Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11373C189DA211EF94CE789A762E951A.roa
File: 11373C189DA211EF94CE789A762E951A.roa (raw, json)
Hash identifier: WbxRPkUhYUz2h3iy5/g/NRpHNhwjTHmYqmZIYiH9JQM=
Subject key identifier: 53:D0:74:78:19:FA:AF:A8:EC:79:BB:24:AE:47:27:17:C0:01:49:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11373C189DA211EF94CE789A762E951A.roa
Signing time: Fri 08 Nov 2024 07:21:27 +0000
ROA not before: Fri 08 Nov 2024 07:21:23 +0000
ROA not after: Sat 30 Nov 2024 07:21:23 +0000
asID: 150008
IP address blocks: 154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68018 (0x109b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:21:23 2024 GMT
Not After : Nov 30 07:21:23 2024 GMT
Subject: CN=672dbbf7-5f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:21:24:b7:7d:33:ac:f1:a7:b9:c9:83:ad:
21:23:52:94:20:50:c6:9a:34:d6:24:c5:56:50:aa:
b9:df:f6:f5:c3:46:ee:1b:42:2d:cf:6e:9e:06:d3:
9f:8a:6d:6a:60:e5:d0:89:25:9d:aa:e0:c0:ec:a9:
6e:1e:8f:a0:5c:37:95:f2:11:8c:2a:03:ee:44:03:
55:d1:1c:14:2e:a8:c4:9b:c6:1c:10:57:d3:66:b8:
ee:44:9e:ca:5f:91:06:bb:ce:6e:ec:44:ef:a6:b8:
4c:26:25:c7:5b:01:39:4c:69:98:33:06:7c:55:17:
e9:12:3d:85:2f:4d:90:23:60:99:93:0c:57:3c:c1:
a7:0b:72:23:a7:a3:34:86:9b:96:93:ae:ec:83:f4:
9a:87:7d:50:b6:77:24:e6:d3:96:ef:0b:13:39:49:
02:0f:48:2c:70:bd:d8:49:2e:cf:5e:be:d7:cf:97:
1e:b0:50:4d:f1:12:01:51:bb:f7:80:20:e9:42:18:
58:7a:c0:c8:17:37:3e:6b:4b:b4:b8:e0:5b:14:49:
a3:ab:41:6b:db:e5:b0:7c:9a:e1:0a:f0:a8:38:d8:
a4:2c:cf:39:5b:5c:35:54:09:ed:80:f9:9f:78:c1:
9f:07:bc:9f:0e:d4:d9:f1:a2:c8:b8:0d:6b:37:09:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:74:78:19:FA:AF:A8:EC:79:BB:24:AE:47:27:17:C0:01:49:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11373C189DA211EF94CE789A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:72:30:3c:2a:de:e9:fe:cb:0e:c8:d6:03:d5:6b:e5:ca:08:
ea:c7:e1:0d:8a:a5:4a:3b:88:ed:e4:98:29:e8:0c:10:20:5f:
3c:3e:5e:75:2c:da:0b:3b:c4:13:53:8b:95:69:16:7e:65:42:
04:9a:07:0f:1f:da:88:43:59:99:fc:89:df:c7:5f:55:8c:b1:
0f:c3:5a:82:49:ca:83:d1:7e:72:e3:71:b8:99:f9:ce:ca:bf:
ff:e0:e6:1c:21:11:c7:13:75:f4:f7:e3:bb:2f:e9:d9:ed:57:
7d:b4:bd:ed:37:5c:46:ee:5e:0d:4c:e3:ea:fc:3d:74:92:24:
1e:26:3b:64:2f:67:4d:43:a7:56:6f:9e:09:63:8d:b9:ed:63:
98:3b:db:d9:cf:0c:b0:3d:29:90:6d:77:f2:81:81:19:0e:50:
33:18:ad:a4:2d:10:40:9e:57:4a:93:08:25:ff:e7:ce:b5:68:
75:77:1e:4a:00:95:6d:86:55:05:b4:f4:01:c6:3d:29:2a:67:
3b:d9:98:70:53:a5:6f:03:f3:73:8a:48:36:0b:73:1a:77:c2:
e1:07:b1:a5:1a:a8:a4:44:87:4a:f7:43:af:37:c3:13:f9:b5:
79:0f:6d:b7:b1:95:eb:17:ad:3d:ad:1e:38:b7:72:65:4a:78:
fe:b2:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:56 2024 by rpki-client on console-ams.rpki-client.org