Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F07310C976A11EFBC00655E762E951A.roa
File: 0F07310C976A11EFBC00655E762E951A.roa (raw, json)
Hash identifier: WYc7wnZaSIEm2IZoWAgavuuE5pbCRUmEETFecaH6mxU=
Subject key identifier: 31:4C:90:0B:06:59:7B:DD:93:47:3E:1A:27:92:29:81:D3:0D:88:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01048C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F07310C976A11EFBC00655E762E951A.roa
Signing time: Thu 31 Oct 2024 09:25:25 +0000
ROA not before: Thu 31 Oct 2024 09:25:21 +0000
ROA not after: Mon 17 Nov 2025 09:25:21 +0000
asID: 201390
IP address blocks: 154.91.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66700 (0x1048c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 09:25:21 2024 GMT
Not After : Nov 17 09:25:21 2025 GMT
Subject: CN=67234d04-0951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:ad:e8:0e:03:74:b5:42:94:fe:c8:2f:d8:
26:b3:c5:76:10:9c:7d:6a:34:92:67:ae:f4:74:39:
0c:cb:64:92:c9:c7:cf:fe:62:54:0e:74:00:18:c9:
8c:4b:19:5d:0c:45:c1:f9:34:9b:72:1f:0e:fa:51:
ce:92:46:dc:42:f8:fb:ed:c2:84:df:7d:2a:74:bf:
f7:e7:a4:4e:9c:72:3c:7f:d7:3d:58:63:12:72:8b:
2b:3c:fa:c2:59:a5:65:54:18:a8:a7:b9:06:c5:2f:
47:0e:ec:6f:3b:ef:b1:0e:09:ef:43:4a:e8:e8:da:
41:2c:63:56:ba:eb:b4:d3:37:e7:79:c2:bd:2d:81:
c2:64:49:3d:cc:57:a3:98:ea:ed:27:f7:f0:b3:fc:
29:79:ea:54:ff:1c:de:2a:74:d1:b1:04:4e:c4:0e:
c6:8e:17:93:29:06:23:e4:72:eb:b3:bc:4d:70:82:
46:19:86:23:b9:5b:c1:d4:1f:17:4e:19:ab:ff:24:
40:8b:dd:68:be:05:ec:4a:c8:29:e7:ed:81:a5:0e:
18:f4:8e:61:d3:da:7f:01:9a:0c:1f:62:7c:ab:45:
d5:81:57:fc:94:16:50:64:67:f2:45:53:c0:f5:8b:
9b:ef:cc:56:6e:93:2f:88:99:d3:1c:ce:38:24:32:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:90:0B:06:59:7B:DD:93:47:3E:1A:27:92:29:81:D3:0D:88:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F07310C976A11EFBC00655E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f5:2a:a7:27:33:d4:5f:d4:1d:36:b1:82:93:3e:6f:3b:3b:
11:9c:37:6d:cb:e1:51:5b:b9:1f:9c:8b:17:75:9b:19:7a:f6:
a7:3a:c5:21:ba:94:63:f0:5c:fc:1f:07:20:ac:3e:16:c0:ea:
f0:61:36:26:f6:51:46:13:1c:8e:0f:ae:a5:4c:10:ef:c1:e1:
72:c9:00:ab:23:22:c9:7b:bb:85:c7:63:0c:71:7d:34:7f:99:
c1:5a:d3:fc:80:02:bc:8c:55:19:e1:3f:db:d2:d9:45:fd:cf:
b5:05:ee:e7:1e:ad:e5:92:43:1e:6a:0e:43:f9:08:93:47:b6:
3d:6e:c2:f2:48:de:58:fa:04:bc:7a:40:31:80:44:e8:6b:35:
59:30:f1:d9:4b:90:d0:e1:2c:95:b4:32:53:8f:7f:7b:b9:01:
09:43:c3:ff:82:97:81:37:ed:d9:61:7f:56:ff:ae:f4:9f:ec:
c3:8e:d9:a2:e6:da:b1:fe:0b:98:75:ab:27:03:43:22:86:08:
21:95:c0:ca:43:56:db:e4:a6:68:5a:f4:a2:3f:e4:f5:00:b6:
16:58:35:db:62:e9:9a:77:7f:aa:91:e5:47:14:17:03:3c:a8:
0e:1f:dc:93:55:8b:8c:b8:9a:4e:0e:6c:e6:fb:f5:b4:aa:f3:
6c:bb:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:55 2024 by rpki-client on console-ams.rpki-client.org