b6:8d:11:a1:14:40:42:0d:b8:
47:db:af:60:b4:7d:d9:b9:34:ab:cd:c5:6c:c4:f9:
7c:39:b7:f0:53:03:cf:b4:1d:61:63:ee:29:27:63:
bc:d0:48:b2:10:ac:b3:3d:be:0f:78:39:ef:61:9b:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:6D:95:F4:1C:EE:9D:1C:9B:DA:8B:B9:3B:8E:8E:26:12:34:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09819FF69B8411EFA2FDB8B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.164.0/22
Signature Algorithm: sha256WithRSAEncryption
92:95:20:4d:dc:27:94:04:af:bd:a3:7c:6b:70:78:06:95:e6:
fe:6c:14:03:6a:4b:a0:cf:16:85:d4:7c:10:d5:fd:eb:f7:9a:
9d:29:86:f6:3f:45:df:eb:5b:ca:8a:b4:b3:63:56:99:be:66:
1a:6f:73:0d:5d:e7:51:4a:b0:1f:00:76:3f:2b:52:46:5a:f5:
cf:3b:0e:3a:1e:36:e2:01:68:4c:67:62:d9:ad:2c:4c:8f:2d:
46:ee:db:c3:02:ee:d0:b2:c8:6e:c0:b8:97:16:aa:74:f1:2a:
f8:68:9f:61:a7:cd:3f:35:40:55:80:fd:6d:89:dc:d6:ba:cd:
2c:cc:21:e8:54:33:84:2d:8a:3d:bf:07:00:d5:99:75:b5:59:
0e:66:b6:6d:b4:20:12:00:b0:04:c2:8d:ea:74:1e:83:e1:9d:
75:28:12:8c:43:e8:98:f3:e5:56:48:49:23:22:9f:82:d0:ee:
6c:5b:1f:89:06:fb:a4:ca:a7:91:75:fe:72:d2:35:8f:bd:27:
0a:d6:d0:10:4d:34:93:23:b7:ca:9c:d4:04:29:6c:d9:02:74:
24:c4:5a:0d:6c:79:11:e1:d0:f8:ec:da:d4:25:0a:73:05:b4:
a3:68:3a:07:5d:93:9a:d6:ed:6a:ae:73:a8:a2:48:95:8c:81:
d7:9a:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:54 2024 by rpki-client on console-ams.rpki-client.org