Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1958DB80A33411EFACC63659762E951A.roa
File: 1958DB80A33411EFACC63659762E951A.roa (raw, json)
Hash identifier: yGZm83sORFYIYhksPSFwMerNk+LK7gWOVWkPi0OCAKc=
Subject key identifier: 27:D8:0E:18:B1:ED:D6:98:99:D4:B5:60:C1:5E:0B:72:0F:32:EF:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1958DB80A33411EFACC63659762E951A.roa
Signing time: Fri 15 Nov 2024 09:29:23 +0000
ROA not before: Fri 15 Nov 2024 09:29:19 +0000
ROA not after: Sat 17 Oct 2026 09:29:19 +0000
asID: 132813
IP address blocks: 154.205.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68996 (0x10d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:29:19 2024 GMT
Not After : Oct 17 09:29:19 2026 GMT
Subject: CN=67371473-b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:1e:a1:dc:39:a9:9d:28:6a:4e:5d:39:53:
0d:d8:72:ba:13:ab:27:ee:bc:8b:72:36:66:a7:1b:
2c:75:3a:6d:1f:f1:d2:f1:1b:4c:6c:33:3e:c3:09:
09:33:14:07:bb:03:18:8f:cb:9f:5f:ff:a2:5e:7d:
f0:46:3d:34:12:82:aa:25:36:9b:eb:f7:27:e4:2e:
4a:fb:7f:66:c6:80:2b:e1:c6:d0:35:17:f8:5f:c8:
fb:2f:16:3c:01:68:c6:22:8c:e2:57:f0:4c:36:69:
e3:03:96:b7:93:68:45:09:e2:a3:6e:f7:8d:b7:fb:
98:70:11:3f:56:9a:ff:8f:2b:ce:f1:63:35:ef:9d:
ed:10:8b:c1:99:f3:c3:0a:71:8f:23:09:27:c1:77:
d5:c8:ad:ca:78:31:fd:4e:c7:c7:01:88:ec:32:00:
5b:6b:b0:67:75:7d:bc:cc:40:1f:19:f1:20:a2:bb:
39:dc:52:ca:3d:66:5a:8a:33:2e:f5:cf:17:de:0a:
2b:e8:f7:18:6c:20:32:a3:0c:70:eb:3f:e0:4f:86:
b2:85:f9:22:64:a7:09:92:f3:82:ca:ed:e4:13:72:
c6:d7:e1:dd:55:7d:ab:d2:7b:a0:b6:4d:48:7b:75:
ad:7f:7e:39:06:59:b6:32:ea:7c:88:e6:1c:27:61:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:0E:18:B1:ED:D6:98:99:D4:B5:60:C1:5E:0B:72:0F:32:EF:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1958DB80A33411EFACC63659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2d:90:eb:f8:8f:77:58:78:3e:6a:3f:45:58:b7:5c:a3:2f:
fc:58:d2:46:f9:42:dd:b2:04:c1:8c:f1:d1:71:7c:d9:48:ab:
03:35:dd:e0:04:5a:f1:c5:05:25:a7:1d:39:e5:f1:19:0a:66:
17:99:ea:e8:09:2b:e9:c1:06:01:2d:0f:50:e3:e1:c1:29:a4:
e9:64:1b:98:5c:a5:bb:5f:7f:98:12:6a:28:c0:f1:6b:71:a4:
e4:77:72:8a:97:e4:38:c9:1e:7a:dd:0b:db:8e:91:67:19:26:
ee:78:32:9f:5e:37:15:c2:5f:8c:d0:4f:d5:67:54:fc:1b:7f:
f0:5b:ec:ec:af:f9:f0:ae:47:9e:42:4e:a0:b0:2c:ff:87:bd:
49:8d:fb:48:77:96:db:18:5a:92:53:07:43:22:1a:fe:fc:17:
ae:cd:72:a7:a0:0b:b7:97:97:93:0f:58:ae:c0:b8:a4:0c:d7:
cd:b6:2c:4c:76:15:ca:3a:61:61:52:86:76:a7:07:a1:58:83:
b8:ea:22:86:f6:c1:a5:d6:7d:4c:db:9b:5b:57:5f:a8:bb:4b:
9f:bb:ee:65:b5:5f:42:96:69:c4:cc:fd:99:5e:b2:d8:4c:3a:
8e:90:a8:79:0e:bb:2f:71:00:86:e7:98:95:17:b6:0a:93:23:
ed:e7:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org