Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAD141AA8CF11EFB9746D8C762E951A.roa
File: 1AAD141AA8CF11EFB9746D8C762E951A.roa (raw, json)
Hash identifier: 0ovnRr+ZtlA9ppnfcgBUjSe967LuErXEDDieckBWdJM=
Subject key identifier: C0:94:FD:54:E5:28:D7:A9:14:9E:43:59:9E:7E:39:58:30:A9:14:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAD141AA8CF11EFB9746D8C762E951A.roa
Signing time: Fri 22 Nov 2024 12:41:33 +0000
ROA not before: Fri 22 Nov 2024 12:41:29 +0000
ROA not after: Sat 30 Nov 2024 12:41:29 +0000
asID: 137443
IP address blocks: 154.223.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69673 (0x11029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:41:29 2024 GMT
Not After : Nov 30 12:41:29 2024 GMT
Subject: CN=67407bfd-8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:5b:4c:44:ee:23:99:91:74:62:c0:c6:43:
ee:09:ae:05:28:32:a3:51:9d:d7:f1:92:eb:1f:18:
e5:5d:1c:2c:1e:c9:7c:0b:13:5b:78:54:92:f4:bb:
24:8a:8d:20:c0:e6:f4:83:28:c4:70:61:c1:95:29:
1e:89:34:cf:f7:0c:3d:c5:d4:cc:97:6b:52:5f:29:
88:5c:ba:d3:4f:14:08:f7:17:09:76:2a:27:60:ac:
71:4f:0d:ed:da:22:fa:26:5b:6e:ac:14:7f:0d:cc:
c9:03:89:fa:e2:61:eb:4d:8b:5a:fb:62:e0:37:d1:
e7:5d:ef:23:30:ad:d1:39:09:b0:ed:a7:28:af:e3:
9a:23:b6:2a:a1:d5:c3:00:49:5a:75:aa:a5:73:cf:
30:29:5c:86:fc:5c:d3:5e:96:3a:1b:18:80:02:98:
d3:9f:3c:d3:09:a0:3b:6c:b8:b4:a0:f3:88:63:a8:
f0:75:08:c7:e0:52:b7:08:b5:9d:74:bb:70:fe:cf:
98:94:80:63:a2:52:98:5b:ef:6d:83:82:46:a3:06:
b1:ce:2a:00:ea:e2:f7:7e:3c:f2:ed:06:f6:05:69:
1b:07:9c:2f:f0:21:79:fd:3a:50:fb:02:40:ca:fe:
56:74:b7:18:44:9b:b9:02:c0:6d:ed:b2:80:1f:ff:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:FD:54:E5:28:D7:A9:14:9E:43:59:9E:7E:39:58:30:A9:14:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAD141AA8CF11EFB9746D8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:fd:64:ec:52:fd:cd:51:3d:98:ed:14:9a:58:25:ab:05:
c6:66:82:7d:47:89:ca:16:17:4b:79:9c:8a:4d:dd:6d:1d:d6:
fa:0c:f6:05:61:79:74:7b:d0:9f:25:ec:76:88:46:98:ce:cf:
eb:47:54:d7:19:e1:4a:a3:78:53:55:db:0b:9c:75:fc:c2:c8:
82:fb:61:20:e4:e6:22:57:e8:5a:a5:f4:4d:39:43:a2:79:61:
5c:cd:21:e2:e4:c4:d8:ad:b1:1d:b9:f0:6a:1a:1a:fb:e5:3b:
67:88:26:5c:3d:18:5e:d2:e5:29:bf:f7:46:19:94:34:8b:c3:
f5:43:2b:27:8f:de:f3:54:99:1a:aa:c0:93:cd:78:21:11:28:
12:ae:63:81:ae:e5:33:62:f8:cc:34:f7:6e:73:5a:ab:c8:92:
f2:59:6f:11:98:93:2c:bb:15:69:ea:61:eb:26:ce:bd:2f:5e:
78:57:f8:19:96:d7:36:5e:31:ea:b5:bb:c5:28:80:98:34:73:
ea:ae:c1:43:38:87:ed:04:38:5c:96:08:5d:42:bb:d1:d3:aa:
b5:77:09:aa:11:ba:9e:ca:0a:d8:4c:b6:57:51:ba:d5:fd:44:
f8:b3:3d:c1:d7:b9:e9:82:e3:b4:23:09:be:86:13:e2:1c:e4:
9d:46:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:58 2024 by rpki-client on console-ams.rpki-client.org