Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922C446736711EFBB50A544762E951A.roa
File: 3922C446736711EFBB50A544762E951A.roa (raw, json)
Hash identifier: TgUj1U7Kk22dmSJdWcSDIdZQY3qb2C2mukN5sCOOGI0=
Subject key identifier: 2D:48:55:23:A5:9E:55:41:06:51:8B:23:D1:DA:FF:95:9D:FD:98:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922C446736711EFBB50A544762E951A.roa
Signing time: Sun 15 Sep 2024 13:34:25 +0000
ROA not before: Sun 15 Sep 2024 13:34:22 +0000
ROA not after: Sat 30 Nov 2024 13:34:22 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61212 (0xef1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:34:22 2024 GMT
Not After : Nov 30 13:34:22 2024 GMT
Subject: CN=66e6e261-b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:be:35:23:b8:64:3c:b1:48:74:a1:fe:51:
ad:f3:ef:73:c3:1a:29:ab:75:9c:93:fc:57:97:e0:
87:14:5e:9b:ac:0c:dc:e4:3e:3c:6c:d7:ff:ea:6d:
48:8b:6a:49:ce:76:13:c0:0e:79:a6:a0:7e:e8:e3:
0c:76:2c:47:cf:58:87:ba:2f:f8:b4:2e:ee:15:5d:
4e:43:30:a7:4d:4d:24:59:4e:a7:62:75:b5:8e:bb:
43:5c:f7:c2:84:49:74:7d:bb:18:1c:97:e0:e2:c3:
d6:0d:d2:8c:33:3f:00:03:e4:c4:b0:d4:be:89:6c:
29:21:5e:e6:e1:7f:fd:7d:24:b5:81:02:7c:b8:6c:
05:90:6a:ac:37:1f:6a:c7:d7:99:e1:65:bc:01:b4:
08:6c:9a:51:03:79:bc:b2:8c:bb:64:48:27:b7:80:
21:52:c4:ce:27:67:29:4a:f5:79:77:f2:48:33:24:
01:79:18:66:3d:93:3f:f7:71:3d:3c:9e:d4:20:c6:
5d:81:c8:5f:92:9e:6e:24:00:d7:df:97:f5:d9:05:
71:62:2d:32:3f:65:b5:a7:66:a5:3c:5d:48:3d:95:
51:03:5c:95:74:46:6e:49:16:82:5a:2a:54:ae:e6:
b9:d7:1a:a3:a0:d8:49:cf:35:fa:a0:43:45:2e:1f:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:55:23:A5:9E:55:41:06:51:8B:23:D1:DA:FF:95:9D:FD:98:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3922C446736711EFBB50A544762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2a:0d:76:6e:df:56:c2:24:39:b7:a9:d6:dc:35:a1:c8:79:
db:85:e0:ec:c8:2a:bd:b3:bd:92:c6:49:36:6e:b5:28:80:fd:
36:e4:ce:26:ad:0a:4c:e4:d5:ef:75:ca:02:a8:73:1c:4b:02:
02:1a:c3:fb:7c:cb:56:52:8e:2b:c7:6d:9a:ba:6d:e9:e4:44:
58:de:a8:a2:33:dc:1e:68:36:8b:93:1d:40:2c:19:a0:81:f0:
3a:a6:8e:23:23:92:06:f2:2a:64:7c:ae:7c:5d:ee:6c:66:c0:
c5:2a:69:6a:e3:76:81:7f:d3:8f:98:ee:f7:8b:47:54:53:bf:
fa:8f:7e:1b:19:d9:8c:0f:a6:b2:86:a5:61:24:6e:e2:71:13:
aa:c7:b8:74:96:53:56:22:a0:8e:af:8f:b6:ae:e6:0a:c9:ad:
38:44:72:86:7b:5e:80:37:a1:ce:06:3a:61:3d:fa:2d:eb:31:
51:cc:cd:fc:c5:95:1a:d3:4a:cf:f9:a6:8b:22:62:f1:9d:e2:
d0:05:4b:8d:d0:28:0d:e6:4f:8a:25:fc:dc:10:6a:6a:d8:dc:
85:9a:de:73:19:74:3d:d6:3a:73:f0:8e:61:97:64:42:74:e1:
f9:ad:2d:e3:12:13:00:2c:19:bd:d5:a8:ce:c4:da:a8:00:53:
09:89:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org