Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E1512A44411EF907B0C78762E951A.roa
File: 3D4E1512A44411EF907B0C78762E951A.roa (raw, json)
Hash identifier: XmJQbl32WR47UnPgiwnMu2dGJhuJf/tkigCAfwfIiBU=
Subject key identifier: 44:22:CE:3E:59:B1:FC:8C:A6:C6:63:AD:41:77:38:D1:A7:E7:FA:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E1512A44411EF907B0C78762E951A.roa
Signing time: Sat 16 Nov 2024 17:57:26 +0000
ROA not before: Sat 16 Nov 2024 17:57:23 +0000
ROA not after: Sun 24 Nov 2024 17:57:23 +0000
asID: 135097
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69079 (0x10dd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:57:23 2024 GMT
Not After : Nov 24 17:57:23 2024 GMT
Subject: CN=6738dd06-1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:19:ab:19:25:ad:1b:50:c3:a6:9e:27:d7:
08:a5:7d:5b:33:8d:1e:10:ae:e2:16:01:9d:77:bd:
44:2e:e3:35:55:f0:80:69:c4:21:da:47:9d:d4:74:
ab:89:ff:d8:e1:20:c9:a3:43:d6:46:f1:31:0f:fa:
b0:22:5d:6e:13:f2:7c:78:ae:90:9f:3d:95:fd:1b:
e6:b7:a0:60:ac:cf:25:11:f9:df:a9:41:1e:af:15:
ab:30:ad:7c:2d:ff:03:2e:56:c8:73:8e:52:6e:03:
4a:55:32:10:8c:72:72:61:7c:9d:aa:42:8f:3f:65:
7e:75:ab:ce:1f:20:3a:0a:45:34:9e:69:cd:ce:f6:
08:c7:d0:8c:25:2e:fc:55:4b:16:3d:33:a2:ae:6a:
70:c2:fb:31:de:90:a1:ba:14:dd:da:fa:5e:d7:d2:
97:cd:25:ee:c4:32:54:b7:8b:0e:a0:b3:e1:e3:17:
a0:15:99:23:12:67:8c:be:b3:01:49:38:bf:2c:37:
16:09:f1:ea:28:cc:80:53:7c:55:08:c5:4a:15:9e:
e0:36:58:48:a3:c5:ab:b0:b5:b2:40:cd:e6:f6:33:
f8:fe:ff:f1:8b:88:b9:96:77:ee:34:56:ac:96:4c:
c6:54:19:dc:73:02:86:8c:2d:93:64:ab:13:d1:89:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:CE:3E:59:B1:FC:8C:A6:C6:63:AD:41:77:38:D1:A7:E7:FA:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4E1512A44411EF907B0C78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:07:b4:45:60:63:11:b8:da:69:bd:19:8a:b2:af:f8:1a:a2:
e0:df:17:26:bc:3e:b5:06:2e:0e:dd:2a:ca:72:fc:2c:33:34:
0f:ad:57:43:8c:7b:a3:2b:68:15:21:57:d6:58:c1:cd:c1:32:
d8:71:5d:74:bf:60:a2:6f:9a:80:c0:fe:c7:84:77:5e:80:41:
2b:22:dd:de:cf:7e:bd:15:7b:45:5a:0f:11:15:59:59:1d:ec:
7e:03:96:ca:35:0b:ce:17:cb:77:6f:0f:d8:1b:ce:68:14:ed:
17:04:c4:b1:5d:5e:b3:b9:d5:fb:f4:ba:2b:5c:c1:ac:ed:80:
8a:ab:4f:d5:50:47:b7:5a:9d:f5:31:08:ca:78:d0:bb:53:c7:
e3:e6:4b:1b:7b:bd:a0:a7:ad:b1:e8:f1:1d:93:b4:b7:56:cb:
91:46:36:70:6f:17:37:4e:7c:07:12:cc:c0:5d:67:c4:f0:c8:
9c:29:a8:b1:e5:4b:93:fe:3b:86:59:28:d9:a8:b6:87:aa:e2:
62:b5:72:c5:1d:4b:8e:98:ae:e5:25:c2:67:99:8e:de:9a:9d:
c2:16:49:54:54:ed:ea:d1:47:92:ac:97:4b:8b:ff:4b:ec:84:
d6:b9:dd:ea:d9:cb:89:b3:c6:a2:63:b2:79:34:49:e6:ba:fb:
8a:ed:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org