Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7E05ECA0DB11EF9BE6B059762E951A.roa
File: 1D7E05ECA0DB11EF9BE6B059762E951A.roa (raw, json)
Hash identifier: sTo0padSMeJ7FhepR6KLcvQPqFSOG4T8zcKtYP+AIOs=
Subject key identifier: 6E:DD:51:4B:C0:EC:31:00:A9:8C:11:1E:3B:9B:FA:99:89:B5:43:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7E05ECA0DB11EF9BE6B059762E951A.roa
Signing time: Tue 12 Nov 2024 09:47:22 +0000
ROA not before: Tue 12 Nov 2024 09:47:19 +0000
ROA not after: Sat 07 Dec 2024 09:47:19 +0000
asID: 138915
IP address blocks: 154.223.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68654 (0x10c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:47:19 2024 GMT
Not After : Dec 7 09:47:19 2024 GMT
Subject: CN=6733242a-04d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:23:79:33:ca:80:e8:1a:1d:96:b4:dd:57:
ec:bf:31:74:ea:0e:71:fc:bf:73:de:4f:ad:54:c7:
e4:00:ee:f1:10:2a:4b:b1:99:c6:da:83:30:24:79:
3f:fb:5b:3e:45:26:21:a9:c1:ff:37:7c:4c:1a:9c:
41:f4:fb:a4:16:87:60:d0:c3:8a:39:fc:0b:16:e2:
7f:0e:54:c7:eb:12:88:ed:2b:d7:25:8f:59:84:67:
2c:db:79:21:dc:fa:2c:cf:13:cd:12:9f:d3:28:54:
47:b8:b9:4e:6b:a7:87:3b:8c:f3:fb:54:52:16:f4:
5e:a3:45:e0:ef:49:e6:79:27:13:84:75:2a:b3:7c:
91:d1:ef:4a:f2:af:a6:c1:bb:91:87:94:8a:7d:a5:
09:17:26:06:d6:fe:14:13:5d:42:7a:0a:31:15:9a:
bf:98:d6:86:63:22:9c:90:dd:3d:20:29:6a:a7:4b:
b1:49:76:c5:29:63:3a:01:d6:16:02:ed:9d:40:e4:
c8:8e:63:e2:c8:b0:95:01:72:3c:67:16:83:16:48:
99:66:e1:31:dd:a6:33:43:3d:b0:40:09:52:4b:dc:
37:f7:9d:9b:6d:a2:3a:fb:97:de:e5:62:12:3b:9d:
a5:25:83:ab:06:25:61:27:2b:5a:b2:1b:49:1b:bb:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:51:4B:C0:EC:31:00:A9:8C:11:1E:3B:9B:FA:99:89:B5:43:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7E05ECA0DB11EF9BE6B059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0/23
Signature Algorithm: sha256WithRSAEncryption
86:2b:2b:57:f6:50:e8:ef:7c:3d:02:b5:da:32:02:da:3e:fe:
39:58:22:17:90:86:2c:a0:c5:da:7d:ce:45:6c:dd:7a:6c:d2:
7a:36:c5:b2:44:5d:f0:1d:47:04:fe:b9:cd:ae:50:f7:97:9a:
fd:bc:1b:99:6d:a2:30:ed:92:71:d0:f9:8e:29:74:ac:26:c6:
47:f2:74:f6:2c:88:d0:c6:6e:33:cf:a8:b4:87:9b:e0:dd:8c:
f4:be:8d:6b:cc:12:4d:ca:e7:c2:d5:dc:6e:1c:a1:df:c0:a1:
fd:47:1c:a4:38:66:83:d3:f8:b0:24:c3:4d:4b:6c:20:8f:4a:
51:1a:36:23:9a:91:85:8a:3b:81:95:e0:c0:2f:15:94:67:e6:
9f:c6:3b:f6:16:5c:dc:4e:c5:c2:0c:9e:57:62:22:f8:24:cb:
5c:78:32:eb:d6:1e:57:b1:5b:6f:df:95:96:c1:de:3d:71:68:
cb:78:b9:92:56:82:e6:4c:7c:44:46:fb:bc:7c:b3:58:73:98:
09:85:e4:45:36:66:09:1d:0a:d1:d4:d0:d5:96:6e:66:9d:12:
97:32:04:4b:12:ac:45:e1:46:ca:61:50:81:4a:e7:50:9b:54:
fd:b0:6e:09:4a:69:d6:b4:e7:9a:db:55:2e:95:da:a5:69:df:
79:09:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org