Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C48E25CA4D011EF9404C471762E951A.roa
File: 1C48E25CA4D011EF9404C471762E951A.roa (raw, json)
Hash identifier: yBXIvZkDmOrXYBZz3vuuGIvPlYCK7WrTCJjPBXybj68=
Subject key identifier: 38:15:88:22:98:9B:83:98:4B:DB:DB:C5:7A:C9:FE:25:2A:AD:9A:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C48E25CA4D011EF9404C471762E951A.roa
Signing time: Sun 17 Nov 2024 10:38:41 +0000
ROA not before: Sun 17 Nov 2024 10:38:37 +0000
ROA not after: Mon 25 Nov 2024 10:38:37 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69296 (0x10eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:38:37 2024 GMT
Not After : Nov 25 10:38:37 2024 GMT
Subject: CN=6739c7b1-ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:63:56:dd:9c:8f:e9:13:cf:4b:18:6c:b2:
6d:a0:f3:ae:e7:b9:f8:64:cf:db:c7:7b:db:41:f7:
50:64:9c:1c:f2:aa:b3:a0:c7:47:e5:3a:fe:7e:03:
79:6c:bc:8e:e2:56:34:4c:91:35:45:db:cd:1e:05:
8e:0b:b5:99:2e:d0:b9:22:f1:5d:38:08:43:c4:10:
7a:96:f8:fc:06:49:2e:d2:a2:70:a2:94:ac:8c:55:
89:f6:97:04:29:c6:b3:68:88:f7:b5:6d:a5:6b:c7:
13:bf:d6:c3:7b:cd:8e:90:9c:59:c6:ff:9a:24:2b:
3b:9c:d5:41:9d:0a:c2:bf:13:b7:94:d3:4c:40:37:
5b:8c:13:49:6c:14:88:23:9b:63:17:9a:52:ab:7d:
29:40:40:58:35:0f:ba:8e:29:23:b6:ab:e6:25:67:
8d:23:00:29:ec:31:9e:d7:19:2e:ea:d9:a1:d6:d0:
0b:6a:04:2b:ee:87:ee:17:df:ca:44:87:3f:87:77:
8c:5e:db:e5:33:c7:ac:7c:0c:c2:80:20:c4:1d:d3:
1b:14:69:a1:77:9c:71:ba:c0:9b:b0:61:d1:dd:67:
f6:b5:7c:eb:b6:6a:b8:a7:00:1c:35:2f:e2:79:d9:
e4:b0:6c:c8:fc:01:6a:fd:7a:9a:12:51:1c:e5:a9:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:88:22:98:9B:83:98:4B:DB:DB:C5:7A:C9:FE:25:2A:AD:9A:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C48E25CA4D011EF9404C471762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:0b:dc:61:05:75:00:57:e1:31:27:ce:1b:a0:d2:99:2e:5a:
18:d5:c1:00:d6:e3:57:55:5d:29:39:ac:8c:59:02:cd:de:87:
0b:84:17:0e:86:fe:68:f7:1b:15:35:9a:f5:d0:6b:e7:02:61:
cc:bc:a0:ca:11:86:50:43:ca:4c:74:96:d6:4c:8d:bd:57:0d:
7e:12:4a:a6:b5:91:a9:30:3c:cb:53:25:8f:d6:52:24:4a:2f:
fe:6a:31:96:36:c2:af:cc:68:ff:cc:cb:3b:85:ab:6d:d4:9d:
97:15:92:56:0f:b6:6e:0b:0a:53:5c:cc:5a:ad:c9:74:e6:ba:
78:d1:73:04:b9:ce:f0:e2:61:48:45:c0:3f:45:36:77:ac:f8:
ce:7d:31:39:c8:6b:7d:76:cf:f4:64:84:cf:eb:91:97:12:42:
11:15:6b:b6:06:e5:b0:aa:88:bc:fa:b9:8d:6b:e5:37:be:ec:
b5:41:a5:9d:1f:77:f2:5e:51:91:3a:ac:6d:82:28:f5:14:08:
48:22:c7:3b:07:01:da:d4:20:c1:14:2b:b4:c5:72:a6:33:47:
08:d5:bb:52:46:e1:86:d0:a6:0e:aa:35:fc:8d:c4:4f:65:8e:
be:ff:1d:2e:6a:b9:21:a8:01:b8:ca:93:3b:1a:7e:e7:98:ac:
be:ba:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org