Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2BA3F8768B11EFB32AF7AF762E951A.roa
File: 2C2BA3F8768B11EFB32AF7AF762E951A.roa (raw, json)
Hash identifier: uiVtC9qBHzcHjeshIloqWH3zo0tw+2tVqU23d3L8Yh8=
Subject key identifier: 35:B6:19:3C:C0:06:6E:E5:B6:26:EF:40:7C:F1:3D:E0:2A:D0:F7:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2BA3F8768B11EFB32AF7AF762E951A.roa
Signing time: Thu 19 Sep 2024 13:29:19 +0000
ROA not before: Thu 19 Sep 2024 13:29:15 +0000
ROA not after: Fri 08 Aug 2025 13:29:15 +0000
asID: 133199
IP address blocks: 154.197.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61609 (0xf0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:29:15 2024 GMT
Not After : Aug 8 13:29:15 2025 GMT
Subject: CN=66ec272e-5a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:60:ac:0d:b1:31:23:5a:3c:f6:50:f3:b3:
b4:05:3e:9d:be:2b:93:2a:93:7a:7d:f9:19:4b:b1:
52:59:f8:89:52:76:36:d1:35:c6:e7:9b:43:44:91:
58:a4:8f:26:9a:c9:1b:35:15:7c:10:17:01:90:8e:
11:86:fc:33:2c:0e:c6:ea:ea:20:8c:d1:7d:0f:5c:
c2:3a:74:44:50:c6:ea:5f:32:bd:64:18:d0:9a:d9:
10:db:08:f3:4e:f1:96:5a:7b:5c:4b:4a:de:a3:e8:
30:31:66:a5:5c:29:0b:82:f1:ae:20:cd:e4:32:72:
cf:a6:4a:1a:19:1a:48:f2:3a:5f:ed:36:c3:53:f8:
15:b0:0d:e8:3d:86:d8:b6:6d:8f:51:24:97:4e:9b:
3b:69:2e:9a:cb:ba:b6:1c:24:50:1e:b2:45:d2:f4:
a5:bc:42:33:c7:b9:05:fd:3a:62:cc:5c:ed:4d:4a:
5f:77:ef:ff:e8:44:61:ec:af:14:f6:66:00:68:0e:
b6:eb:ed:d7:0a:08:c3:17:10:9d:38:0d:c3:f6:fd:
3a:c0:90:ca:4a:85:83:b2:f7:1c:12:a1:25:7f:da:
18:b7:77:1b:42:c2:33:4a:30:c3:34:65:ab:15:f3:
e3:fd:22:33:c4:34:35:38:27:2d:e3:ae:74:26:31:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:19:3C:C0:06:6E:E5:B6:26:EF:40:7C:F1:3D:E0:2A:D0:F7:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2BA3F8768B11EFB32AF7AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:f7:b5:2e:a4:4b:78:06:7f:c6:7a:06:61:a7:63:23:42:85:
8f:70:76:67:2e:28:3a:b6:aa:b2:43:a3:08:b5:68:9b:3f:69:
6a:a4:6b:36:6f:58:41:61:80:bb:33:72:db:42:5c:91:4e:92:
4b:64:4f:70:90:2c:6b:df:4e:8a:af:06:76:50:1f:4a:6b:cb:
c3:32:6a:4d:5d:29:1f:c9:9a:a2:c3:b6:de:bd:68:13:48:58:
44:b0:e3:4a:dd:7d:4e:cf:e5:b8:a4:2f:00:68:aa:b5:c7:2e:
64:9e:80:52:2f:3e:70:6a:18:6b:6a:8a:de:39:b9:3a:e1:1e:
82:9c:4a:46:e4:21:ff:79:5c:4d:cd:31:6c:f6:04:73:3d:52:
a7:ff:5d:ce:13:73:97:cd:7a:af:61:d2:e6:cd:3c:70:4f:88:
5f:62:21:17:d8:79:88:24:ba:71:c6:8a:bd:4c:b3:94:77:e1:
19:bc:b1:41:7d:35:9b:cd:8c:21:00:bd:82:5f:93:54:ff:40:
41:44:0a:89:c3:c5:41:73:07:25:5e:17:dd:1e:0e:c7:4a:24:
45:b6:72:55:26:a3:d2:f8:64:5d:77:53:c7:64:03:53:a9:52:
4a:b2:32:f7:05:14:3c:53:c8:70:7e:75:6c:64:73:db:83:63:
81:9c:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org