Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25855A9E6AA111EFB2D66E6C762E951A.roa
File: 25855A9E6AA111EFB2D66E6C762E951A.roa (raw, json)
Hash identifier: xNjCaztM7EgnVl/n9svMADvkGfeGBS4yuv5uBFtOPLo=
Subject key identifier: A4:00:06:2D:11:AC:5C:E3:7A:45:99:53:DC:5B:D8:2F:03:BA:49:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25855A9E6AA111EFB2D66E6C762E951A.roa
Signing time: Wed 04 Sep 2024 09:36:22 +0000
ROA not before: Wed 04 Sep 2024 09:36:19 +0000
ROA not after: Thu 24 Apr 2025 09:36:19 +0000
asID: 63888
IP address blocks: 154.207.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59945 (0xea29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:36:19 2024 GMT
Not After : Apr 24 09:36:19 2025 GMT
Subject: CN=66d82a16-ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:41:9c:87:06:6b:10:81:cf:33:9d:e6:b5:
c4:42:71:5c:29:55:4b:05:2f:4b:43:09:2b:ff:8c:
2e:b1:02:40:12:5e:13:1c:cc:be:c7:d0:6a:5a:60:
49:02:99:1a:f2:1a:75:35:5f:9a:92:2b:cc:5f:4e:
4b:75:65:2b:b2:c3:36:48:0f:30:02:d1:97:f0:69:
34:4c:62:31:d2:81:8f:e1:fb:1f:6c:ab:2d:f9:ce:
e3:d6:a8:ef:7c:ab:d9:34:29:1c:14:92:14:a1:48:
97:0c:9d:2f:ce:44:45:36:6a:28:de:37:92:62:2a:
f0:f0:23:d0:43:99:7f:1c:14:4f:8f:a8:09:d6:ab:
08:1e:01:a6:7c:f1:ff:71:03:5b:4c:80:8a:5c:c0:
5e:c5:d0:dd:43:7b:97:e9:69:7a:ba:50:08:aa:4a:
ea:1e:68:77:6b:d3:e1:8a:57:a5:2d:9c:18:e9:e9:
14:f4:a9:c3:ae:18:f7:0c:84:2f:5f:cc:8c:e3:d4:
65:c1:1e:ce:7a:d7:d6:c4:30:e8:1b:39:db:00:4c:
42:1b:ee:84:6a:bf:3d:57:43:77:3d:1b:d6:63:cd:
ac:29:46:c4:95:fc:c4:ed:a5:e4:90:8c:87:82:54:
fb:3d:9e:8a:c8:77:7a:1d:24:98:5c:fb:2f:4a:7e:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:06:2D:11:AC:5C:E3:7A:45:99:53:DC:5B:D8:2F:03:BA:49:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25855A9E6AA111EFB2D66E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.64.0/20
Signature Algorithm: sha256WithRSAEncryption
75:53:8b:1f:c3:02:5c:52:bc:42:19:3d:ac:ae:85:29:d6:d9:
2c:bf:ca:f6:ff:b7:13:43:7e:a1:d2:d7:98:0f:a3:06:84:29:
42:be:23:c6:85:1d:cb:40:d3:0a:f5:c1:90:9a:49:13:77:db:
fe:e9:30:00:66:fc:51:f5:73:b8:df:bd:f2:2f:4c:3d:57:7a:
0e:c9:3e:b1:1b:45:1f:f5:66:59:7f:48:26:f0:a3:cd:97:c3:
92:2d:88:1a:32:ab:1e:0b:f0:47:53:a8:50:40:e5:97:c0:6f:
86:75:da:11:c4:99:b9:b0:2d:06:bb:93:18:25:1c:c4:0c:c0:
93:d4:32:47:3f:24:e7:ac:75:0f:6d:f2:11:c9:26:47:6c:59:
a7:c5:05:fb:d9:13:3d:24:71:92:d0:1e:46:22:1e:04:4a:37:
80:9d:5f:d4:02:9d:2e:e7:6d:9e:80:20:ac:71:c1:1d:90:ee:
f3:05:ad:74:07:dc:bd:8c:c7:ec:3f:d2:00:ac:a1:38:99:4b:
6b:7c:dc:07:25:fa:65:34:9e:77:f7:d5:e0:8e:77:82:10:9c:
db:56:9a:d0:60:87:22:1f:bf:5c:45:fd:24:bd:85:0c:1f:a2:
f6:c0:91:1d:06:3e:35:0f:ca:02:0f:ea:39:a6:f2:bd:0c:e6:
8f:b5:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org