Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6A9CD69DA411EF923966A7762E951A.roa
File: 3F6A9CD69DA411EF923966A7762E951A.roa (raw, json)
Hash identifier: 7UCoFDoGPf/fGsY1p2lqxonxWareiYDh2AQVW2AfS7E=
Subject key identifier: E5:58:4F:29:40:83:BE:77:2B:9B:55:DD:AA:77:03:8A:36:CE:A6:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6A9CD69DA411EF923966A7762E951A.roa
Signing time: Fri 08 Nov 2024 07:37:04 +0000
ROA not before: Fri 08 Nov 2024 07:37:00 +0000
ROA not after: Sat 30 Nov 2024 07:37:00 +0000
asID: 18229
IP address blocks: 154.210.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68044 (0x109cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:37:00 2024 GMT
Not After : Nov 30 07:37:00 2024 GMT
Subject: CN=672dbf9f-c1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:10:83:9a:15:42:bc:80:3b:eb:c3:d3:a2:
b7:e9:19:d9:7d:c5:56:70:6d:ec:8d:9c:b4:e4:a1:
e4:aa:85:a9:3a:24:e5:a9:fd:20:84:c0:2c:e2:76:
b5:93:c7:5d:9d:0d:51:4b:f3:d4:25:0e:29:32:3a:
2b:7b:ba:ce:f1:9e:fd:b7:91:ac:12:04:fc:f1:e1:
e3:7f:5e:66:9f:3e:09:a0:70:09:35:81:03:af:8e:
0a:4d:ac:f1:ae:d3:2e:99:e9:a2:30:97:c7:cb:ed:
ed:1b:47:7b:d8:ad:18:9b:8c:94:fe:77:bc:c2:62:
89:ba:91:ff:d7:53:4e:24:91:d3:31:1a:a6:37:c1:
c7:69:4b:7c:87:21:73:59:ea:81:e9:78:49:29:81:
38:e6:b2:eb:5f:52:b1:bc:25:ec:92:d5:a5:a5:56:
1f:0c:2b:96:f8:94:9f:7d:70:d1:65:df:1b:db:34:
76:6b:cd:6c:30:c6:f1:5e:70:5f:16:12:04:06:e0:
fd:48:e4:54:1f:77:df:d1:57:de:34:7d:ba:df:fa:
ca:d0:1c:59:47:82:79:bf:88:7b:1d:80:3f:35:2e:
b1:4a:6b:a0:ba:bc:e9:89:0a:67:1a:58:f5:be:4a:
b3:c7:d3:aa:95:81:07:e7:5a:15:66:e1:21:34:00:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:4F:29:40:83:BE:77:2B:9B:55:DD:AA:77:03:8A:36:CE:A6:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6A9CD69DA411EF923966A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.218.0/23
Signature Algorithm: sha256WithRSAEncryption
80:cb:14:ec:eb:ac:f9:5a:e3:4e:66:0b:3a:de:fb:86:ce:10:
8e:11:b4:e1:10:c0:0d:76:b0:8f:a8:7d:c7:8a:42:f1:35:62:
71:ad:cd:05:d8:ab:9a:49:58:f6:ca:43:f3:15:be:21:78:af:
d6:d1:b1:fc:18:38:30:04:70:9b:fc:c0:8f:53:79:a4:6e:15:
76:58:b6:09:2c:44:65:d2:5c:50:6f:23:68:f9:f0:3c:c4:d1:
2f:2a:9b:06:c1:b3:7a:40:eb:e9:33:26:5f:be:72:70:42:bf:
64:38:64:ca:e9:6e:f2:57:d8:2f:17:02:c2:db:d0:fc:f6:2f:
11:84:fa:d7:37:02:1e:dc:ce:68:69:c8:d5:20:3c:d8:d2:6e:
87:9f:de:bc:aa:3a:f4:ac:bd:ce:b7:ad:9f:b2:40:32:18:90:
4b:67:da:5d:8f:b7:88:1f:6e:ae:07:f6:35:3e:fd:3a:b1:01:
e0:19:b5:d6:a0:48:8c:ba:86:f6:c8:d8:3c:8b:de:8a:21:9d:
7e:ea:aa:ae:8a:a2:ca:ce:2e:f3:e6:d0:4a:04:e6:b3:a2:67:
a3:72:97:88:1b:e2:7f:95:18:55:31:95:e9:97:0d:b4:24:19:
f9:50:a8:e7:a5:e3:dc:c7:0a:50:2c:86:f3:58:79:50:75:df:
e8:c5:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org