Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB3F3DC9D1A11EF923363BB762E951A.roa
File: 1EB3F3DC9D1A11EF923363BB762E951A.roa (raw, json)
Hash identifier: IgRoI/PwSPWRXkUU/x4AARkAljzgjbfTUhr8Pay2mVM=
Subject key identifier: BC:90:AC:05:9D:7D:68:36:D0:58:FC:C3:10:13:D2:1D:E5:FE:AB:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB3F3DC9D1A11EF923363BB762E951A.roa
Signing time: Thu 07 Nov 2024 15:08:18 +0000
ROA not before: Thu 07 Nov 2024 15:08:15 +0000
ROA not after: Wed 11 Dec 2024 15:08:15 +0000
asID: 203020
IP address blocks: 154.202.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67959 (0x10977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 15:08:15 2024 GMT
Not After : Dec 11 15:08:15 2024 GMT
Subject: CN=672cd7e2-aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:49:10:4d:9c:76:40:7a:39:18:29:44:d2:
6f:69:27:70:fb:6f:74:88:60:78:5e:62:3e:bd:00:
db:dc:25:d5:4b:ae:b3:45:eb:6b:16:00:4f:b4:af:
c2:00:54:5b:f8:55:d1:f4:5e:56:b9:61:a4:13:66:
ed:67:ea:b3:27:56:ea:0e:73:5c:d0:75:e6:91:ea:
8b:d4:3a:3e:4e:7d:be:39:8c:00:ec:d0:a8:d4:f3:
e5:69:ab:d1:b8:5a:32:e5:86:f6:b2:95:b7:29:72:
fd:5f:6d:ab:3a:62:b9:a6:b9:b5:9a:3f:15:96:cc:
5c:28:db:ed:09:6a:de:64:03:f4:a2:0b:fa:07:36:
70:96:11:67:68:29:22:3b:81:d6:46:22:49:fd:29:
82:48:c1:6f:52:9d:16:30:b6:52:a0:03:20:bc:df:
dc:89:46:f4:6c:a1:cd:3e:27:bd:0a:09:ac:76:e8:
da:f1:31:12:f9:3b:73:7c:84:fe:cc:67:68:5e:28:
9d:84:c9:c9:b7:a8:a1:ed:75:49:be:93:5b:d8:af:
0c:85:13:c6:f6:11:4f:51:97:a0:18:0e:d9:26:bc:
af:fe:de:89:2e:3c:49:cd:e6:d7:9b:63:b1:2b:79:
52:24:66:40:91:8d:5b:29:20:e8:ac:7d:93:3c:74:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:AC:05:9D:7D:68:36:D0:58:FC:C3:10:13:D2:1D:E5:FE:AB:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB3F3DC9D1A11EF923363BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.103.0/24
Signature Algorithm: sha256WithRSAEncryption
51:89:d0:1e:47:f6:9e:b5:64:f8:b6:8c:5d:ca:f0:cc:ba:b2:
48:43:74:7d:6b:63:68:d3:02:33:52:f7:b3:30:39:5f:95:a5:
1d:40:ac:39:7d:bd:01:d8:8c:85:3c:65:c9:fb:3f:36:5a:d4:
95:b4:da:76:c6:81:14:6f:12:16:28:1f:a0:fb:7d:23:ef:c1:
a2:49:ff:6e:83:a3:09:6b:06:70:fe:2b:b1:2f:19:51:9d:f7:
5c:d5:b6:cd:30:ba:0b:cb:c1:5b:61:02:e8:44:12:75:df:f1:
61:3d:f4:8b:47:fb:bb:87:92:c1:b2:aa:b7:ec:77:23:8b:a9:
d4:18:38:15:e8:41:45:ec:a2:95:46:a9:2f:d9:d2:a1:52:83:
11:55:27:49:57:87:44:2f:2d:ed:cf:b1:c4:2e:86:c1:f4:70:
63:3b:ea:97:2e:1c:a2:f5:23:20:77:97:70:e7:5e:be:30:20:
b6:de:ae:43:e7:31:f4:1f:a8:7e:a1:44:5e:41:e5:8f:57:d8:
4e:75:53:07:2c:ba:9a:6b:6b:ce:46:06:e7:d3:13:44:36:7a:
51:60:cd:02:4a:a2:4b:50:13:c0:d7:37:3f:26:bc:a7:b5:56:
d2:35:95:eb:eb:95:b1:4d:8b:56:bc:b5:8f:11:9c:ac:a4:39:
03:b1:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org