Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508A71C911F11EF8C1216B4762E951A.roa
File: 1508A71C911F11EF8C1216B4762E951A.roa (raw, json)
Hash identifier: Qsaigw0u+8SxNMvrpzBPzGinfSoCpdj0VRJxa/vL0z8=
Subject key identifier: C9:0E:C4:81:FB:50:76:47:78:C7:F4:D9:CC:2F:D8:A8:B4:0D:54:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508A71C911F11EF8C1216B4762E951A.roa
Signing time: Wed 23 Oct 2024 09:13:36 +0000
ROA not before: Wed 23 Oct 2024 09:13:32 +0000
ROA not after: Tue 26 Nov 2024 09:13:32 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65772 (0x100ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:13:32 2024 GMT
Not After : Nov 26 09:13:32 2024 GMT
Subject: CN=6718be3f-725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:9e:aa:6e:31:20:a4:34:53:b8:70:cd:c5:
01:f3:07:66:83:df:df:17:de:06:b4:94:9c:79:c6:
f3:b3:2f:86:5c:7e:a4:f9:c3:a1:89:14:2c:10:73:
76:33:25:38:99:0f:a3:ca:93:ec:eb:fc:af:6c:05:
01:c3:f7:8e:74:bb:6f:c2:7f:66:cc:8d:87:84:41:
44:8b:82:6d:a2:9e:ba:ed:f7:13:a1:75:02:3a:48:
e5:7b:e1:2b:ee:c6:02:28:e9:a4:f0:15:ed:5f:95:
9b:80:56:84:a5:88:f7:f0:23:d8:51:ba:96:c4:4e:
ed:9c:2e:f6:30:58:2e:8c:61:fb:8f:51:25:a2:c3:
9a:c1:4e:db:1a:91:2d:89:c8:9a:98:c8:bf:38:1a:
a8:11:7d:4c:16:0c:5f:d9:16:36:51:8c:73:01:76:
e1:23:ef:36:dc:95:af:cb:6f:b9:e7:cd:42:71:5d:
66:0c:98:fc:fc:ec:75:a6:ef:ec:18:e8:47:2a:fb:
c3:0d:4e:62:24:d2:54:52:80:19:98:50:21:e4:da:
17:d2:8b:85:6a:5a:c3:a2:6b:28:bb:ea:95:fa:b5:
5a:7a:f4:92:93:28:87:cb:b6:bd:57:d4:6f:8f:84:
01:04:56:57:50:68:6d:a6:48:e6:b6:54:96:7c:21:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:C4:81:FB:50:76:47:78:C7:F4:D9:CC:2F:D8:A8:B4:0D:54:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508A71C911F11EF8C1216B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a7:74:5c:49:4d:bf:bb:93:05:dd:d0:bd:e2:30:b9:f4:9b:
c6:12:54:09:e9:9d:b4:20:57:26:a5:77:52:9c:1a:a3:55:5b:
3b:ec:54:81:46:1e:5a:ec:11:02:55:b6:56:d9:86:fd:59:7a:
26:51:e8:3e:2e:2f:92:f4:07:bb:10:47:a9:e5:b0:3d:99:92:
bf:8a:d6:d4:23:72:12:7f:48:b9:91:da:8f:26:dd:f6:b3:f3:
d6:0e:2a:38:7e:a8:1a:c7:c0:3d:a0:6a:64:97:99:df:dc:11:
fd:78:3c:d3:25:bf:5e:28:b8:5b:88:a4:36:f9:9e:f9:f8:28:
91:3c:d1:6a:e2:20:2c:90:00:28:71:66:cb:58:35:96:c2:28:
20:97:5b:6b:1f:16:20:c9:eb:73:76:18:ca:9d:0a:ea:9f:77:
27:29:52:e1:89:6b:39:88:74:37:78:58:70:cc:dd:15:f8:75:
ec:33:32:06:c4:94:8d:9f:d3:98:b9:67:6a:b6:22:83:db:14:
32:e3:23:23:9e:91:34:13:7b:e0:1f:ce:cd:18:23:6f:eb:7d:
b3:58:af:80:6f:2c:0d:be:35:6e:d5:38:d2:b6:de:82:9c:0c:
ef:0a:f8:27:f5:1d:33:e2:58:33:38:05:67:f1:98:68:61:be:
b3:94:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:57 2024 by rpki-client on console-ams.rpki-client.org