Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4F55EAA15D11EF932A064C762E951A.roa
File: 3A4F55EAA15D11EF932A064C762E951A.roa (raw, json)
Hash identifier: fsSoKepOFyCGI6pue6CQIjhQ69k5ruiOkuQ2DW+54IA=
Subject key identifier: 32:89:D7:6C:59:79:4A:FC:A9:1B:A0:47:AE:F6:DC:00:80:AD:C8:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4F55EAA15D11EF932A064C762E951A.roa
Signing time: Wed 13 Nov 2024 01:18:45 +0000
ROA not before: Wed 13 Nov 2024 01:18:42 +0000
ROA not after: Sat 12 Jul 2025 01:18:42 +0000
asID: 55967
IP address blocks: 154.85.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68729 (0x10c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 01:18:42 2024 GMT
Not After : Jul 12 01:18:42 2025 GMT
Subject: CN=6733fe75-9dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7e:4f:c1:49:bb:68:10:fa:11:6d:ae:ab:aa:
36:e4:2b:af:c4:c2:b5:c9:c7:73:44:a8:d9:5f:41:
32:d8:ca:93:1e:ef:d7:f2:45:f1:89:75:7e:2c:e5:
e0:33:95:2b:d9:f1:b9:be:e1:0d:45:d0:d2:e6:b0:
b3:b3:ac:f1:8c:39:66:8b:84:65:8e:f7:93:03:ff:
1a:bb:ef:72:58:a6:0e:45:fb:db:42:02:61:38:b7:
e2:ea:b0:a5:51:78:fb:9a:bd:7b:31:79:56:69:f8:
43:46:d4:aa:92:ad:7d:f7:f8:a4:12:33:40:3b:97:
65:58:3a:0d:e3:93:de:0f:21:dc:11:71:66:cd:e5:
48:4b:44:e6:c2:44:03:8f:d1:33:92:8e:23:f0:b8:
db:2f:b1:56:6e:5c:74:18:9e:2f:7d:c5:69:9a:c0:
d8:8d:ca:f1:bf:26:60:1a:ec:3a:9a:aa:15:75:55:
2c:6e:ce:d1:cc:8c:ed:c8:09:6b:a6:61:76:ba:44:
f6:58:e8:2e:86:70:03:25:c4:c7:e6:ea:16:e0:c3:
f2:b0:21:bf:4d:ec:32:74:ce:41:a9:a4:d8:de:51:
3e:4e:3f:6f:fc:3d:b4:55:c5:b2:81:65:6b:dc:e5:
d6:6f:6d:63:ff:d5:1c:69:ac:32:36:73:0e:02:99:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:D7:6C:59:79:4A:FC:A9:1B:A0:47:AE:F6:DC:00:80:AD:C8:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4F55EAA15D11EF932A064C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.44.0/23
Signature Algorithm: sha256WithRSAEncryption
00:00:7c:ac:da:8d:20:9e:76:60:81:41:ce:46:49:12:8a:b4:
00:95:0b:c6:4e:11:10:a2:e7:9d:60:38:66:01:dd:5d:ca:eb:
c9:24:14:c3:da:f4:65:fc:f8:de:23:73:b7:f8:af:1e:e7:c4:
98:6b:8b:b6:31:ee:71:23:2e:1d:92:08:d0:b6:eb:0f:93:ba:
87:46:d8:f4:83:7c:f8:ab:c9:1c:4e:07:6e:07:d8:91:e7:96:
82:89:fb:29:52:f1:47:0c:ae:56:e4:fa:08:7e:4a:b8:55:d6:
d6:32:4e:c2:f0:5c:07:0e:d1:da:50:75:02:2d:75:73:36:41:
6e:31:4f:2f:aa:b4:10:27:bd:60:a3:13:65:34:51:6b:24:99:
c3:34:1b:fe:28:b7:6d:cf:24:0b:70:58:03:f0:5a:f6:f1:be:
dc:40:d5:73:ad:a1:55:61:c7:43:93:23:b4:98:6e:01:7a:09:
42:e1:d0:c0:b2:af:96:7a:26:14:9d:70:9e:fa:da:e2:4f:d4:
5c:b3:92:d3:0c:c0:b6:9a:7f:be:91:e6:2b:28:de:5b:1b:fa:
f3:f7:d1:07:13:1b:04:90:eb:82:5c:55:a3:70:61:9e:cc:5e:
ea:5f:4b:ae:00:a9:d0:d7:a9:72:22:ef:b0:0e:06:7e:e3:3e:
e0:80:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:04 2024 by rpki-client on console-ams.rpki-client.org