Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114A0A6E986111EF9F49856E762E951A.roa
File: 114A0A6E986111EF9F49856E762E951A.roa (raw, json)
Hash identifier: 5lb//ZyfCGjyz3z/0vgmKth95l+QifP27URRkWHqvz8=
Subject key identifier: A1:8B:6C:5A:36:FD:E9:C7:FB:D7:B2:2E:3F:25:9F:5F:1E:C9:CF:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114A0A6E986111EF9F49856E762E951A.roa
Signing time: Fri 01 Nov 2024 14:53:34 +0000
ROA not before: Fri 01 Nov 2024 14:53:30 +0000
ROA not after: Tue 03 Dec 2024 14:53:30 +0000
asID: 203020
IP address blocks: 154.207.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66801 (0x104f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:53:30 2024 GMT
Not After : Dec 3 14:53:30 2024 GMT
Subject: CN=6724eb6e-2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:f9:a4:5f:8a:ce:6e:21:eb:e6:83:80:08:
38:61:eb:ad:94:30:e4:4a:45:12:8d:64:8f:ca:bf:
3e:bb:ef:05:3d:43:09:a4:3d:8b:0c:c6:1f:74:8a:
38:d9:84:fc:b3:d2:71:71:56:a6:1d:c3:75:86:01:
db:14:3f:cf:44:54:a3:f9:a0:99:50:6a:4a:fb:83:
f5:b2:b6:96:fb:6c:f5:3f:72:ae:8b:98:c1:75:60:
3a:b1:a2:84:b9:7c:f8:1f:71:c5:05:43:02:e5:c2:
bc:93:bf:26:36:b8:4d:3e:1c:8f:70:ba:b8:51:d6:
60:78:96:3f:23:ca:79:1b:b4:10:17:ae:c2:b8:5e:
96:8d:af:94:ac:11:8c:fd:2b:26:b4:1f:0a:7e:13:
ea:5e:ef:54:3d:2a:de:57:e6:b6:41:b1:e8:dc:f8:
38:ef:d5:bb:e7:da:11:92:1e:85:c2:25:e5:ea:dc:
9f:8c:5c:a7:16:7a:fd:de:d4:df:58:c0:a4:2a:f3:
73:2c:ab:bc:e4:27:f2:fb:7b:33:47:ee:40:e5:da:
fc:d8:83:19:07:1f:72:40:85:3b:b6:1a:7b:e1:e8:
f0:18:dc:ef:f5:cd:45:40:b7:48:56:e3:fa:51:dd:
bb:47:ab:32:a6:d3:c9:85:f6:6e:e3:9e:f9:10:a8:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:6C:5A:36:FD:E9:C7:FB:D7:B2:2E:3F:25:9F:5F:1E:C9:CF:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/114A0A6E986111EF9F49856E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.120.0/22
Signature Algorithm: sha256WithRSAEncryption
67:67:14:1c:de:07:86:90:b1:40:69:8d:b1:bd:1e:0b:7a:55:
68:70:66:62:5b:e8:c8:cb:83:26:f6:95:e5:c9:9d:c7:f6:96:
09:ea:f7:88:b4:24:d2:80:59:36:cd:b3:7e:0f:78:d0:33:96:
33:29:b8:51:72:22:0b:c3:2b:90:19:17:b5:de:26:a7:c7:2f:
a0:a5:d5:00:b7:ef:33:d9:16:37:51:0d:ea:ed:d3:88:c1:17:
61:8a:23:27:1d:93:55:4d:02:83:a7:f2:69:16:8c:7a:be:90:
7d:13:80:51:3f:80:16:ed:84:ed:f1:37:8b:ed:43:f6:3d:70:
6d:c5:03:c5:84:c6:82:eb:d8:17:91:7f:2c:98:30:79:72:cd:
47:04:fd:e2:9b:fb:22:28:e0:53:e9:a0:a2:50:6d:3e:52:aa:
8d:a5:81:c6:b9:77:d7:9b:7e:05:44:08:d3:ab:22:0a:16:1b:
a6:5e:73:9c:d7:d5:07:49:7f:87:09:66:f6:8b:cc:7d:be:84:
c8:85:b6:23:06:5e:69:5d:25:b9:0b:af:ac:c1:b8:05:4f:a3:
e6:01:dd:ab:d0:2d:b6:05:9f:7e:13:1f:0e:33:b5:3a:5d:97:
43:93:88:16:9c:dd:83:cf:f6:d3:0e:17:45:4a:39:dc:75:51:
e0:cf:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:54 2024 by rpki-client on console-ams.rpki-client.org