Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C22275A96B311EF85C52159762E951A.roa
File: 1C22275A96B311EF85C52159762E951A.roa (raw, json)
Hash identifier: IN1E7M4iZEeWNEKqiJmgSSIa6Xh9hBQvMELKdyxcUVQ=
Subject key identifier: BB:AF:76:66:A4:CB:4A:A8:48:AA:D2:A9:D1:4B:E1:25:BA:DB:FA:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010409
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C22275A96B311EF85C52159762E951A.roa
Signing time: Wed 30 Oct 2024 11:35:49 +0000
ROA not before: Wed 30 Oct 2024 11:35:43 +0000
ROA not after: Wed 11 Dec 2024 11:35:43 +0000
asID: 138915
IP address blocks: 154.203.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66569 (0x10409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:35:43 2024 GMT
Not After : Dec 11 11:35:43 2024 GMT
Subject: CN=67221a15-0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:b2:92:d8:30:87:1b:cc:0e:eb:48:0e:4a:
aa:ca:de:54:4c:5f:b3:c7:64:be:12:b3:48:bb:e1:
37:7a:66:ee:07:80:59:69:47:d3:86:93:a0:6e:03:
ad:35:ef:af:00:fa:54:54:54:67:68:52:b7:1c:08:
8d:db:da:9f:4a:d9:d9:6d:49:73:ec:ed:ef:ee:2f:
03:da:85:18:fd:4d:f4:48:b2:ac:a1:af:ef:8d:56:
d4:08:4b:96:3f:2c:1b:9d:4c:25:6e:71:d0:9c:33:
d2:db:05:e2:fd:1f:52:15:aa:ff:4e:dd:79:3c:e8:
3c:9e:e6:24:82:68:71:91:7e:f4:47:9c:c4:c7:f2:
77:dd:57:aa:69:5d:aa:6e:ae:be:a0:33:1e:41:47:
65:75:ca:fd:ca:a0:d8:5c:e1:ac:72:62:f7:43:23:
a9:6b:4e:35:91:e1:ac:7d:7b:7e:a7:78:71:5c:99:
0d:ec:cb:1a:50:32:a9:d7:93:91:7b:f1:da:11:b3:
f3:da:75:c3:68:2b:c2:32:41:e7:be:61:6f:f5:27:
46:af:f0:61:f7:14:40:be:23:8c:e2:34:3d:67:1e:
19:71:e9:15:d6:ed:b6:4d:68:57:c0:c3:a8:11:95:
43:5f:9a:65:39:ba:be:b0:a0:31:f3:5d:bf:64:6d:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:76:66:A4:CB:4A:A8:48:AA:D2:A9:D1:4B:E1:25:BA:DB:FA:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C22275A96B311EF85C52159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.130.0/23
Signature Algorithm: sha256WithRSAEncryption
15:cc:d3:51:31:e7:09:8f:cc:02:fe:e7:6a:59:b4:e5:23:a0:
5e:02:6b:9d:6b:6f:0e:84:c6:74:6a:58:4f:db:5a:7d:21:b3:
66:92:3c:2d:6f:1c:97:23:e1:7f:3d:b2:a3:1c:bc:25:b9:77:
6b:1b:4a:18:83:f1:73:f6:1c:7a:ee:16:3b:40:d0:56:a3:08:
99:36:95:23:8d:1d:78:a3:30:e4:f8:25:ac:a4:4c:8b:48:a6:
63:88:ba:06:b6:7e:1f:a5:c6:23:fb:6f:19:6f:31:c8:1f:d1:
7f:54:32:de:79:ac:ed:80:a1:b1:18:e4:6e:df:ab:cc:ff:ce:
ba:a7:09:a9:c9:14:ac:76:0b:10:2a:d8:c0:db:8c:09:02:08:
17:87:35:34:d0:ac:e0:0a:09:14:dd:dd:3e:9b:10:95:42:93:
06:1a:d1:31:d8:a3:f1:0b:7c:27:8a:28:9a:99:da:e3:10:29:
2a:fa:1b:01:d4:2b:27:b1:de:26:f6:8b:70:60:1e:d2:9e:42:
47:b1:b2:45:97:ef:51:d7:6e:56:1a:a3:f8:43:ab:f7:54:f5:
b7:24:6c:83:5c:dd:0f:f9:42:5c:c7:e8:a6:64:ba:89:67:f8:
43:35:37:a1:aa:a1:e0:a7:b8:03:92:da:6d:62:48:36:79:b8:
fd:ec:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org