Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0ACC8A9D011EF9D98755C762E951A.roa
File: 27C0ACC8A9D011EF9D98755C762E951A.roa (raw, json)
Hash identifier: /fPPgtWDHapf1+Js3yaD3ARiAq3Y3PwtxnC3Gj7FaeI=
Subject key identifier: 4C:D7:84:08:F9:74:08:FA:6A:BC:2B:C1:07:3A:D2:C9:9A:C6:1B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011212
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0ACC8A9D011EF9D98755C762E951A.roa
Signing time: Sat 23 Nov 2024 19:21:36 +0000
ROA not before: Sat 23 Nov 2024 19:21:32 +0000
ROA not after: Tue 03 Dec 2024 19:21:32 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70162 (0x11212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:21:32 2024 GMT
Not After : Dec 3 19:21:32 2024 GMT
Subject: CN=67422b40-89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:cb:d3:0d:ec:80:af:ef:66:ad:82:fe:38:
8d:3f:79:d3:4e:69:5c:16:7f:06:02:ed:69:e9:6c:
d3:6c:43:f6:89:4d:6e:75:43:56:db:c1:47:7b:8c:
35:6c:4c:25:e1:e3:67:9f:77:c8:14:a2:81:bb:51:
17:c1:6b:7f:6c:73:ad:d3:0d:59:a2:50:70:7e:a3:
66:d8:40:c3:72:a4:76:e0:e3:b6:77:a6:fc:a7:41:
33:6f:87:21:f2:61:79:e3:3f:c1:77:0b:64:21:a6:
bc:73:18:04:2b:10:1b:17:4f:7d:50:01:bd:b5:39:
b2:1c:c3:ff:89:22:ae:b6:9f:23:86:41:66:87:d9:
6c:e9:13:47:b3:50:b8:06:a8:3d:53:29:1c:48:2a:
b7:b9:d6:33:c1:f0:b9:de:b9:6f:dc:d0:aa:4b:fd:
79:b0:b4:2d:7f:5a:5a:b4:a1:7e:c7:2e:19:20:7a:
2e:d3:4e:e7:36:c8:48:e4:5f:73:e3:5b:a0:39:73:
7a:e5:81:a2:fd:7e:e8:71:86:e8:66:3a:30:cd:80:
b3:9a:2a:44:0b:4c:73:72:25:93:4a:65:f7:e1:7f:
98:be:d8:47:d4:e1:30:f7:2d:3e:8b:65:79:f7:4b:
d9:48:74:78:50:c6:61:5b:4c:48:7b:b4:6b:48:1c:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:84:08:F9:74:08:FA:6A:BC:2B:C1:07:3A:D2:C9:9A:C6:1B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0ACC8A9D011EF9D98755C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c2:ad:69:8e:5c:52:e0:65:6f:fb:98:d0:42:46:cd:6f:5f:
86:7b:1b:c8:c6:5a:4b:8f:42:de:71:2c:52:7a:a9:25:a0:a8:
88:70:de:50:3a:44:c2:48:27:13:38:40:ac:95:c0:50:50:10:
bf:a7:a8:dd:0c:90:b5:06:78:46:78:62:7f:f0:63:62:c7:94:
0d:9d:1e:24:12:94:9f:e9:3f:0a:32:84:3d:4b:10:36:34:a2:
ae:16:29:13:f1:d3:a2:65:81:ae:dc:d5:41:ff:d3:50:8a:30:
6e:d6:af:25:2d:7c:57:a8:ed:4e:33:3e:08:5b:df:0d:92:7f:
49:e5:48:fc:b8:29:e8:6b:87:77:ae:4d:03:78:13:65:9c:bb:
a9:98:3a:87:fc:39:0c:de:94:0a:ca:ef:67:c8:af:5e:2b:c0:
a1:53:70:b7:c7:6e:84:8d:23:1b:76:80:8c:f2:da:61:3c:f9:
2a:4e:b8:fc:fa:8b:8d:da:1c:ac:8b:1d:ec:7f:80:7e:59:82:
0f:c2:96:8d:8a:9a:b9:d3:8e:53:25:49:3f:82:7b:6a:c0:a9:
77:c7:ef:d9:aa:a6:a9:90:31:f0:23:6a:c3:74:c0:00:f6:64:
ef:3f:67:eb:cd:df:9a:dc:b3:d5:f8:9a:5a:ae:74:9b:39:38:
89:2d:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:00 2024 by rpki-client on console-ams.rpki-client.org