Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177B5F9C9EAF11EFBFFB13AB762E951A.roa
File: 177B5F9C9EAF11EFBFFB13AB762E951A.roa (raw, json)
Hash identifier: zrHdJksN8RuiOC3XuplD5Al5sq8tBFD8mxcrDgwDBcI=
Subject key identifier: 4E:EF:B6:4C:52:DD:1D:34:A6:FA:ED:57:A1:07:83:BC:B5:43:AE:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177B5F9C9EAF11EFBFFB13AB762E951A.roa
Signing time: Sat 09 Nov 2024 15:27:12 +0000
ROA not before: Sat 09 Nov 2024 15:27:09 +0000
ROA not after: Thu 12 Dec 2024 15:27:09 +0000
asID: 54600
IP address blocks: 154.202.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68133 (0x10a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:27:09 2024 GMT
Not After : Dec 12 15:27:09 2024 GMT
Subject: CN=672f7f50-56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:06:36:57:86:51:d3:35:76:45:71:2d:9e:
c4:56:3e:f2:43:93:ca:4f:0d:c1:cf:b0:d9:0d:fa:
1d:33:a5:13:3d:64:5c:53:4a:b4:1e:92:57:9b:88:
e0:07:21:a5:d8:09:7d:8e:78:28:56:9c:94:4e:64:
76:45:bd:f2:6c:b1:a3:7d:02:95:c6:b1:ee:73:83:
54:6b:0a:ae:2c:2a:4b:4d:96:46:25:d6:2e:8b:f4:
8d:ff:8d:3f:23:e4:ef:d2:e0:8c:db:71:8d:e1:fc:
a5:ea:04:c8:91:97:16:ec:c9:50:c3:85:fa:98:37:
7e:36:2e:cf:ea:76:8d:6d:ac:bb:c2:59:d6:67:0a:
c2:f9:4b:e5:ab:f4:9b:bd:79:2e:20:44:77:1f:d0:
fe:1a:ff:91:2b:35:99:88:bb:35:fb:fe:df:0b:1b:
e9:12:a3:0d:5f:79:f3:6c:e4:c3:f1:28:6a:6d:ef:
4f:32:78:8a:ac:5a:f6:84:4f:50:ad:50:88:87:32:
7f:64:18:e4:51:26:60:6d:d1:aa:4b:b9:95:0c:3b:
a1:d0:8a:d0:e5:e7:60:55:1a:ea:ae:fb:fd:a8:53:
1c:89:3d:45:f5:9d:5c:88:3b:a8:2d:df:bf:bb:24:
d8:dc:e4:25:44:83:a4:07:e4:65:6b:f0:4b:b9:72:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:B6:4C:52:DD:1D:34:A6:FA:ED:57:A1:07:83:BC:B5:43:AE:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/177B5F9C9EAF11EFBFFB13AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.160.0/19
Signature Algorithm: sha256WithRSAEncryption
be:a3:e6:6e:91:23:c0:5d:e5:1a:f8:c3:ec:8d:df:1c:4d:6f:
63:e8:4b:52:5a:19:06:d5:ff:cd:06:c5:08:b4:c7:2f:24:60:
20:2c:17:02:66:b9:1c:d9:de:c6:b0:d4:13:79:31:1d:f4:8d:
22:77:13:45:a2:c9:43:23:b4:58:7e:be:db:24:67:14:42:20:
19:5c:15:c9:93:4a:38:04:6f:08:18:29:45:e2:83:af:5b:0d:
fa:ec:e6:f8:c5:28:18:91:e1:3c:57:5d:1a:9e:63:6d:3d:cf:
44:67:31:00:bd:c9:6b:61:0a:05:b2:ea:43:5e:96:89:d3:f7:
54:58:46:1d:91:17:3e:7f:56:59:59:12:10:9a:64:c5:ef:36:
ed:69:f1:71:88:b7:63:5d:4b:6b:1f:30:81:cd:f3:5c:16:36:
ed:e6:a2:e6:71:1c:a6:42:63:3e:3e:e1:4c:46:58:35:d4:a4:
73:f5:5b:24:86:1b:5a:7c:cb:40:05:8f:a9:69:72:cc:56:a6:
59:1c:d5:e9:c1:8d:a0:65:83:eb:70:90:d9:66:fb:80:f1:a9:
5e:7a:09:17:cf:61:05:5f:2b:8a:b9:5e:ff:8b:6e:d7:8d:98:
31:0b:f8:11:b6:34:70:ad:a5:5d:4b:e7:e2:dd:12:ed:3f:f6:
eb:91:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org