Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D8A9A0A8DD11EF9E3EFA63762E951A.roa
File: 38D8A9A0A8DD11EF9E3EFA63762E951A.roa (raw, json)
Hash identifier: dHLZmd3ey00lRHjdzyqUjRQaklYXq5qSuyyFaOhSXTA=
Subject key identifier: 73:4B:55:BA:9F:49:E9:73:A7:C9:44:58:39:F9:C6:D3:BE:F7:A4:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011065
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D8A9A0A8DD11EF9E3EFA63762E951A.roa
Signing time: Fri 22 Nov 2024 14:22:37 +0000
ROA not before: Fri 22 Nov 2024 14:22:33 +0000
ROA not after: Mon 09 Dec 2024 14:22:33 +0000
asID: 5065
IP address blocks: 154.206.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69733 (0x11065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:22:33 2024 GMT
Not After : Dec 9 14:22:33 2024 GMT
Subject: CN=674093ad-0f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:91:40:ee:c3:bd:06:cb:35:00:d8:15:ff:
6a:94:6e:fe:b3:66:85:d9:95:32:61:ab:b6:a7:84:
4d:d5:d6:b4:7a:bf:40:f0:d3:af:9e:f6:00:85:2e:
50:a1:cd:51:3a:c5:da:b6:30:8b:86:59:5f:f0:3a:
74:48:dd:a6:2d:79:a9:95:6c:ce:66:ea:aa:35:9d:
1b:09:30:44:d5:7c:08:d2:07:bc:a5:19:3c:dc:c7:
03:1c:87:fb:38:15:08:0d:c4:9a:99:44:ff:a6:9f:
d7:e8:13:0e:a0:d4:95:27:cd:ec:32:86:64:8a:80:
dd:d6:87:5d:f5:fa:a3:03:11:84:3f:7c:38:08:9a:
70:aa:01:bb:1f:21:c0:93:41:4b:8f:92:bc:56:e7:
13:8d:d1:6c:1c:34:2e:6e:c6:c8:bc:f4:8c:47:a7:
74:7c:c7:4f:eb:ca:72:fc:a3:2d:bf:b7:76:69:c4:
a6:8f:12:37:5d:fd:7b:bf:f8:a0:fb:3e:94:5c:0a:
0c:77:cf:7d:63:2b:a9:22:6d:89:05:1f:56:e1:05:
a4:1c:e2:5b:e9:37:92:7e:73:fd:f1:a9:61:72:b6:
bd:5a:be:f7:74:73:91:3b:a9:a8:92:bf:75:6d:0d:
b1:3e:f1:9c:0a:cf:c5:e2:2f:88:21:77:ba:d4:5b:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:55:BA:9F:49:E9:73:A7:C9:44:58:39:F9:C6:D3:BE:F7:A4:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D8A9A0A8DD11EF9E3EFA63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9b:84:cc:30:49:ad:1c:21:ad:36:fb:ec:9e:ec:5b:0d:2a:
17:90:b5:6a:4f:b9:71:8f:52:a1:ea:3f:d4:e9:e8:a2:11:d9:
95:02:a8:79:1e:df:ae:43:3c:4a:44:41:c5:8e:b7:53:b5:ae:
be:11:fb:15:02:ae:b5:dd:8c:ec:91:be:ae:f6:b9:ea:66:28:
e9:1f:37:de:b1:af:e9:c3:31:3d:01:e6:57:7b:4f:5c:3d:2d:
e4:6a:c9:74:2e:cd:31:16:da:d7:7a:cf:c4:4d:3b:83:4c:42:
74:d6:df:a0:a6:d5:2b:9f:bd:a5:4e:b3:93:ca:61:9e:91:1e:
e3:8b:f0:00:22:4c:ae:4a:d0:db:1f:8e:d4:07:05:5f:78:27:
50:31:9c:11:b8:1c:a4:58:ba:7b:07:cd:23:70:85:fc:14:bd:
4a:5b:e5:d1:4d:d6:ad:0f:fd:3a:7f:ce:80:97:88:0b:a0:62:
60:47:f1:da:f3:3e:eb:8c:3a:97:e4:69:20:50:75:6b:f8:c8:
a4:ad:f4:46:b9:b2:be:64:7e:ef:73:86:c4:dc:9c:ca:52:eb:
36:53:10:47:6c:6b:a2:7f:c1:5f:6d:34:c2:2c:62:8f:e8:75:
77:a7:50:0b:0c:66:ad:21:59:c3:d1:5e:af:6e:7c:0d:19:ec:
f0:f0:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:04 2024 by rpki-client on console-ams.rpki-client.org