Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2968B9AC950E11EFA01D217A762E951A.roa
File: 2968B9AC950E11EFA01D217A762E951A.roa (raw, json)
Hash identifier: VxqCqKzIliX8+3UJzCsqQ9vtl7xfdK+1fuJoLWAxn8g=
Subject key identifier: 5C:94:5C:F3:47:9A:DC:5A:CA:5D:9A:0D:32:27:A7:07:05:9C:6E:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2968B9AC950E11EFA01D217A762E951A.roa
Signing time: Mon 28 Oct 2024 09:22:33 +0000
ROA not before: Mon 28 Oct 2024 09:22:29 +0000
ROA not after: Wed 27 Nov 2024 09:22:29 +0000
asID: 44559
IP address blocks: 154.205.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66221 (0x102ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:22:29 2024 GMT
Not After : Nov 27 09:22:29 2024 GMT
Subject: CN=671f57d9-27f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:ac:8a:24:72:55:41:ad:a2:1b:e4:cf:5c:
26:a9:70:98:c7:98:58:4e:41:a0:6f:b8:b7:19:f8:
6e:0f:e2:de:7d:fb:03:1a:0d:e1:b1:e2:db:f5:43:
9c:5d:73:3d:0a:7b:2b:5b:aa:7c:6d:f5:e0:36:35:
b9:ed:fb:4a:ec:ba:93:ce:aa:c1:23:07:1d:07:4b:
fd:44:7f:f2:82:54:b3:7a:a7:dc:b1:71:70:77:62:
eb:2c:05:81:55:11:69:2c:11:14:c3:9b:dd:1f:05:
be:80:70:02:cd:83:3d:83:f0:5f:d2:ef:73:fc:e0:
9c:7c:35:48:76:e6:89:4c:d0:32:4a:b5:ee:de:8e:
bf:6e:82:78:88:92:81:0d:2d:07:19:be:17:fe:38:
1e:43:75:32:0b:d0:15:e4:be:25:94:8a:83:f8:8f:
24:53:6d:c0:44:2a:b5:b3:f8:d6:96:44:06:12:b3:
85:35:bb:e9:8f:c6:62:ae:6e:79:a1:4c:ae:86:38:
74:1e:9e:53:ff:07:62:5b:3a:37:61:de:85:0c:78:
07:2d:0b:8a:af:c9:26:a8:66:57:4c:d9:0d:e4:cb:
1a:06:ca:bd:18:fa:f2:9c:95:2d:22:bc:11:e1:d2:
3e:40:11:5f:3f:4f:72:c1:99:60:e9:48:db:99:33:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:5C:F3:47:9A:DC:5A:CA:5D:9A:0D:32:27:A7:07:05:9C:6E:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2968B9AC950E11EFA01D217A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:56:e2:8e:c7:46:f5:34:43:2b:4b:5e:0b:04:8f:d9:0d:1b:
0c:a0:48:37:13:28:fb:d7:95:a5:d9:4e:18:d5:d0:62:91:e2:
60:8a:11:14:bc:31:13:ee:05:21:30:57:89:ac:44:55:6a:34:
86:64:d0:94:c5:36:70:ea:d5:6b:be:54:3a:be:88:bc:13:15:
fe:da:7c:4d:3f:e1:52:74:17:0a:3b:25:52:14:4f:7e:00:80:
fb:8e:76:b3:88:ca:e4:9b:82:2c:bc:62:42:76:24:72:e3:cf:
47:76:18:7e:80:b3:b6:f9:32:0f:37:bb:a0:17:ef:83:c0:ca:
d4:3e:fe:fa:71:0c:14:3c:51:ea:ad:fd:b4:46:84:f6:c9:9e:
a8:2f:09:eb:0e:8c:c9:9f:a6:7a:27:18:f7:94:ae:70:da:39:
85:14:2c:0b:c7:79:97:53:5a:a7:1a:ba:ae:e4:da:9a:70:57:
18:28:7d:c8:d6:79:4e:e0:52:fc:71:25:e5:f5:57:ef:e4:1b:
be:fa:0c:9c:b3:58:42:e7:19:f2:8d:93:91:2f:06:82:dc:87:
5e:7f:bc:f5:8e:ed:f1:ef:97:43:46:62:84:f7:5e:bb:15:4c:
b8:fd:dd:07:63:df:65:a9:c3:f6:fc:38:0f:f1:b4:f3:2a:35:
41:aa:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org