Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B3A144A32D11EF8FE341AB762E951A.roa
File: 22B3A144A32D11EF8FE341AB762E951A.roa (raw, json)
Hash identifier: Wr08KAmFm+VWiecGt37dcTFfqH021nzWpUjOOM/tUG4=
Subject key identifier: A1:8A:A2:0E:BB:9C:A6:57:15:AC:CF:9B:6F:59:39:35:4B:5D:FB:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B3A144A32D11EF8FE341AB762E951A.roa
Signing time: Fri 15 Nov 2024 08:39:32 +0000
ROA not before: Fri 15 Nov 2024 08:39:29 +0000
ROA not after: Tue 10 Dec 2024 08:39:29 +0000
asID: 397630
IP address blocks: 154.201.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68948 (0x10d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:39:29 2024 GMT
Not After : Dec 10 08:39:29 2024 GMT
Subject: CN=673708c4-671a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:75:1d:be:05:21:f8:60:c1:e7:e1:12:a2:
51:0f:65:39:a3:60:d8:8d:65:14:fd:38:c2:d9:5f:
10:0d:0c:11:fc:d3:cc:8b:79:0a:10:2b:b0:1f:31:
45:17:a4:46:38:83:63:58:f5:38:9e:7b:62:4a:f2:
7d:bb:c5:06:a4:08:32:45:b5:3f:3a:b1:fa:9e:0b:
e7:7a:e5:81:31:54:b9:58:ce:2f:6e:46:2c:04:2b:
44:37:dd:98:5e:f9:65:71:91:57:fe:40:3b:5e:db:
a2:86:3a:8a:b7:e2:ce:98:db:6f:3d:65:87:5b:3c:
d9:89:75:4d:00:22:90:ab:2b:ed:03:06:9d:8a:4f:
7c:c7:f8:6b:e7:6b:b9:cd:22:69:86:3b:e9:ae:22:
90:7c:59:c1:e2:ba:00:40:ae:44:4a:f6:02:3a:d7:
a0:7d:b1:9f:b3:54:84:5c:74:99:1c:63:b8:69:da:
0e:02:92:be:3c:32:a0:e8:42:aa:8b:c4:28:2f:b3:
4c:76:3e:cb:56:a1:57:7b:c0:60:cc:82:27:90:7c:
ca:cc:1b:75:71:3e:74:bf:b9:2c:38:12:4b:38:ed:
cb:8a:42:90:e7:27:7e:c1:47:23:a4:13:41:31:bc:
c5:68:1d:00:1f:13:90:84:5b:81:4e:4d:7b:b5:21:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:A2:0E:BB:9C:A6:57:15:AC:CF:9B:6F:59:39:35:4B:5D:FB:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B3A144A32D11EF8FE341AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:25:7e:78:fc:7d:29:87:47:db:28:e1:e3:7e:a2:a7:78:71:
1c:19:5f:26:0e:51:70:ed:2d:0a:a1:8d:a3:f1:23:89:ec:5f:
b5:07:2a:19:53:91:bc:69:05:00:f9:89:9f:f0:ab:c3:83:a6:
17:e8:d1:74:7a:d2:f1:de:7d:f7:55:83:cc:d7:90:6a:e3:63:
f1:d6:d8:38:3f:1a:67:ca:5d:18:80:79:0c:4b:34:89:e5:41:
e7:8d:e8:3b:31:1b:10:2b:40:9e:12:e6:bb:27:f5:ca:aa:28:
c8:da:3b:cd:23:ba:10:41:07:f3:f7:f8:9d:65:d7:81:ad:a9:
dd:33:95:89:7d:d5:4a:c6:78:87:9f:22:34:ce:ef:70:20:d9:
35:74:08:8a:ec:b9:07:55:5c:e5:60:c3:d7:c8:5e:6c:d8:3a:
68:7b:27:8c:ec:f6:dc:42:a1:c8:54:88:31:c5:b4:56:5c:b1:
55:c9:26:b8:82:b5:f2:46:ea:ba:2a:96:3f:eb:f5:16:47:93:
9b:4b:8d:d6:81:f8:68:6e:e0:d8:4c:eb:86:aa:c9:d3:91:6b:
87:79:f0:e4:9a:b9:8a:11:8d:2e:52:66:36:b6:6c:b5:f7:42:
63:c2:41:d1:f4:a4:f8:1c:0d:ea:53:85:de:67:7b:18:1f:a9:
01:0a:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org