Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F695BFAA8EF11EF94728156762E951A.roa
File: 2F695BFAA8EF11EF94728156762E951A.roa (raw, json)
Hash identifier: 10AJ8YWWJnOp6jieLTAuAJa5/d4vvH31JnxYnxsOe4g=
Subject key identifier: 96:C6:9D:5F:3D:3E:66:B8:42:31:05:B5:BD:F6:B6:60:A0:30:27:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01113D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F695BFAA8EF11EF94728156762E951A.roa
Signing time: Fri 22 Nov 2024 16:31:12 +0000
ROA not before: Fri 22 Nov 2024 16:31:08 +0000
ROA not after: Tue 03 Dec 2024 16:31:08 +0000
asID: 62240
IP address blocks: 154.195.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69949 (0x1113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:31:08 2024 GMT
Not After : Dec 3 16:31:08 2024 GMT
Subject: CN=6740b1d0-0465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:cb:9d:a2:2e:ab:81:22:44:d6:b4:e9:b1:
da:37:a7:c4:dd:77:19:8b:c1:b3:24:02:f2:54:f9:
4b:f4:0e:2d:8a:f5:6e:b1:ff:06:99:72:e0:62:a5:
65:af:a6:0d:2e:bd:b7:11:50:4a:41:40:12:99:76:
c5:3f:65:4c:67:e0:50:ec:39:a4:bb:5d:13:c1:0d:
eb:e9:32:61:81:35:be:fe:12:25:47:f9:ce:24:30:
e5:01:38:d2:6b:2e:ad:a2:dc:04:ca:62:33:50:ab:
d2:a9:67:2d:1f:ce:17:41:e2:07:2a:0b:c0:6f:b0:
6d:26:eb:85:cf:ff:4f:62:20:f9:c1:46:e6:8b:f4:
5a:4c:1b:53:b1:56:eb:71:24:ce:69:73:16:50:1f:
e7:0a:6e:3d:72:d6:99:ce:db:7a:bc:56:e4:4c:40:
d8:6d:70:11:bd:c0:ad:ee:b3:a7:c4:39:ec:ce:ba:
61:34:71:f0:c5:d7:fd:89:cf:88:3c:35:ae:c9:78:
db:3d:6d:19:2b:f3:5c:2a:24:3d:72:0f:94:eb:1f:
81:99:72:0b:ed:6f:db:3b:ad:d2:43:95:50:16:90:
63:ee:5c:00:aa:6e:fc:a5:86:0d:4f:71:b6:7d:9e:
fe:83:e5:a1:28:d5:e2:45:34:22:f3:ad:d6:d1:79:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:9D:5F:3D:3E:66:B8:42:31:05:B5:BD:F6:B6:60:A0:30:27:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F695BFAA8EF11EF94728156762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.153.0/24
Signature Algorithm: sha256WithRSAEncryption
59:90:39:94:06:21:1e:5e:45:55:06:23:74:eb:d0:e3:88:af:
a0:b5:0f:66:0a:2e:27:04:01:87:4c:1d:7f:8e:ad:0e:08:8f:
76:65:81:3f:83:56:79:4c:52:f7:aa:a4:37:97:b5:1c:81:d7:
2f:3b:bd:ad:34:c7:08:9b:38:93:55:2e:de:bb:11:84:9e:2e:
7d:db:50:e2:81:05:3c:28:3e:9a:e4:a3:9c:1d:7f:71:88:35:
59:05:ed:6e:6e:e7:64:58:f6:59:01:66:b0:77:86:92:9f:6e:
88:1d:5d:0d:cf:13:f3:f2:c9:28:a0:78:57:56:f1:40:87:34:
a5:43:57:03:0a:3c:2f:76:d1:da:54:1a:4c:74:b2:65:1c:df:
85:09:78:13:cf:23:86:92:91:17:35:b1:41:a2:8e:40:0a:4d:
9b:41:0e:cb:7f:dc:c5:b5:c0:ad:56:59:58:fa:96:38:29:a9:
6c:6b:17:aa:21:68:68:0a:65:cb:67:a1:8b:7a:59:79:6e:e4:
3d:c2:37:d2:9c:14:6b:e0:60:bd:4b:80:5e:31:e3:9d:30:d9:
56:28:5c:1d:15:95:ed:ef:de:cd:34:82:15:29:3f:51:d5:7b:
8e:ae:8e:10:76:ef:49:da:76:76:01:ed:be:1d:76:60:3b:46:
64:f5:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:02 2024 by rpki-client on console-ams.rpki-client.org