Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A379824905111EF9360ADA4762E951A.roa
File: 2A379824905111EF9360ADA4762E951A.roa (raw, json)
Hash identifier: IK1HwwasaOit6xeLSDdjX9Tsw+BjiXDBHIloVfUWX/g=
Subject key identifier: 27:FA:6F:B8:85:E9:94:C5:81:AE:F9:B1:D5:80:55:30:BA:FD:9F:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01008D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A379824905111EF9360ADA4762E951A.roa
Signing time: Tue 22 Oct 2024 08:39:35 +0000
ROA not before: Tue 22 Oct 2024 08:39:31 +0000
ROA not after: Tue 26 Nov 2024 08:39:31 +0000
asID: 395886
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65677 (0x1008d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:39:31 2024 GMT
Not After : Nov 26 08:39:31 2024 GMT
Subject: CN=671764c7-c95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:67:1f:a5:1a:0e:6a:55:64:1b:70:90:93:
03:47:0a:88:f7:93:47:dd:90:b7:83:f9:56:97:a1:
df:21:65:c4:46:20:9a:74:ec:31:0f:c3:47:80:03:
1f:7c:18:d7:9c:b2:20:6f:c1:9b:c5:81:90:33:6d:
09:e2:33:fc:7a:9d:f4:68:bd:37:95:bb:1d:e5:a0:
b0:39:e4:e1:fb:de:bb:76:7e:d1:51:40:38:07:4e:
46:42:0d:a7:80:1b:6a:9b:8f:ac:ae:8a:64:5d:dc:
99:20:09:a0:2d:20:b2:f6:fa:e8:c6:2f:ff:56:89:
13:89:7f:e9:c2:66:70:83:ae:87:dd:84:a1:bb:26:
41:4c:e3:77:b0:39:79:e0:b7:99:55:28:5d:a2:fd:
67:5e:2b:5c:aa:e5:71:89:55:79:a1:c3:e0:55:83:
4a:c4:30:a2:c9:fb:e1:94:47:5e:da:ae:98:90:ee:
be:65:f9:cd:69:5e:7c:77:13:df:ae:4a:1c:e1:07:
83:a6:f3:30:cd:78:fe:f4:1d:33:29:be:1e:cc:de:
9e:a4:11:05:ef:bd:01:10:b5:fe:46:94:36:ac:5d:
d0:79:38:e7:15:17:a8:13:df:c4:db:5e:87:76:f0:
01:a8:2c:1e:26:32:5e:8d:20:49:b2:8b:8c:70:30:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:6F:B8:85:E9:94:C5:81:AE:F9:B1:D5:80:55:30:BA:FD:9F:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A379824905111EF9360ADA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3a:0a:e1:e0:15:13:39:37:a1:f7:91:9c:03:fa:06:22:4d:
1f:92:25:52:59:b1:cd:12:1b:ad:cf:11:5f:40:51:b4:db:f5:
68:ac:af:13:59:4c:ff:40:69:c9:47:a0:97:6c:6d:b1:64:69:
83:eb:af:90:9f:03:11:90:cd:b7:85:f0:9c:f7:6e:7a:45:e5:
d8:46:d6:e0:90:7f:06:76:48:9b:c8:b8:35:fb:be:58:d1:26:
67:fd:eb:38:a3:10:5d:b1:20:bd:df:36:86:25:ef:af:cc:82:
e4:19:60:67:77:73:63:9d:d1:1f:b8:0b:a2:04:52:6c:17:aa:
a5:61:d8:8e:8c:48:eb:69:55:83:64:e6:ee:dc:1c:ff:b6:e3:
1d:95:b9:46:9e:25:df:6c:95:9c:42:5b:35:de:df:d4:76:a7:
6a:98:80:37:c2:ed:1f:a6:75:b6:67:ba:88:5b:47:9d:99:92:
db:a8:d1:4d:f4:32:b0:37:62:6a:ed:ea:af:5c:d4:a9:a4:5a:
6e:99:68:1f:11:84:20:b2:48:a3:ce:1a:44:8a:96:29:de:77:
c3:97:27:7d:b8:22:6f:11:bf:e9:04:e3:cd:f3:67:b8:92:fb:
73:20:13:9a:98:db:10:bb:46:ff:eb:23:aa:64:52:d9:c8:27:
22:1e:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:01 2024 by rpki-client on console-ams.rpki-client.org