Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF20194A0E811EFA003A1AA762E951A.roa
File: 2FF20194A0E811EFA003A1AA762E951A.roa (raw, json)
Hash identifier: 0sB9QPkN6XN/itNQlsjVoqlBxQb9NvtT7sMeU+W2oUM=
Subject key identifier: 86:10:FA:0A:F8:2F:82:28:55:24:E4:B9:50:F3:29:D7:7A:2C:8D:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF20194A0E811EFA003A1AA762E951A.roa
Signing time: Tue 12 Nov 2024 11:20:57 +0000
ROA not before: Tue 12 Nov 2024 11:20:53 +0000
ROA not after: Fri 22 Nov 2024 11:20:53 +0000
asID: 51396
IP address blocks: 154.213.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 11:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68716 (0x10c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 11:20:53 2024 GMT
Not After : Nov 22 11:20:53 2024 GMT
Subject: CN=67333a19-cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:fe:4c:b4:e9:c5:c1:2b:d0:2d:ac:b6:f2:
c6:a3:a9:18:a4:61:f8:4c:9a:ec:65:48:6c:89:59:
ef:bb:1e:a3:7f:45:cb:f5:6b:54:26:72:5f:61:64:
a1:f9:7c:b3:2d:2d:33:cb:0c:a4:1b:d4:1e:c8:d7:
27:17:81:08:68:7c:f5:29:c9:7f:be:ef:f4:12:14:
34:16:2c:be:e2:a6:60:8a:0b:93:5e:f3:4b:7a:9a:
80:ad:d7:5e:bd:79:35:93:93:94:99:d6:b6:59:3a:
23:64:d9:94:df:92:c3:17:1b:db:61:cb:cd:c3:17:
1f:2e:35:15:65:1e:96:a5:e1:cb:54:f4:88:4d:ac:
ff:e7:2a:a6:38:f9:0d:9e:ef:46:9a:11:18:79:b8:
34:61:1c:dc:d8:da:0b:13:f0:b4:74:16:f3:70:f5:
b5:f7:12:09:3d:42:a2:a1:6b:e8:69:aa:f1:6f:2c:
73:34:c4:57:9f:92:c1:3b:29:51:b4:76:47:da:b2:
65:53:ec:03:bc:09:ce:9e:16:46:f6:39:0e:0a:5c:
03:94:92:57:13:21:40:c9:f1:af:5a:70:04:2c:17:
51:db:1d:46:90:fa:e1:69:5c:2a:cc:ce:54:d5:9f:
32:e9:32:ac:e8:cf:6c:13:ea:00:38:23:90:fc:f7:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:FA:0A:F8:2F:82:28:55:24:E4:B9:50:F3:29:D7:7A:2C:8D:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FF20194A0E811EFA003A1AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e7:16:44:9c:cb:0a:48:61:fe:38:7d:a4:d6:91:1e:42:dd:
78:de:d9:35:5d:85:cb:8d:5c:a9:ae:f1:a9:8c:17:b1:0f:66:
4b:52:ee:41:1b:cf:7c:e4:90:d3:57:48:9a:11:32:2e:79:f7:
cd:02:df:8f:01:df:ef:4d:95:4f:47:af:7d:0c:7c:4b:2f:93:
32:3e:3c:16:2f:c1:ff:2b:1b:0f:26:29:31:db:4b:4c:e8:4d:
b7:c4:34:5a:d4:78:6e:66:c6:48:02:80:a7:f0:45:51:50:25:
b6:c8:6f:ff:52:65:42:e1:22:38:a7:70:0c:9c:ec:c0:5f:f1:
7f:29:e0:2d:9a:f6:b1:6c:2d:e3:f5:54:7c:f6:c8:13:10:01:
87:0e:d4:8d:0b:70:61:af:36:ce:e1:f1:fd:3d:62:de:22:cf:
5a:57:5f:5d:ec:39:d9:70:df:00:a6:76:73:3c:0d:6e:0f:f5:
3f:ae:28:2c:a5:d5:22:2a:f5:7b:1c:91:b2:1e:83:5c:52:d2:
2a:10:ad:f9:6d:a3:44:d0:23:95:62:14:4c:29:e3:6e:49:22:
53:71:9f:2b:00:5b:9f:c6:ec:ca:f0:f6:b5:c6:ce:19:24:f2:
3b:ff:07:85:fc:99:99:d2:01:23:f5:33:85:db:a5:58:dd:9f:
f8:7c:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:35 2024 by rpki-client on console-ams.rpki-client.org