Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/346CD55AA8E511EFBB373F96762E951A.roa
File: 346CD55AA8E511EFBB373F96762E951A.roa (raw, json)
Hash identifier: 26jtj0+qACyWXt+pOG2d7eq08hZEsJFVP67brZVKnp4=
Subject key identifier: 14:04:17:3A:43:97:CA:34:6A:1C:5B:E2:63:5A:3C:76:02:2C:2B:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/346CD55AA8E511EFBB373F96762E951A.roa
Signing time: Fri 22 Nov 2024 15:19:45 +0000
ROA not before: Fri 22 Nov 2024 15:19:42 +0000
ROA not after: Tue 03 Dec 2024 15:19:42 +0000
asID: 62240
IP address blocks: 154.194.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69829 (0x110c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:19:42 2024 GMT
Not After : Dec 3 15:19:42 2024 GMT
Subject: CN=6740a111-94b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:62:63:a5:23:66:7e:0b:fa:6d:2b:55:4b:
10:56:ef:36:57:30:13:03:90:72:3c:e3:15:c5:8b:
d5:58:94:13:1c:ab:a8:47:e1:65:1b:78:46:c3:46:
e3:78:01:02:14:ab:e3:a6:e9:e2:ae:6b:7c:6d:0a:
97:f4:0e:ea:d8:51:ad:af:ba:55:8b:aa:4e:db:70:
dc:6e:4f:02:b3:a9:9c:69:64:56:fc:a8:0c:f6:d8:
f0:82:52:7a:d5:88:9d:cb:99:25:90:ce:9e:43:3a:
82:d4:9d:39:b1:91:5e:b9:51:43:60:88:c5:a9:f4:
80:87:9b:c9:eb:9e:14:5b:78:dc:85:43:93:c7:89:
10:2d:8c:a8:11:9a:49:6b:74:6d:b7:49:c8:8a:19:
97:74:0c:b9:cc:7b:9d:8b:de:a6:21:99:6b:3e:7c:
34:b3:46:da:75:b1:86:a5:c8:21:cb:15:34:fc:fe:
f5:35:89:d2:b9:d0:bb:45:3b:e2:28:c9:11:95:86:
15:2a:59:18:c6:3c:26:58:b7:67:7b:77:8c:a6:6b:
9f:5a:cf:b7:31:a9:d0:36:b6:17:06:91:28:ed:a7:
ad:51:3c:3a:b9:09:53:94:d5:02:ab:8f:77:f8:0f:
d1:39:f5:89:56:c5:7e:f8:88:1b:55:ff:3e:55:e2:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:17:3A:43:97:CA:34:6A:1C:5B:E2:63:5A:3C:76:02:2C:2B:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/346CD55AA8E511EFBB373F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.99.0/24
Signature Algorithm: sha256WithRSAEncryption
58:dc:d7:ad:09:16:f0:7e:8e:86:69:41:39:dd:ab:0c:e9:1d:
ae:bd:b5:b1:8c:5c:97:09:17:15:16:8b:5f:01:02:1c:bf:70:
ba:87:ba:95:27:26:c4:28:f9:23:35:6b:30:2e:65:3f:f0:87:
cc:04:41:bb:66:5b:a3:46:a7:ad:cf:ff:9d:60:b0:48:cc:14:
dd:4e:cb:9d:53:e4:90:63:dc:cb:9d:0f:3c:45:39:bd:d2:bc:
52:f2:1b:3a:09:25:17:e2:b3:99:3c:a7:20:b2:d6:c4:67:2e:
ce:ae:3c:88:c4:a2:c6:e6:d8:29:c9:4b:7b:d5:b4:4d:34:e7:
3f:0a:dc:a9:e6:12:1f:8a:f2:42:12:68:78:91:6a:a2:16:fd:
0b:52:61:44:55:af:1e:7c:6a:0c:72:e2:16:e1:a4:20:ae:f5:
aa:28:32:ee:3a:c9:23:c6:3b:8b:58:1b:99:b1:10:3d:b1:38:
53:ef:f4:9c:a0:25:f8:e2:6c:f6:dc:b6:bd:03:7b:0c:23:06:
79:9a:6d:f6:37:6c:60:5e:72:f3:86:5b:54:8b:4e:7c:89:ac:
1c:05:fd:c7:b8:15:30:b3:54:d6:d1:b8:c7:02:91:15:1a:88:
c9:05:f8:a2:17:3d:77:7b:38:78:35:44:69:68:6b:9b:84:9f:
76:bd:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:03 2024 by rpki-client on console-ams.rpki-client.org