Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9D2C68A72311EF8FDACA88762E951A.roa
File: 2B9D2C68A72311EF8FDACA88762E951A.roa (raw, json)
Hash identifier: dC1szktakB1BOt6Ol/6/ImWRw1MF3XInyf4G5VB5hlU=
Subject key identifier: C8:30:C5:0B:11:E6:4C:F5:6F:81:B8:FD:5A:00:D5:A5:47:40:C8:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9D2C68A72311EF8FDACA88762E951A.roa
Signing time: Wed 20 Nov 2024 09:38:17 +0000
ROA not before: Wed 20 Nov 2024 09:38:13 +0000
ROA not after: Mon 02 Dec 2024 09:38:13 +0000
asID: 39600
IP address blocks: 154.198.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69485 (0x10f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:38:13 2024 GMT
Not After : Dec 2 09:38:13 2024 GMT
Subject: CN=673dae09-0b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:98:23:3a:e5:a7:2a:c7:79:58:1e:a2:ad:
df:a3:34:41:96:c2:c5:fe:23:25:b4:a0:38:3a:6c:
26:d6:c9:96:ed:b6:1a:c7:49:a2:61:9f:1f:29:19:
f3:3f:b8:3e:72:02:00:04:96:02:3f:01:31:9f:6e:
04:3a:b0:3f:38:b1:c5:84:80:64:8a:4d:dd:9e:58:
26:02:e1:5c:be:5f:e0:88:45:56:ba:79:ec:7b:ec:
9a:14:2b:7d:5b:8f:04:6a:4c:1c:32:78:be:56:54:
bb:a5:98:08:69:93:6e:e4:57:88:9d:ab:3c:3e:29:
38:a1:f2:a9:a8:a8:60:5f:1d:c8:d9:9e:32:7e:f5:
de:31:af:59:3d:20:f0:15:d2:cf:6a:fe:6c:fa:ed:
4e:00:81:e6:cd:41:37:96:d9:07:83:2f:0b:35:56:
03:e5:33:d4:b6:c4:99:6b:a5:b2:0d:16:fc:20:9d:
27:ad:57:92:91:63:96:95:41:2e:c7:72:e9:ef:47:
29:66:8c:39:1b:e7:c9:5b:80:e0:74:3b:90:26:7d:
59:c7:74:51:65:c2:8e:ea:6a:73:b2:8b:e8:83:10:
6a:35:ff:62:25:ab:54:13:33:b7:c8:14:00:33:82:
fb:75:80:dc:62:c2:9e:3f:af:0b:f8:b8:9c:fc:a5:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:C5:0B:11:E6:4C:F5:6F:81:B8:FD:5A:00:D5:A5:47:40:C8:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B9D2C68A72311EF8FDACA88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.40.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:5a:77:f6:76:a1:d3:37:86:94:a8:df:b6:6c:f0:77:7c:a1:
a8:b5:0d:26:50:e9:b2:64:97:13:e2:f6:f8:be:9a:4a:74:eb:
af:a1:8f:5d:e3:0e:ae:53:35:3e:27:b1:4d:48:4b:2d:c2:5b:
66:81:df:e2:db:30:21:5d:93:38:2f:0e:3c:56:87:8e:b4:75:
91:17:fd:0f:42:6b:69:14:bd:87:14:c1:bc:ab:9c:8e:53:b6:
aa:12:af:3c:d5:6f:ab:10:fb:4a:7e:3a:d6:ce:e1:47:1f:b8:
84:77:52:33:4a:e6:1a:7c:1b:b0:ea:fd:1f:10:93:7d:e7:7d:
08:f8:98:d6:db:7b:88:4c:51:fb:3c:c9:61:ed:4b:ce:0d:6a:
ae:47:69:78:bb:64:97:77:20:37:4d:74:20:8d:ad:60:5b:9a:
f0:2d:19:6e:dd:96:56:24:38:95:5a:ef:a6:2e:21:6d:e2:f0:
90:34:b2:bb:66:dc:9b:0e:1b:37:7e:21:24:18:8c:34:0d:26:
64:1f:e5:85:03:e4:62:f5:03:6b:a9:6e:a7:42:69:8e:04:9b:
63:43:8d:3f:1c:3c:49:4b:6b:32:93:83:4c:6b:47:b4:ba:c7:
d6:d3:c2:14:fd:73:f7:20:1f:0f:b2:e7:49:59:5f:97:ef:a2:
f8:b0:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org