Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365C93B68F8E11EF83B90A58762E951A.roa
File: 365C93B68F8E11EF83B90A58762E951A.roa (raw, json)
Hash identifier: 6nUZzDfYXE0B8LikK0vVtRZC5gB4zraU477ONdUXpEo=
Subject key identifier: 2F:9C:47:35:52:D8:B1:FD:BC:FC:DC:89:B8:23:B2:7B:08:5B:E0:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010058
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365C93B68F8E11EF83B90A58762E951A.roa
Signing time: Mon 21 Oct 2024 09:24:03 +0000
ROA not before: Mon 21 Oct 2024 09:23:59 +0000
ROA not after: Tue 26 Nov 2024 09:23:59 +0000
asID: 62240
IP address blocks: 154.196.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65624 (0x10058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:23:59 2024 GMT
Not After : Nov 26 09:23:59 2024 GMT
Subject: CN=67161db3-2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:b5:c5:a2:eb:56:5c:ca:84:c2:4d:f0:82:
f8:11:4f:33:a5:06:77:86:0a:5b:64:ac:2f:52:0e:
a3:57:a9:9c:c8:9f:44:5f:c6:3b:9f:d6:53:a9:c4:
ee:ce:08:fa:c6:83:c2:ee:89:08:4b:01:aa:0e:ff:
85:73:97:5b:db:b8:d9:b5:7b:44:b7:c8:22:a2:c2:
52:18:a0:b1:34:a7:1d:68:4f:9e:2d:ee:e3:b1:20:
b5:c5:9d:30:a0:22:1f:d3:af:59:58:65:38:4c:7c:
d9:4e:34:96:8e:ad:10:37:14:ce:7a:cd:19:fb:19:
a5:da:1a:8b:fa:33:6b:f3:7b:fb:0a:fd:ee:ca:33:
2d:f2:e4:59:ee:57:1d:39:a7:45:4d:4f:67:8c:e3:
3d:68:bf:f4:94:d7:2f:8e:13:8b:33:57:d8:59:ff:
6e:d4:85:32:09:48:be:66:8d:be:7a:94:cd:dd:08:
08:85:f9:06:7c:85:cf:cc:4b:45:74:fa:d5:2e:1a:
72:8d:b7:08:06:f8:47:b3:47:3a:f5:d0:04:ec:28:
80:13:b5:65:d3:14:1e:cc:a4:52:08:0a:da:9d:6c:
16:1a:68:77:43:b4:35:6c:7f:d7:38:fb:6d:e8:f8:
03:b2:3e:89:64:7e:45:99:09:53:f7:c3:15:d1:82:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9C:47:35:52:D8:B1:FD:BC:FC:DC:89:B8:23:B2:7B:08:5B:E0:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365C93B68F8E11EF83B90A58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:4c:5d:d5:da:b1:7e:59:16:0e:47:cd:22:9f:49:00:0b:46:
b8:f4:2c:b8:88:0c:b1:58:07:06:8e:4a:df:d3:9b:47:b2:5a:
b6:3c:47:9b:83:49:62:4a:df:6d:b2:07:a5:53:72:81:1e:78:
5d:4e:63:1c:77:93:d0:92:86:69:dc:3e:48:e8:c1:cb:62:71:
ec:21:2e:4e:68:54:b2:2e:5e:bc:d6:2c:45:f6:84:94:dc:95:
64:45:56:2e:29:73:f0:37:b2:85:fd:e4:33:cb:96:47:51:6e:
63:43:5c:b3:ff:f4:bd:e2:b3:a7:22:31:76:4d:eb:30:f0:13:
5a:73:ac:93:69:79:60:31:8d:9d:a2:10:0b:12:f2:f2:2c:30:
ae:93:37:13:44:d1:b9:d6:26:39:d5:0b:fa:92:c5:62:4f:01:
28:51:0c:32:10:7b:91:65:68:25:c0:cb:73:5f:fe:3b:fe:3c:
91:fd:c8:14:ca:99:96:5e:f5:ea:6a:d1:5c:58:e3:1b:e7:c9:
57:79:0b:1e:48:74:4b:3f:cd:18:a7:bf:94:62:6e:c4:14:d7:
6d:ae:ba:70:be:6d:06:0b:06:f8:08:f1:51:ac:be:1a:9e:5f:
e4:ef:dc:52:4a:36:e0:09:e9:a8:12:f5:a1:44:3f:ed:11:cb:
73:bb:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:35 2024 by rpki-client on console-ams.rpki-client.org