Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/394144FCA8E111EFB79E9F7D762E951A.roa
File: 394144FCA8E111EFB79E9F7D762E951A.roa (raw, json)
Hash identifier: 4yRn82j9FI6xVIF9nxCcmF5WZEqkZoPv/hIYd/YONj4=
Subject key identifier: 35:FD:CC:2B:9D:36:C2:6D:32:C9:F9:FD:C8:4B:DE:BF:88:94:72:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/394144FCA8E111EFB79E9F7D762E951A.roa
Signing time: Fri 22 Nov 2024 14:51:15 +0000
ROA not before: Fri 22 Nov 2024 14:51:12 +0000
ROA not after: Tue 03 Dec 2024 14:51:12 +0000
asID: 62240
IP address blocks: 154.194.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69781 (0x11095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:51:12 2024 GMT
Not After : Dec 3 14:51:12 2024 GMT
Subject: CN=67409a63-33f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:4d:e8:92:13:89:3a:64:c6:3d:2e:95:23:
17:a8:d4:71:29:ea:71:06:3e:a2:01:2b:b7:ce:cd:
71:eb:86:f5:5e:d8:04:47:e9:6f:4a:39:ee:db:d4:
98:63:64:14:b3:20:f8:75:46:da:02:5a:77:e7:4e:
be:44:e7:fb:90:c9:46:4c:6e:b2:17:b1:b4:3d:83:
59:5f:05:60:e6:22:d5:d3:10:91:a1:ff:51:52:bf:
cc:f9:70:12:55:b9:f3:e1:06:56:13:c2:8a:97:8d:
55:e4:b2:be:fe:40:a5:c4:82:8a:06:dc:41:14:1f:
13:4e:cf:48:88:98:40:a1:c8:41:7f:da:b9:08:c8:
63:2b:40:0d:8f:7a:47:8b:61:33:1c:4a:55:93:e5:
a8:5d:01:2e:eb:df:4d:02:b6:cf:b2:55:c5:07:a0:
a5:db:b0:2e:32:27:7d:ae:ae:ec:f3:a6:83:da:e0:
3d:15:af:1b:f6:cd:92:0f:a4:42:97:09:36:1d:19:
ad:e0:3c:0f:1f:aa:dc:37:e0:38:db:dd:20:af:45:
4d:35:8a:9c:33:d0:3f:ae:61:37:70:7a:db:9a:23:
50:ee:61:bc:33:96:d1:42:69:4f:fc:eb:59:af:be:
b4:b0:ee:fd:87:8d:40:0b:1e:be:31:a3:e4:e1:9b:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:CC:2B:9D:36:C2:6D:32:C9:F9:FD:C8:4B:DE:BF:88:94:72:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/394144FCA8E111EFB79E9F7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:50:68:68:0d:64:e5:be:b5:8f:30:03:4a:93:b1:b6:fe:69:
db:b9:19:e4:57:b1:ad:72:a8:ac:80:86:f7:83:77:a7:0d:49:
c3:b5:94:5a:02:39:0a:fe:aa:e5:24:b2:2d:d4:dc:1d:5e:8c:
33:6f:59:2e:74:71:61:17:24:8c:00:6b:86:3e:fc:4a:2d:24:
10:4f:27:33:a0:98:22:35:7d:fd:f6:66:87:a6:67:fe:fd:50:
68:eb:ae:0e:91:a9:f9:27:48:9d:b6:31:64:86:09:a4:d5:16:
28:a5:58:56:74:91:1d:df:2a:ea:54:ee:dd:a2:77:27:a2:80:
b3:d0:de:19:9d:91:b9:65:c1:37:f0:23:74:02:c0:77:4a:63:
40:48:bb:47:a3:ed:5f:e6:0a:04:ee:36:e5:a0:8f:3e:67:cc:
61:c7:36:15:b1:ee:fa:0f:0a:1e:df:f8:60:4f:29:3f:05:75:
5b:0b:f5:7f:a9:f2:1c:08:d7:35:8c:f2:8d:59:75:a0:a8:74:
55:e3:e7:69:d3:7e:f2:9d:7e:13:b5:fb:76:56:70:76:18:7b:
d6:b4:9a:64:b5:5a:d8:3e:48:de:42:b8:72:9c:2a:fc:6e:aa:
73:f5:f2:29:bf:10:f3:6d:4a:ce:cb:4b:19:bf:cd:21:41:30:
93:64:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:04 2024 by rpki-client on console-ams.rpki-client.org