Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F82BF8EA9AB11EFAADD6A74762E951A.roa
File: 2F82BF8EA9AB11EFAADD6A74762E951A.roa (raw, json)
Hash identifier: SZZgke2TWkIwyyldz9nzfzti3/m2+umVgORLCwuq7Rg=
Subject key identifier: 82:DA:8E:6D:CA:A7:FC:16:2D:04:F9:79:35:7C:7A:21:D6:F8:0E:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F82BF8EA9AB11EFAADD6A74762E951A.roa
Signing time: Sat 23 Nov 2024 14:56:57 +0000
ROA not before: Sat 23 Nov 2024 14:56:54 +0000
ROA not after: Wed 25 Dec 2024 14:56:54 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70016 (0x11180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 14:56:54 2024 GMT
Not After : Dec 25 14:56:54 2024 GMT
Subject: CN=6741ed39-edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:47:a9:ac:78:3b:cb:38:cb:26:8a:fd:91:
aa:2c:be:4f:19:be:6c:0d:3f:52:4d:67:7e:3c:db:
aa:b2:29:18:68:32:fa:c0:25:fd:c1:ee:cc:01:b1:
ba:d3:66:69:4a:c1:52:3c:78:15:4a:fd:98:24:54:
d0:a0:c6:9a:9d:51:fd:c0:d7:02:51:d1:1e:70:f2:
20:87:f8:c9:ba:3b:f1:94:dd:6a:63:35:0c:e0:07:
a3:38:a9:a6:09:72:f5:51:ac:bb:a0:c4:6c:b7:2a:
35:b5:c1:9f:b6:e4:fd:8b:59:4f:48:4e:63:82:5f:
86:ac:e6:65:b3:92:31:07:d5:60:37:79:14:74:73:
5a:e9:f6:4d:28:80:b9:6b:97:22:b7:35:d9:6a:2a:
b3:49:c9:9e:27:b3:6b:dc:06:3f:d0:16:15:42:52:
8a:0b:5a:1f:d1:b5:64:8b:8e:1c:74:d7:5b:23:a4:
62:80:4b:78:59:16:37:67:d0:c2:67:ee:49:f6:96:
41:1b:42:11:26:2e:8b:da:73:90:20:c5:3d:07:30:
5d:9a:7d:12:f9:99:35:96:2c:86:ee:3e:be:cd:58:
d0:11:63:da:30:a1:89:98:e2:73:77:70:96:ee:7c:
29:d4:2e:44:b2:df:fa:48:d9:f5:17:5b:97:ec:84:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:8E:6D:CA:A7:FC:16:2D:04:F9:79:35:7C:7A:21:D6:F8:0E:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F82BF8EA9AB11EFAADD6A74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
18:a9:f5:8d:10:94:ed:83:57:31:27:33:e1:c6:4e:5e:94:15:
2c:a2:2c:e5:4d:ae:36:58:2b:4e:b6:e3:e7:a9:bc:9f:c1:7b:
4e:94:1a:6d:b4:27:77:bc:b2:b9:e5:be:64:3b:28:30:f7:78:
8a:68:5a:98:36:d1:5a:37:0a:d7:10:ee:aa:fc:8c:f3:0a:c4:
4e:87:b9:8e:e8:d8:f7:96:a9:1d:9e:58:fc:5b:45:bb:a3:dd:
98:aa:60:7b:46:65:ed:2d:0d:f4:0a:93:96:93:bb:b5:01:69:
74:3c:5b:16:50:d5:f9:79:ce:a8:60:8d:72:7f:b1:2c:08:f8:
c4:9b:65:0f:b9:e8:1e:43:b0:ab:eb:1f:2c:35:5f:98:69:60:
fb:3e:3f:e1:10:aa:cc:99:2f:20:17:ee:a5:1a:e7:5f:ae:bf:
a5:3e:3d:42:7e:df:2f:e1:29:16:8b:45:64:99:17:86:87:07:
b0:bd:68:da:b2:fa:6e:81:d1:bf:db:b8:3c:4d:bd:41:04:3d:
32:81:41:c4:d7:49:50:5e:9b:93:a8:8e:3b:4a:2a:3b:27:c0:
05:bd:18:0b:29:e2:43:39:c4:ba:87:32:72:1f:46:65:35:9f:
90:c7:08:64:57:40:ca:95:d3:34:8f:15:5f:64:46:20:b8:3f:
cd:9e:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:02 2024 by rpki-client on console-ams.rpki-client.org