Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3694A6363DCA11EFBD961752762E951A.roa
File: 3694A6363DCA11EFBD961752762E951A.roa (raw, json)
Hash identifier: M2ysm3tBPILEIQdAjOIiSqhFv47hr6t4xfsZ223RXD4=
Subject key identifier: 39:06:D8:2D:11:87:93:11:E4:F8:A4:EF:B4:F4:18:16:30:4D:46:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CF7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3694A6363DCA11EFBD961752762E951A.roa
Signing time: Tue 09 Jul 2024 08:06:58 +0000
ROA not before: Tue 09 Jul 2024 08:06:55 +0000
ROA not after: Tue 20 May 2025 08:06:55 +0000
asID: 23764
IP address blocks: 154.85.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53116 (0xcf7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 08:06:55 2024 GMT
Not After : May 20 08:06:55 2025 GMT
Subject: CN=668cefa2-6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:19:d1:a5:ea:7f:dc:37:fd:21:71:e6:78:
7c:5b:fd:12:6d:99:8c:45:b7:8a:6b:6b:22:6f:15:
7b:75:4d:d2:85:86:36:59:ef:6d:1d:1a:79:d0:2d:
6b:f6:e3:75:50:c9:94:de:49:1d:2a:e4:46:a7:70:
9f:23:a7:5a:29:7a:9e:ce:09:e6:69:e3:b9:31:14:
5e:3a:f8:1a:a9:bb:f6:a8:be:03:f8:c3:6f:11:29:
fc:45:66:59:a2:f9:de:a6:f4:10:4e:37:a2:2a:df:
30:0e:2f:28:2d:c6:b4:2b:f5:ef:dc:17:6a:2a:d5:
b9:60:8c:75:a9:c0:98:3e:1c:69:fe:68:9e:c7:c5:
09:cd:ae:e8:b0:33:94:28:b0:5b:7e:f0:80:aa:2e:
3f:0b:b3:00:dd:d8:7b:5f:7d:56:68:d0:2a:43:bc:
98:4d:52:25:09:20:11:c4:89:3d:ae:3c:42:16:18:
cb:b3:8e:bd:28:95:c3:7e:a9:2a:82:0a:bd:0c:b0:
62:3a:72:d8:04:83:37:95:f6:5e:b8:91:00:ff:47:
4c:b0:8b:8f:f9:64:dd:2e:8b:58:b9:1d:46:dd:db:
07:5d:f4:e4:54:75:b9:79:e1:97:27:4b:b4:b2:7c:
f1:0c:6d:c7:77:bc:30:98:62:78:78:02:d7:d3:ed:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:D8:2D:11:87:93:11:E4:F8:A4:EF:B4:F4:18:16:30:4D:46:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3694A6363DCA11EFBD961752762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:24:da:9e:7e:90:5b:0f:89:87:94:e1:b6:41:83:8a:74:8a:
48:a6:03:13:c2:4b:cb:c9:2c:1b:d3:13:64:4a:e7:bf:53:6f:
a9:55:74:14:0e:18:5d:6a:e5:7a:e1:10:a2:f9:76:34:a8:51:
f7:bb:22:99:1e:ea:57:c3:40:d7:27:47:5a:67:7b:a1:07:a5:
30:70:7e:28:aa:2c:6f:4e:9e:53:cf:0c:e6:30:83:2a:0a:f6:
15:48:23:f6:23:53:72:25:a8:ea:13:c5:0e:bf:46:04:fe:05:
88:06:48:26:9b:82:de:51:76:97:13:22:0a:7a:e8:c0:2f:f8:
ae:fb:79:72:c4:b9:6e:e0:7f:b4:40:28:b1:02:f2:2c:a6:0c:
e6:5b:9a:8c:76:94:2b:44:b7:22:17:e7:a7:1c:94:fb:7a:40:
19:07:37:1d:45:5f:4f:ef:ab:df:53:d0:4b:15:4f:27:cf:1f:
9d:aa:f3:7d:27:5e:60:7c:01:14:0a:64:0d:31:22:47:26:14:
4f:df:eb:ce:08:d0:57:1f:53:db:b5:98:9e:9c:0a:33:76:4c:
5e:81:f7:21:be:7c:a8:4a:a6:81:28:9b:3c:78:ba:9c:47:ae:
3e:43:ce:29:da:fd:a4:1d:a8:96:44:c2:8f:43:97:aa:47:1d:
8c:f9:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org