Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E47EA5C74CD11EFA4687D46762E951A.roa
File: 3E47EA5C74CD11EFA4687D46762E951A.roa (raw, json)
Hash identifier: qoWe6jOh9tmW1RudXw4u7/fF3WCD8PVJ6D0hlMup91k=
Subject key identifier: FF:29:D4:4B:5E:1B:17:ED:B5:D1:C8:22:A1:2A:29:E4:CC:6F:F6:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E47EA5C74CD11EFA4687D46762E951A.roa
Signing time: Tue 17 Sep 2024 08:17:13 +0000
ROA not before: Tue 17 Sep 2024 08:17:10 +0000
ROA not after: Sat 30 Nov 2024 08:17:10 +0000
asID: 142403
IP address blocks: 154.211.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61430 (0xeff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:17:10 2024 GMT
Not After : Nov 30 08:17:10 2024 GMT
Subject: CN=66e93b09-8432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:e5:3f:fc:d9:f0:84:39:de:60:4c:b0:f0:
da:df:42:8b:b4:50:76:0b:4b:10:a9:61:ae:28:65:
f6:10:fb:12:29:29:3c:8f:67:78:d6:08:c9:7f:88:
a7:af:29:6f:1d:8b:e2:f4:16:86:4b:8f:6c:bd:93:
cf:11:e2:9b:2d:c8:91:0e:8c:92:23:ff:56:18:3e:
28:68:57:5d:06:19:e1:63:be:4e:ed:7f:a5:a4:31:
7e:3c:e5:bb:c1:ad:54:85:e6:12:c5:ee:f0:96:51:
b7:c5:bf:af:2e:de:4c:02:7b:2c:eb:44:08:90:5f:
a5:3a:c1:8e:fb:2c:41:b4:46:05:74:4e:cf:20:ee:
4d:7a:74:fb:96:a3:43:fe:d5:f9:1a:b0:7a:c5:56:
be:bc:d9:3d:5c:f1:d4:cb:58:90:16:95:45:66:c2:
65:36:e6:79:d2:88:9d:90:cc:de:f7:d4:51:22:e1:
fd:1f:01:1f:b5:1d:8e:63:bb:62:a7:0f:a6:82:ba:
27:1c:db:6d:55:bd:c6:e5:4b:90:6c:11:0c:3b:5e:
07:c5:db:7a:9a:00:80:49:be:fb:bb:a5:d4:81:04:
99:d6:8a:38:39:84:b8:b4:e8:c0:2b:19:fc:27:9f:
a6:92:cb:ac:1f:7a:21:f7:ea:45:01:f4:87:c7:55:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:D4:4B:5E:1B:17:ED:B5:D1:C8:22:A1:2A:29:E4:CC:6F:F6:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E47EA5C74CD11EFA4687D46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bf:25:d4:e7:73:1c:b4:24:e4:31:8c:58:d9:d2:9e:29:9f:
bd:05:fb:bb:d5:d3:eb:4d:c6:a4:e0:e8:1d:02:72:07:f6:7c:
f7:4c:6e:87:71:4e:37:dc:8e:77:9f:5c:dd:d0:85:f0:d6:78:
89:be:f7:34:d3:00:39:15:58:88:af:bb:fd:24:c0:50:d2:37:
96:ea:91:12:c1:d8:ad:f3:d9:1b:5b:ef:ae:c3:27:f0:f3:37:
31:a1:2f:0c:cc:8c:44:31:cf:23:20:34:ac:0b:e9:4d:ff:b8:
3e:88:a2:c7:68:f4:8b:bb:ef:09:a2:85:f3:c3:49:da:11:d8:
5a:27:04:eb:8c:f2:9f:c1:9f:4e:78:25:ee:bf:11:68:d0:9c:
f5:e3:9e:7f:70:c2:5b:71:50:f6:03:32:1d:dc:b9:16:9f:3a:
c3:5f:29:9a:46:24:9b:2c:38:eb:3d:db:35:83:00:7a:48:54:
5c:e8:74:37:57:2e:e5:20:30:c6:82:23:ef:9b:7c:59:fd:20:
7c:30:cb:1c:07:31:0c:c2:13:32:21:65:63:1c:f6:a4:d1:39:
80:cc:45:cf:53:ca:7f:42:00:34:8a:cc:98:22:e7:66:7e:58:
29:ea:74:15:da:df:e9:c8:6c:56:88:30:f5:d4:0e:88:28:56:
5e:ef:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org