Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BAE6FA91E111EFB5318977762E951A.roa
File: 09BAE6FA91E111EFB5318977762E951A.roa (raw, json)
Hash identifier: CC3aAxWuHh1uFWZCPjOZLhoXhBcysv84LywJAG6vwA8=
Subject key identifier: 07:7E:06:46:DA:9A:9F:7E:DF:3A:3D:8C:EC:16:22:0C:75:3C:98:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010115
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BAE6FA91E111EFB5318977762E951A.roa
Signing time: Thu 24 Oct 2024 08:21:59 +0000
ROA not before: Thu 24 Oct 2024 08:21:55 +0000
ROA not after: Sun 26 Oct 2025 08:21:55 +0000
asID: 38638
IP address blocks: 154.194.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65813 (0x10115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 08:21:55 2024 GMT
Not After : Oct 26 08:21:55 2025 GMT
Subject: CN=671a03a7-a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:dc:95:e6:19:6f:f6:fb:46:ba:c9:fc:e1:
f5:92:7b:a1:5d:dd:6d:fd:07:99:12:fb:da:4a:d5:
de:68:d1:6d:5d:4b:aa:8a:b1:9d:84:de:07:d0:31:
80:bb:1a:d6:81:c6:09:a2:12:24:51:c3:51:a7:70:
cc:21:18:e2:a8:92:ac:1d:c0:c3:a8:e9:de:ff:52:
1f:a1:5e:68:21:7e:9f:58:6f:94:32:ba:22:66:05:
18:3e:4f:93:87:7a:fd:6d:ad:ba:9f:08:b5:d8:a3:
cf:2a:7c:79:2b:5c:65:07:bf:11:15:9b:6d:96:4f:
80:48:10:70:85:43:ab:cf:1b:af:9b:88:39:59:78:
d9:9f:85:e1:ba:32:ad:db:eb:1f:ae:8d:c1:3f:a2:
ec:9f:e2:bf:05:ce:da:a5:c4:f7:9b:9e:6b:cb:5c:
ee:8f:55:50:14:a6:c1:b9:ce:a2:3d:5c:0d:17:0a:
e9:19:4e:05:02:9e:82:c5:0c:2a:be:96:5d:87:6c:
bc:c1:b7:53:8e:64:32:0d:34:cb:e0:0b:ad:0e:15:
28:6f:3f:14:cf:d2:04:56:5c:98:33:e5:80:29:d5:
48:05:d8:77:39:13:9a:f1:1d:74:b0:9b:79:ea:24:
96:50:44:b2:8b:2f:77:0d:6b:78:5c:bd:f3:d5:60:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:06:46:DA:9A:9F:7E:DF:3A:3D:8C:EC:16:22:0C:75:3C:98:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BAE6FA91E111EFB5318977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a3:e1:c5:fc:5b:ce:1a:40:6e:db:50:e8:49:74:24:44:47:
64:72:4f:c9:98:05:88:ac:fb:99:24:18:99:a2:e8:3f:de:d9:
dc:1d:47:92:98:38:a8:46:71:e6:75:9c:18:fe:d8:d7:b4:48:
aa:b6:17:81:9b:85:11:c1:e4:e9:55:fa:b5:d7:ae:91:8a:4f:
10:a9:76:a1:48:18:01:a7:21:32:00:fa:e3:89:52:49:f4:ee:
ba:d4:ae:33:1c:17:d0:ba:fa:ee:77:44:07:1d:8d:e1:5e:ed:
ce:61:91:59:dc:a4:76:a5:88:4b:b7:f1:05:28:87:83:3f:99:
3f:bb:98:ff:da:52:fe:f5:9d:dc:35:ad:32:15:a8:83:a3:50:
57:88:f1:39:ad:c4:a0:c7:23:f5:b4:5c:2c:5b:40:81:29:02:
b4:1e:d7:71:8c:7d:f5:f6:11:69:af:84:c1:84:e1:46:6a:42:
42:6b:f7:84:5c:88:8a:e0:e1:30:12:2c:7a:dd:3f:35:92:29:
10:74:f2:64:e6:31:c6:7e:15:9c:7d:ca:6f:59:63:a4:17:d0:
56:8b:1d:d0:33:e4:7b:ff:be:76:c1:24:e5:c8:be:08:2e:9e:
22:f1:39:fb:57:f9:1c:52:7c:fb:a6:0f:4b:a2:5d:4d:f2:bc:
be:04:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:54 2024 by rpki-client on console-ams.rpki-client.org