Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21503A8E9EAE11EF8A61B2A6762E951A.roa
File: 21503A8E9EAE11EF8A61B2A6762E951A.roa (raw, json)
Hash identifier: CeJSlkUetScgI4twl3QDIoYG4LWo0GwsC5wk3MZw/mw=
Subject key identifier: 3E:FD:47:F9:6E:AA:C7:87:7D:30:FF:F3:23:85:51:33:82:8C:BC:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21503A8E9EAE11EF8A61B2A6762E951A.roa
Signing time: Sat 09 Nov 2024 15:20:19 +0000
ROA not before: Sat 09 Nov 2024 15:20:15 +0000
ROA not after: Wed 11 Dec 2024 15:20:15 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68121 (0x10a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:20:15 2024 GMT
Not After : Dec 11 15:20:15 2024 GMT
Subject: CN=672f7db3-6dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:7e:b7:bb:3f:35:1b:49:fc:6f:2d:ee:a7:
9c:4b:d9:c5:2a:83:4a:27:ee:a0:b6:ab:00:a2:7f:
4b:37:03:32:c8:00:b6:02:f5:39:f0:c0:94:e0:a4:
ed:b4:a9:46:1a:0b:9b:02:e4:0b:73:8b:91:98:a0:
4c:d0:17:fd:2f:8d:48:6c:0b:93:18:68:27:d2:0c:
fd:0c:b1:e4:e6:8e:de:92:c8:31:7a:18:84:a0:fc:
33:0f:f0:4a:dc:4f:9c:02:2e:a3:0b:58:73:a5:25:
36:48:c5:4d:9e:86:f8:ae:2f:03:aa:f0:30:32:37:
92:55:a2:c6:8b:db:66:fa:e2:af:25:85:f5:22:91:
c9:80:78:27:ef:46:c7:12:37:3c:1f:9a:77:8c:8b:
d0:5a:14:0f:d7:c8:45:de:04:af:58:cd:c7:6e:58:
55:d1:4e:62:9f:14:d4:03:44:2a:e7:54:ae:92:b6:
01:fa:45:33:e7:0b:ea:03:31:68:65:4e:7b:04:06:
6e:ee:f2:6f:e0:2c:c5:da:45:99:94:bb:78:ec:6e:
69:b8:06:47:52:c2:b8:d7:40:e0:8e:b1:a8:d8:df:
7d:1e:3a:4e:03:7c:4d:a8:80:28:6b:e2:9f:b7:93:
06:a2:a2:66:cf:30:fb:06:6b:0f:85:83:c9:f6:3e:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:47:F9:6E:AA:C7:87:7D:30:FF:F3:23:85:51:33:82:8C:BC:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21503A8E9EAE11EF8A61B2A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:03:6f:aa:ae:cf:b4:fc:ae:ae:d7:e2:23:a3:51:8a:74:74:
86:fc:11:47:99:74:c9:be:2b:75:1e:c6:e9:6e:d6:b5:9f:e0:
f6:4f:88:8b:17:78:10:c5:fa:7a:9e:89:de:1b:8b:ea:fe:fa:
6d:05:10:fe:c7:9b:a0:f0:3f:94:5e:d1:89:29:5c:b7:ac:3d:
87:b6:a6:22:21:9f:22:f4:ad:97:7b:3e:86:18:76:37:90:12:
e6:bd:83:c7:6c:9a:b8:ef:ec:01:e6:39:3a:3e:d1:c9:50:c4:
b1:57:65:6a:48:27:b6:e7:d9:68:44:39:25:d3:01:62:1b:00:
20:20:07:15:9b:d5:0c:6a:6b:e2:c5:bd:63:21:a1:8c:83:5a:
ca:e5:ab:eb:58:33:72:32:a6:84:a4:7c:3e:16:af:f7:63:a0:
7d:84:9f:49:cc:94:2c:dc:b7:1f:d7:55:52:80:9c:b3:98:4e:
71:59:37:b3:49:36:48:80:87:6f:58:4a:be:ad:b8:de:4f:f3:
e0:af:87:c6:99:b2:a5:25:30:ba:14:43:83:d5:41:a9:38:a3:
7b:0e:eb:15:ee:28:6a:6c:d6:e9:6c:50:18:cb:be:c9:e4:a5:
70:3b:bc:6b:b2:34:9a:69:e8:a0:4b:25:d1:68:da:67:94:89:
9c:08:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org