Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D74ABBC74CC11EFAD6D17BE762E951A.roa
File: 2D74ABBC74CC11EFAD6D17BE762E951A.roa (raw, json)
Hash identifier: CqXgOSS7ch9U+H6W1q2K+amPcPsBxhDwhncySYELO3g=
Subject key identifier: 26:1E:E7:17:A0:22:43:3A:37:1A:75:EE:3E:6E:3D:59:94:1F:62:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D74ABBC74CC11EFAD6D17BE762E951A.roa
Signing time: Tue 17 Sep 2024 08:09:36 +0000
ROA not before: Tue 17 Sep 2024 08:09:32 +0000
ROA not after: Sat 30 Nov 2024 08:09:32 +0000
asID: 142403
IP address blocks: 154.221.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61416 (0xefe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:09:32 2024 GMT
Not After : Nov 30 08:09:32 2024 GMT
Subject: CN=66e93940-2c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:67:28:d7:7c:3b:c0:7d:e4:4b:66:93:14:
87:3e:f3:0e:ac:eb:9d:89:62:19:05:cb:33:16:a5:
3d:03:fb:d3:81:95:67:55:7c:5d:bc:c0:2d:0f:33:
b5:ea:5d:d1:cc:8b:b2:12:0f:76:c8:4c:c6:31:e0:
d0:05:4c:cc:42:ce:00:82:b9:39:b1:6c:98:12:6d:
34:11:93:3d:cb:33:08:c3:40:03:04:0f:94:b2:39:
fa:7c:11:26:05:52:94:73:65:0c:ea:fd:45:ec:14:
96:15:7a:77:0c:da:9e:22:ac:cd:9a:03:88:05:8b:
d9:89:30:94:b1:ca:ba:d4:b8:70:87:ec:53:42:f4:
c3:dc:a0:a9:96:68:f5:48:15:d5:01:3c:e1:32:78:
a7:d4:ca:8e:39:76:7b:0c:30:98:5a:1b:c4:20:5d:
0e:62:5b:47:91:5c:80:40:f5:76:6e:d6:47:fe:e1:
44:cc:13:97:7d:5d:ea:0e:31:6b:6d:58:9f:b9:df:
df:b4:74:23:c0:15:87:a7:bb:55:2b:c6:38:40:39:
37:78:3a:00:b7:6e:50:b5:ef:fb:3e:53:a8:32:e6:
05:09:78:87:18:03:35:2a:53:80:67:b6:68:a6:94:
d9:42:3a:6a:ae:a1:f1:38:d9:13:c8:18:e6:10:3d:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:E7:17:A0:22:43:3A:37:1A:75:EE:3E:6E:3D:59:94:1F:62:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D74ABBC74CC11EFAD6D17BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e5:3a:3d:2f:d3:ff:fd:95:93:59:a2:17:d3:a8:ab:17:06:
16:c3:b7:99:df:19:84:23:7e:52:40:f4:c6:49:74:15:f0:9e:
cd:62:3b:5f:70:07:fb:d6:23:7e:6f:a4:ab:a8:8c:8e:0e:fb:
d0:74:06:43:bc:fa:f3:7b:f9:6c:2d:64:91:79:bd:41:2c:61:
84:2d:19:3b:47:69:6f:0a:81:7f:39:54:72:eb:c6:92:b0:0f:
7f:26:a2:0a:ea:d2:8b:e4:29:d1:1d:d3:b4:90:14:df:55:43:
d8:e6:45:0b:43:2a:20:67:87:d0:cd:78:a7:8e:3a:8a:91:67:
2b:4a:2c:f2:55:4b:7e:2f:a3:92:4b:a4:96:0e:d5:e5:26:fc:
bc:fc:e6:91:ad:8c:1d:9a:e7:06:69:3e:31:0e:a4:df:b4:63:
b9:b6:24:94:5e:46:b0:4c:32:0d:6c:3c:db:96:8e:a2:d2:4b:
3c:6c:91:a9:9b:a8:ed:f8:6a:ad:37:c6:e8:63:cd:b0:37:30:
33:00:bf:1b:d5:ec:fd:06:30:2c:b7:c9:8b:dd:3c:c0:22:d0:
08:da:59:a8:a7:69:cf:cb:63:cb:2b:2b:86:8a:86:e2:49:53:
cf:ab:99:be:e6:99:8a:5b:07:38:1b:1d:c9:86:ad:92:ec:9a:
a7:c1:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org