Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A790E9092B211EFB0264C9D762E951A.roa
File: 2A790E9092B211EFB0264C9D762E951A.roa (raw, json)
Hash identifier: sTzEgyT0QrJdkN2mWHmjK7naJsaAIPBfGeAcXMtxTDA=
Subject key identifier: 30:43:7C:E6:8C:55:40:17:53:48:73:D6:75:30:36:96:87:BA:CB:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A790E9092B211EFB0264C9D762E951A.roa
Signing time: Fri 25 Oct 2024 09:18:59 +0000
ROA not before: Fri 25 Oct 2024 09:18:55 +0000
ROA not after: Wed 27 Nov 2024 09:18:55 +0000
asID: 395793
IP address blocks: 154.82.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66010 (0x101da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:18:55 2024 GMT
Not After : Nov 27 09:18:55 2024 GMT
Subject: CN=671b6282-9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:cc:ae:35:9c:99:3a:d2:91:a3:96:5c:18:
40:9c:95:30:25:69:18:4b:19:93:99:14:c1:6b:42:
4e:f6:06:d5:2e:ac:a4:09:36:47:74:dd:0b:85:0c:
da:3d:1e:35:5c:6d:64:66:9e:ea:2d:4c:44:bf:f6:
f9:1a:82:af:fb:6c:78:73:ab:7f:bf:4e:ab:f0:e5:
0a:7c:f0:fc:15:78:01:2b:3b:e3:3b:00:64:b4:a8:
82:2c:d0:d3:ad:8b:ae:6c:38:89:b3:5e:e5:80:6f:
aa:65:03:19:59:1e:03:9e:fa:13:95:a6:b1:73:ad:
c7:fb:fc:7e:20:fe:fe:cc:cb:c1:a3:ae:46:88:77:
29:0e:2b:19:c7:9a:5c:a1:76:cc:ae:bc:91:d5:64:
0b:e4:9d:65:8d:3e:1a:bd:69:27:3e:4c:7d:af:29:
5e:d5:f2:5d:35:b8:49:85:9b:1b:ff:97:e1:ae:b8:
d7:5f:4c:70:7b:ca:8a:9c:55:b9:0e:5a:b0:48:57:
4d:42:46:c6:49:1a:77:c3:e3:05:ba:dd:06:18:96:
f4:6c:58:95:0d:24:8f:c3:54:62:51:89:81:a4:d9:
af:0f:75:5e:63:12:93:78:25:46:6d:3e:80:fb:50:
92:07:b6:22:09:c0:53:f5:7a:e6:6f:9d:35:18:b8:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:7C:E6:8C:55:40:17:53:48:73:D6:75:30:36:96:87:BA:CB:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A790E9092B211EFB0264C9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:83:0c:9b:d8:f3:cc:40:35:f6:9d:c8:49:1e:d3:9b:80:51:
b9:06:94:89:7b:66:19:cf:c6:5d:9a:ff:7d:ff:58:e9:ea:2e:
b7:7a:57:75:fe:82:76:08:af:4d:74:dd:48:28:c1:06:dd:bc:
b9:70:ff:18:63:a2:67:6c:98:dc:21:f0:5e:0a:fb:29:bb:87:
62:f0:79:f6:57:05:6b:84:3a:b2:da:6c:1e:64:91:75:c0:0c:
16:21:9e:01:bc:6b:04:e7:cc:eb:24:56:4e:b6:2f:5d:d0:4c:
e0:c6:49:9e:f2:7e:32:b0:4b:53:96:79:88:f0:db:c0:5a:ef:
ae:9e:aa:85:79:c8:fa:2d:54:98:09:ad:54:68:ab:13:9c:1d:
e2:67:0d:f8:12:bb:2d:4c:4b:52:8d:af:59:a7:ad:4e:ff:8c:
dc:60:01:9b:78:c0:46:64:82:ec:a4:90:60:2f:f7:11:14:58:
e4:7f:14:48:9d:69:8b:43:d6:90:43:a7:78:8d:c3:f0:2c:68:
b4:4a:e0:1d:49:92:2d:69:13:96:02:14:38:1a:e7:e5:57:8e:
a1:8a:0a:4b:54:35:77:bd:f7:3b:e5:4d:7b:38:48:39:a3:38:
73:73:81:4c:35:e1:16:96:ef:80:bb:97:87:31:a6:03:1c:37:
68:b9:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org