Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CFAF658A25C11EFBEABB278762E951A.roa
File: 0CFAF658A25C11EFBEABB278762E951A.roa (raw, json)
Hash identifier: m0hJafX/19V0prk1gXCvCGS/3lihLPZlqrTqkC2cSBM=
Subject key identifier: CE:24:05:DB:32:A0:D3:30:E2:0D:F0:93:79:CE:92:73:2D:6C:76:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CFAF658A25C11EFBEABB278762E951A.roa
Signing time: Thu 14 Nov 2024 07:42:51 +0000
ROA not before: Thu 14 Nov 2024 07:42:47 +0000
ROA not after: Tue 10 Dec 2024 07:42:47 +0000
asID: 397630
IP address blocks: 154.202.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68826 (0x10cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:42:47 2024 GMT
Not After : Dec 10 07:42:47 2024 GMT
Subject: CN=6735a9fb-c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:2d:83:25:e4:85:f0:bf:35:69:b9:68:df:
99:63:35:d6:b6:e7:d8:19:3b:01:73:8a:e4:9f:c8:
77:59:d2:78:f7:d2:94:cf:1b:4f:8a:a6:8b:cb:91:
a2:ce:72:df:21:b2:ff:3b:ad:93:5f:db:41:8f:c9:
f6:81:68:85:3a:1d:b9:30:fa:69:5a:73:00:fb:8e:
63:01:e5:0a:43:c3:be:1a:15:b4:97:0f:e8:f2:28:
28:b4:ba:fc:4a:c2:b4:0b:76:61:8d:08:e6:79:ff:
eb:13:24:b5:5b:1e:7a:a1:3a:f9:03:81:8f:f6:98:
59:2c:b9:4e:7b:30:42:94:58:46:29:a6:0f:3e:09:
10:50:8e:07:78:50:f4:ad:28:12:0a:24:16:7d:a1:
a0:a2:04:1c:6d:60:d9:20:1e:18:4c:f5:2e:b7:32:
91:7f:90:94:eb:11:e4:6e:e8:80:18:f6:80:7d:bc:
6b:76:8c:87:1c:33:fd:49:03:3b:2d:a0:1e:bf:74:
18:d4:33:3f:6a:f2:6d:f9:b8:e2:4c:a9:b7:6b:35:
8e:f2:6d:78:ce:8e:53:e6:d6:6a:3c:63:af:4e:b6:
42:62:b3:06:8f:27:9e:ee:79:f2:0b:80:16:90:fa:
f8:dc:b3:8a:38:8a:83:48:3d:0a:c8:cf:a9:4b:8f:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:05:DB:32:A0:D3:30:E2:0D:F0:93:79:CE:92:73:2D:6C:76:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CFAF658A25C11EFBEABB278762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d9:5e:b2:24:d9:90:2e:64:b0:c7:37:5f:18:1a:62:d5:68:
cb:10:d4:b7:04:6e:6f:69:cf:23:67:9a:a2:9d:e3:58:42:46:
ce:6c:39:6f:23:18:63:7a:0b:db:e2:63:57:21:c1:e0:db:27:
53:41:90:06:46:01:0e:99:5a:60:a4:08:b4:ea:c8:be:e2:46:
ee:1b:cf:43:57:d9:31:ce:4d:ee:25:c4:a2:75:11:1f:5d:f3:
86:f2:c7:58:af:ed:41:bf:9a:ee:f5:15:f2:a1:76:81:6b:37:
d6:74:fc:ed:2d:3d:10:81:34:43:f8:e8:79:60:4f:11:10:6b:
e6:c0:30:f7:df:32:cc:d6:25:2e:69:03:f8:cb:e4:a1:ac:29:
5b:a1:a4:74:70:88:70:2f:18:33:73:92:c6:4e:95:d5:bf:49:
54:64:ef:99:00:93:1b:65:f3:cf:cf:04:3c:66:f3:39:fd:90:
04:9d:8e:08:53:36:82:c5:18:d1:8e:14:63:74:03:de:24:10:
2a:46:16:00:16:a3:40:26:7f:fa:74:aa:b4:af:8f:cd:e0:fd:
89:bf:8c:a4:f6:d3:db:b2:aa:06:47:e8:ff:b5:2e:d7:4e:75:
3f:e4:82:1f:4e:54:dc:36:33:67:f2:6f:60:e0:5b:48:34:4c:
4a:48:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:55 2024 by rpki-client on console-ams.rpki-client.org