Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3433775CA0D811EF9BE56148762E951A.roa
File: 3433775CA0D811EF9BE56148762E951A.roa (raw, json)
Hash identifier: 7xupAfh9VyW8ZWEzO/8gSkclOuKo60ks52ZY9a/xxAU=
Subject key identifier: B1:3F:59:70:4C:80:BE:58:91:A2:AE:CE:82:AA:D0:0C:DB:B8:0D:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3433775CA0D811EF9BE56148762E951A.roa
Signing time: Tue 12 Nov 2024 09:26:32 +0000
ROA not before: Tue 12 Nov 2024 09:26:28 +0000
ROA not after: Sat 07 Dec 2024 09:26:28 +0000
asID: 138915
IP address blocks: 154.223.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68622 (0x10c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:26:28 2024 GMT
Not After : Dec 7 09:26:28 2024 GMT
Subject: CN=67331f48-335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:56:bb:c0:0c:d2:4c:ac:a2:56:2e:e4:df:
5d:62:3b:3e:47:57:2e:17:bf:d7:c8:06:4e:45:ac:
ec:32:dd:6d:33:14:e2:08:9b:3f:8e:29:f0:52:1d:
df:5c:59:39:0a:e5:4e:40:cd:0b:a5:4e:14:2e:f6:
9a:71:b1:c3:d8:50:cd:e9:9e:0a:c0:a8:c9:3e:1f:
2e:86:c0:80:04:5d:e8:68:a0:81:45:38:8d:55:27:
dd:f3:fd:18:d1:80:75:ca:8e:71:c7:53:40:92:a4:
3c:b4:3b:a0:e8:f7:d7:f1:8a:c6:74:5a:3e:63:f1:
f7:a4:96:3f:9e:06:df:d8:e8:5e:fa:82:30:3e:d5:
39:ee:52:2d:ec:80:56:5a:4d:6f:b3:c1:ae:10:b8:
3b:9c:d9:a1:36:16:63:88:69:ca:1a:e8:31:7b:9b:
ba:95:eb:4b:9a:af:8a:e4:2b:12:75:a0:2c:af:4b:
8b:38:c5:bb:d2:f4:3d:f8:ab:6c:97:41:79:b4:5e:
cd:24:7a:d9:1c:b9:85:5f:88:9c:a9:a3:7b:b2:da:
86:75:a7:c6:f7:5a:9f:be:bd:99:47:a5:11:86:cd:
cf:88:e0:64:5a:43:53:e0:1c:9b:fe:cc:79:12:a1:
b1:7b:45:66:4b:ea:a0:ae:38:24:8d:b9:24:6a:cc:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:59:70:4C:80:BE:58:91:A2:AE:CE:82:AA:D0:0C:DB:B8:0D:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3433775CA0D811EF9BE56148762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d7:bd:76:0c:d0:7a:2d:69:47:22:9d:61:33:14:59:d1:83:
ab:64:12:bf:3c:10:75:d5:f9:69:ce:03:74:31:bf:73:7a:cd:
7a:0d:e8:9e:51:fa:c9:a2:c3:39:68:df:63:42:39:7f:05:e7:
45:39:a3:60:62:77:ec:08:b0:7a:47:45:4d:23:34:52:19:1a:
4a:d5:fc:45:b9:50:d4:21:3c:36:79:a0:a2:d4:6e:fe:3e:37:
a8:62:06:61:ba:f0:0e:4d:51:71:6e:99:b5:29:c5:7b:56:ba:
9f:19:5e:20:5e:48:72:03:24:2a:f2:5d:f2:8d:4c:91:ce:ae:
6c:ed:6f:55:d7:22:62:55:37:93:2d:95:60:1c:04:20:72:c0:
a0:06:3d:b2:01:f1:41:8a:dc:ef:44:b7:e8:b8:ee:63:13:4e:
30:9d:95:fb:d1:b5:16:e3:dc:95:a7:26:ac:20:6c:51:2d:9a:
35:9f:1b:8b:2a:5c:1b:db:0f:9c:9c:9e:5f:d3:a3:22:18:7b:
ba:51:5a:91:ba:41:0b:c2:6b:bb:41:2b:a1:6b:08:74:24:27:
a2:66:74:27:35:47:4b:3b:39:b7:94:ae:d6:df:c4:32:f9:9d:
6e:7a:95:b2:b4:ce:bf:fc:12:a6:11:69:8b:7b:29:59:41:82:
08:5a:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:03 2024 by rpki-client on console-ams.rpki-client.org