Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C429F9674D111EFA407515E762E951A.roa
File: 3C429F9674D111EFA407515E762E951A.roa (raw, json)
Hash identifier: hwO3UzgF8C22d04cy3r0f4/Px9yNv/92Df5B3orTge0=
Subject key identifier: 87:87:A1:9D:5B:83:7A:14:D2:A1:FF:26:1F:3D:3C:2B:B0:5D:50:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F026
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C429F9674D111EFA407515E762E951A.roa
Signing time: Tue 17 Sep 2024 08:45:48 +0000
ROA not before: Tue 17 Sep 2024 08:45:45 +0000
ROA not after: Sat 30 Nov 2024 08:45:45 +0000
asID: 142403
IP address blocks: 154.83.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61478 (0xf026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:45:45 2024 GMT
Not After : Nov 30 08:45:45 2024 GMT
Subject: CN=66e941bc-0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:4b:be:67:b4:c7:ca:ca:7b:a7:4d:fb:99:
e3:ff:21:94:7f:88:52:b9:9d:ba:b4:99:05:00:6f:
d3:13:b5:86:0e:4c:0d:75:5b:09:02:28:2d:48:4a:
eb:20:f2:70:9e:9a:9c:11:8f:90:68:7c:38:32:c1:
a7:68:dd:e3:a7:3b:35:cf:db:04:35:58:18:8e:b2:
b0:4e:98:04:14:e3:2b:51:86:69:0f:90:03:3b:2c:
36:2a:01:13:cc:cf:7e:f3:fd:c3:fe:c3:12:67:7d:
80:22:9d:00:ea:00:00:56:58:3c:f8:ff:f0:b7:fe:
d4:47:31:e1:3c:52:ff:12:82:96:f3:b9:a6:2b:8b:
4a:00:83:09:fc:35:68:f4:e6:7c:1c:b2:d8:05:55:
a0:0d:4a:30:d6:fd:86:58:25:c6:f0:e7:83:47:4a:
be:8d:b7:c5:d4:02:49:0e:fa:f6:b4:42:93:09:6c:
b0:35:b0:ca:84:0a:f7:1d:c7:b3:fd:7f:ef:99:54:
c6:17:9e:e1:7e:75:3f:e6:f5:fa:fa:1c:90:06:5b:
35:57:ed:ad:66:89:01:bf:9a:eb:86:08:ac:9c:8b:
e9:13:d0:56:d7:34:64:86:47:07:b0:ff:73:ce:61:
7d:30:bb:1e:f0:d1:83:4d:51:76:01:42:14:c6:e8:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:A1:9D:5B:83:7A:14:D2:A1:FF:26:1F:3D:3C:2B:B0:5D:50:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C429F9674D111EFA407515E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7d:02:a1:6b:ba:3a:18:d7:a0:0a:d0:65:b7:d1:1f:ec:89:
fa:06:28:7c:df:e0:20:95:b3:37:66:9e:7f:29:b0:89:8c:66:
53:58:f0:d6:84:ef:78:a8:25:78:00:c9:30:49:66:23:8f:82:
81:33:31:68:75:81:ab:4d:bc:83:e5:d0:d2:84:51:a9:d9:1a:
11:a6:73:3d:2f:92:6a:1e:a4:8f:a0:2f:0b:17:c5:96:ac:e7:
d2:05:e4:34:2a:66:52:61:29:55:53:19:d4:45:9c:0d:ee:65:
29:b0:db:b5:9d:7e:a6:cf:02:46:47:26:32:58:24:05:ec:f9:
4c:30:8a:30:db:56:4f:f4:69:b4:8d:e6:9b:89:ba:0a:e5:8c:
e7:94:fb:c3:1a:66:96:4c:a0:1f:82:23:12:22:c4:a5:ab:b9:
13:ba:0d:bc:68:79:b2:7a:45:40:21:95:66:c7:fb:5a:eb:79:
51:4b:8b:ed:b1:fa:18:20:56:df:56:67:32:b4:c4:2d:37:90:
e0:86:cb:89:6b:07:4a:d3:43:22:a2:7b:85:19:02:e5:7a:b6:
d4:b7:05:2d:81:ba:31:3b:4d:f6:74:33:15:31:50:a9:c8:8f:
b3:bc:84:00:74:dd:9d:32:08:b9:50:3e:81:3f:39:8d:4e:cf:
93:ef:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:04:08 2024 by rpki-client on console-ams.rpki-client.org