Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A1676AA73A11EF8FFF2497762E951A.roa
File: 32A1676AA73A11EF8FFF2497762E951A.roa (raw, json)
Hash identifier: Sk5HE7653M6ltTIeatOyLrhEwqruBZl8eVcI1z5pvM8=
Subject key identifier: 96:35:5E:8E:AA:0B:08:DC:7A:28:D1:B5:AB:48:A1:94:15:48:E6:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A1676AA73A11EF8FFF2497762E951A.roa
Signing time: Wed 20 Nov 2024 12:23:07 +0000
ROA not before: Wed 20 Nov 2024 12:23:03 +0000
ROA not after: Fri 29 Nov 2024 12:23:03 +0000
asID: 5065
IP address blocks: 154.84.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69529 (0x10f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:23:03 2024 GMT
Not After : Nov 29 12:23:03 2024 GMT
Subject: CN=673dd4ab-26fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:98:65:5b:a3:c7:bb:5a:98:f4:b1:f0:84:
3e:18:68:77:1c:93:b0:fc:be:93:e9:44:1a:68:99:
36:5d:9e:f1:35:a2:2e:be:7d:61:37:a5:e0:90:ff:
c7:a1:a3:cd:1b:b9:de:3c:e6:3f:e9:0b:90:3b:af:
c8:ab:ad:1b:5a:56:27:f2:64:16:5f:3d:92:64:1f:
12:ab:6f:8b:91:8d:76:ea:e7:be:eb:93:e5:e1:92:
3e:5d:2d:31:a5:f9:d2:a0:bb:3a:9d:84:c6:6f:42:
54:75:7d:51:c9:a5:c1:3c:4b:68:55:69:cb:4f:57:
22:ba:63:95:21:1d:e5:3a:40:2a:6a:58:b0:c3:fc:
1e:dd:70:13:0d:9d:56:7a:1e:24:64:70:f9:c2:4a:
cd:80:ba:11:04:c5:5c:6e:77:b4:c4:75:34:8b:b4:
4b:ff:c8:5f:37:dd:51:b4:5f:ea:0d:66:bf:38:38:
92:75:42:e6:15:9c:87:ee:2b:78:64:a3:48:f2:4b:
b1:0b:8e:47:37:4e:a4:6b:83:a8:27:b9:0f:33:ca:
73:f4:50:4d:7d:d6:8b:92:4d:83:80:bc:ba:6f:72:
80:df:f9:16:f1:ba:81:5b:7c:85:0c:63:eb:bf:f0:
b4:c8:f2:80:7c:12:d3:86:92:5a:8e:0d:e8:1d:1f:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:5E:8E:AA:0B:08:DC:7A:28:D1:B5:AB:48:A1:94:15:48:E6:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A1676AA73A11EF8FFF2497762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
87:b7:cc:d9:ea:32:8c:1e:1d:2b:00:40:a1:4a:07:e3:7d:2a:
b6:cc:e7:63:c6:4a:4f:8b:10:b5:69:86:64:4c:12:1b:b5:89:
6d:65:3e:ed:fd:5f:da:36:9f:e4:ee:c4:a4:9e:68:69:87:49:
53:d3:00:45:c9:24:1d:73:eb:5f:40:31:be:ef:bd:c2:f6:28:
12:f1:a8:73:77:3f:b4:21:b0:b9:f1:f1:25:71:f0:b5:b9:7c:
4e:3e:3c:4d:4c:5a:65:53:df:33:5e:ba:6c:d8:54:94:01:1c:
e4:71:d5:ea:47:ec:94:c3:80:08:b1:36:a6:79:28:1e:f3:9e:
9e:e1:75:de:0a:94:a8:a5:a4:08:c4:2a:ba:3a:3d:2a:06:7c:
ba:1e:7b:95:20:eb:a0:64:9d:6d:32:a4:1a:9c:64:90:5e:87:
71:97:c6:b4:37:3d:3a:32:79:ee:90:de:b2:93:cf:9f:cc:f6:
f9:6d:50:52:de:33:89:d5:cd:3a:b7:e6:01:71:39:e6:a1:a7:
87:d8:fc:2d:54:06:8d:a8:fc:c1:10:7e:79:fa:7d:e2:b3:62:
3b:e9:47:29:20:2b:6c:f2:20:46:0d:56:70:d6:63:de:e6:6d:
16:3b:e7:81:95:2a:25:c8:9c:a5:8c:ef:e2:5a:4b:fa:b2:75:
56:25:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:35 2024 by rpki-client on console-ams.rpki-client.org