Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3402B8AC2DD711EFB897C86F762E951A.roa
File: 3402B8AC2DD711EFB897C86F762E951A.roa (raw, json)
Hash identifier: dGrHUBH04ecyAlgB4gX+GptxToBjQwQtI5hrI0cuHD8=
Subject key identifier: 07:94:84:86:45:17:E7:D9:8F:C5:24:35:5A:B1:34:A5:DF:A0:2F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C498
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3402B8AC2DD711EFB897C86F762E951A.roa
Signing time: Wed 19 Jun 2024 00:59:39 +0000
ROA not before: Wed 19 Jun 2024 00:00:35 +0000
ROA not after: Mon 23 Jun 2025 00:00:35 +0000
asID: 209242
IP address blocks: 154.197.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50328 (0xc498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 00:00:35 2024 GMT
Not After : Jun 23 00:00:35 2025 GMT
Subject: CN=66722d7a-35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:ba:af:fa:1f:cf:26:be:c1:2e:80:23:de:
d6:1c:3b:b3:8e:1d:a2:65:1f:04:ea:74:0a:f0:dd:
af:72:e8:91:37:b8:37:ba:f3:58:26:ff:60:ad:1d:
5c:11:04:63:0f:be:89:e6:03:2a:a7:2d:6b:ca:ce:
88:a9:50:e5:7a:9e:6d:5d:c6:e2:d1:cc:06:34:a2:
b9:f9:93:89:3d:cc:5f:a0:a1:37:f2:74:6b:8e:dc:
2e:f4:e3:4e:a0:e5:31:cb:51:6f:ae:75:d0:85:58:
1a:5a:d5:cf:70:ce:d7:3d:34:e2:a8:36:69:f6:9a:
3b:88:45:df:73:ee:30:d4:bf:3f:e8:79:a1:03:b8:
15:5d:3f:29:06:e2:95:dc:a9:af:94:91:94:81:d9:
53:34:18:a1:5d:0f:e8:26:c0:f5:e9:75:58:f6:c2:
4b:3e:d3:94:bf:55:71:a1:08:f6:20:60:cb:42:af:
1c:a7:18:01:4f:02:75:d0:2b:f9:a7:4b:c3:65:35:
5d:84:45:e4:29:7a:f8:c2:6b:89:6b:fd:74:fd:66:
3a:af:77:00:d8:83:6d:94:91:50:1a:b7:80:cf:ce:
75:52:1c:91:df:37:c0:57:b2:99:dd:b4:ca:04:70:
0d:31:57:86:68:73:43:dd:f1:07:14:54:c0:15:9c:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:84:86:45:17:E7:D9:8F:C5:24:35:5A:B1:34:A5:DF:A0:2F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3402B8AC2DD711EFB897C86F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.121.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a3:d0:06:bd:5c:77:bf:de:7c:00:91:ae:ec:db:1a:ba:0d:
87:81:e4:58:8c:26:85:19:53:65:26:39:6d:57:8b:12:16:c2:
ad:ef:c4:0f:f3:80:d6:d8:16:91:03:29:8c:33:a7:8d:54:65:
f8:69:7e:76:6a:e0:87:33:59:60:3a:dc:0a:ed:b7:51:11:f6:
9f:1f:f7:8f:42:c8:c8:92:a3:16:df:87:ad:2e:b7:61:30:4f:
ba:3c:92:e6:bd:00:1e:a5:61:a7:98:f9:eb:04:33:53:14:ce:
32:86:4f:36:fb:8a:ca:42:0b:66:c9:f9:b0:da:97:e4:82:ac:
f4:0a:01:8d:05:41:dd:61:dc:b4:b0:d3:19:ea:89:32:59:fd:
58:b6:e5:c2:41:60:b8:87:a4:fd:ef:e9:a3:8a:24:46:ef:ab:
0d:b0:cc:6b:a5:79:aa:ef:6c:a8:b3:ff:5c:96:2f:8a:bb:ee:
9f:4c:c2:bd:8b:74:c8:e4:44:a5:a9:b2:86:27:40:44:84:d4:
e7:de:d4:8d:e9:9b:6a:f8:4d:6c:5a:0e:72:1a:6b:42:28:27:
37:91:bf:73:3a:cd:02:c4:91:79:bf:7b:26:bd:a3:67:a2:11:
89:71:6c:cc:8c:b5:48:eb:2b:ac:b7:0a:da:80:a9:c8:b2:16:
e3:7a:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org