Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98E23AA8E211EFB5B60583762E951A.roa
File: 0F98E23AA8E211EFB5B60583762E951A.roa (raw, json)
Hash identifier: jT1nxTYvHY/WhhUI00nDTZiPoY0fjiixwaix2wEm51k=
Subject key identifier: 22:6C:C5:AE:30:BA:0A:C5:9A:A1:5E:3B:C9:21:D3:12:E2:EC:41:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01109F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98E23AA8E211EFB5B60583762E951A.roa
Signing time: Fri 22 Nov 2024 14:57:15 +0000
ROA not before: Fri 22 Nov 2024 14:57:11 +0000
ROA not after: Tue 03 Dec 2024 14:57:11 +0000
asID: 62240
IP address blocks: 154.194.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69791 (0x1109f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:57:11 2024 GMT
Not After : Dec 3 14:57:11 2024 GMT
Subject: CN=67409bcb-dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:37:1a:bf:4d:9f:3e:ee:80:90:f7:0d:79:
44:d3:85:40:74:2b:90:d4:1c:bc:c9:87:b5:77:70:
69:3b:71:1c:e4:e9:89:7c:9a:db:50:77:e4:cb:15:
c1:97:6a:df:e9:b2:bd:27:6a:3f:9b:43:6a:30:69:
3f:65:c9:45:ee:c6:d0:ec:a6:a8:23:e4:81:c4:ae:
65:3d:ca:71:3a:87:97:4c:c8:06:ef:bf:8a:3a:95:
7f:ff:d5:04:51:6f:5a:76:b9:a7:31:3d:b4:92:97:
83:ea:5f:1d:e2:38:f9:36:9f:7f:57:2c:53:cd:7a:
e4:64:55:83:d3:31:f0:2d:73:1c:95:94:6c:1d:a9:
7f:b4:ac:40:07:b0:15:73:2d:4b:44:a9:8e:78:a3:
c9:93:c0:b6:51:9b:a8:c8:98:2a:f2:98:38:5f:2b:
14:a6:4c:c9:c8:00:29:10:78:46:42:eb:87:17:ba:
6f:bb:79:00:cd:9d:7c:17:a7:97:64:bd:1c:3c:f5:
6c:06:6a:ac:9a:0e:7c:dd:4c:df:bc:f0:89:0b:5e:
03:0b:df:6b:5f:57:08:d0:48:94:31:b7:6c:a4:26:
20:94:63:57:39:83:99:24:0a:93:29:fd:e7:0b:e9:
3d:90:19:01:6d:14:f1:ad:c8:a9:5f:c7:6b:59:53:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:C5:AE:30:BA:0A:C5:9A:A1:5E:3B:C9:21:D3:12:E2:EC:41:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98E23AA8E211EFB5B60583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bd:c0:e3:0c:cb:08:86:5a:e8:09:c0:56:21:af:5b:e8:83:
78:21:19:52:8c:9b:e6:ff:fe:78:10:2e:11:0d:a5:9f:0e:c0:
80:3e:07:4b:35:22:c1:c4:46:ac:b3:bf:e1:67:a3:e1:69:73:
78:22:28:11:fe:49:2f:97:19:8d:bf:5a:d0:28:55:b6:d6:4c:
af:d8:42:f7:ea:05:a8:41:5d:41:e5:db:11:ce:ac:d9:ea:5b:
f7:43:48:65:67:1d:b6:83:eb:8f:bc:df:70:bc:f5:50:6f:af:
0d:99:7b:16:82:e5:6a:4f:fc:df:61:02:eb:1d:4b:f7:c1:7c:
cb:de:5a:5b:52:7f:98:86:5b:12:b1:68:bb:da:68:63:77:8a:
95:c1:fe:03:5b:c6:dd:fa:10:8c:eb:70:f6:d3:52:ea:5c:9b:
06:a7:f4:16:80:41:66:ae:3b:16:e0:ae:90:16:21:3f:d9:4e:
12:75:5e:5a:52:18:b7:c1:55:11:f9:fb:0f:66:b4:aa:b1:21:
92:d4:d8:23:38:39:68:b0:b0:0b:66:17:79:ee:44:45:c7:94:
91:85:de:37:8b:73:61:08:ac:b8:56:37:99:84:65:e7:03:04:
7a:be:d1:47:e8:87:f2:a3:8d:da:8d:e5:88:e9:f1:33:e0:dc:
fa:fe:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:56 2024 by rpki-client on console-ams.rpki-client.org