Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363DBD9A9EA911EF8CA50F89762E951A.roa
File: 363DBD9A9EA911EF8CA50F89762E951A.roa (raw, json)
Hash identifier: YcqY4CrYL5tQyRST2l+ZKnmmJKAr8KwxCoeO7VfWGhI=
Subject key identifier: 95:BA:5E:73:14:6E:B0:6B:41:C3:53:10:D9:F5:B8:3B:21:B8:EF:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363DBD9A9EA911EF8CA50F89762E951A.roa
Signing time: Sat 09 Nov 2024 14:45:07 +0000
ROA not before: Sat 09 Nov 2024 14:45:03 +0000
ROA not after: Thu 12 Dec 2024 14:45:03 +0000
asID: 395793
IP address blocks: 154.91.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68103 (0x10a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:45:03 2024 GMT
Not After : Dec 12 14:45:03 2024 GMT
Subject: CN=672f7573-be44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:0c:4f:a4:ed:ec:e0:85:95:23:35:5a:00:
13:9e:07:fd:d4:fb:d7:a8:38:52:1a:09:4d:76:df:
7f:ae:58:2f:2f:8a:51:04:b8:4a:20:8d:47:61:af:
0a:00:77:85:28:20:79:a5:46:bb:54:71:1f:bc:be:
d3:e2:89:d2:6f:3c:0a:5a:15:e5:fe:52:b6:4f:1a:
af:87:7e:c8:26:c2:b6:45:fe:40:2c:b9:c1:b5:13:
0a:9c:b1:86:22:25:5c:cd:03:be:02:46:e3:a5:e3:
db:5a:0e:f9:dc:e0:8d:ea:08:f5:a7:f6:3e:5f:60:
64:ed:0c:9f:12:34:e5:ff:6a:1e:95:9c:d6:40:b3:
ae:17:52:da:fe:67:88:18:87:0a:61:50:80:cc:60:
32:ec:c1:21:26:9c:4d:5e:e7:e6:01:ad:ce:46:52:
d0:0c:18:eb:8c:3f:b2:17:cb:4d:fb:88:20:9a:23:
82:df:79:80:b7:f7:05:04:50:aa:eb:90:8b:0a:3d:
f9:1c:41:ad:0c:e1:e9:98:f4:81:4f:77:a1:64:32:
1c:9c:22:fc:fa:48:60:f8:a7:a1:5f:fc:dd:55:f2:
f3:9b:53:2a:7e:01:c8:98:01:ca:cf:6b:f1:b5:ab:
5e:87:12:11:29:7b:72:0a:d8:09:53:3a:c4:a8:e7:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BA:5E:73:14:6E:B0:6B:41:C3:53:10:D9:F5:B8:3B:21:B8:EF:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/363DBD9A9EA911EF8CA50F89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.152.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:dd:4c:fe:e7:a9:f5:20:27:0c:0e:dd:19:69:f5:12:c0:5a:
36:46:73:f2:1e:89:b6:8c:91:af:1c:c4:b6:e2:66:19:f8:15:
ef:f1:29:70:d6:63:f7:e8:45:6a:f2:11:cd:a3:8a:07:80:ca:
b6:1c:29:24:7b:1c:1b:c5:c8:f6:9e:e5:94:2b:a9:69:10:31:
d5:33:e4:9c:04:60:de:23:c5:49:ff:e1:19:89:a3:90:28:70:
f4:b8:bb:99:77:f8:af:f1:7c:64:64:0a:eb:77:31:d7:01:80:
09:61:14:41:b5:14:fb:76:67:cd:b4:dd:7c:57:09:2d:0f:3b:
f7:b7:f0:c2:15:56:2f:7f:0d:44:10:8a:da:63:be:72:93:96:
88:38:f9:61:e2:38:5a:25:de:fe:90:2e:a9:fe:dc:7d:de:58:
5b:2c:6d:64:77:de:45:67:ad:f3:de:c1:12:ad:c9:3b:97:a2:
d9:da:9e:f2:81:17:73:71:5e:9b:46:d1:b5:bd:d8:bf:98:7b:
53:bf:a3:5d:bc:45:bd:f5:c1:11:9f:eb:fe:54:df:17:9f:da:
71:c3:40:f1:07:8a:52:21:de:62:fc:c9:2f:10:f0:6c:94:00:
50:b5:9b:ab:a8:ea:9a:8e:91:ab:38:ab:b5:ce:37:c9:43:72:
d8:5a:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org