Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40B2978C983211EF8539AF4A762E951A.roa
File: 40B2978C983211EF8539AF4A762E951A.roa (raw, json)
Hash identifier: 6dMQSBy+NpxA1dcgVvjpAL08kXt1PwKfNOQfLBhfuVc=
Subject key identifier: DC:7C:53:AC:32:28:3A:8C:42:4F:29:A8:95:86:34:A7:FE:CA:3D:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40B2978C983211EF8539AF4A762E951A.roa
Signing time: Fri 01 Nov 2024 09:18:27 +0000
ROA not before: Fri 01 Nov 2024 09:18:24 +0000
ROA not after: Sun 01 Dec 2024 09:18:24 +0000
asID: 398823
IP address blocks: 154.213.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66737 (0x104b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:18:24 2024 GMT
Not After : Dec 1 09:18:24 2024 GMT
Subject: CN=67249ce3-01d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:47:e0:d0:27:53:5c:25:85:69:b8:d7:54:
74:22:35:37:1b:80:a9:57:19:a5:d1:b8:e2:14:76:
f6:2d:64:59:a0:7b:ee:2a:8e:be:85:80:ca:84:d7:
0b:d3:87:d2:45:ae:1e:8f:73:59:93:53:f9:ee:7f:
6a:ac:b8:41:68:8c:47:24:89:0d:a6:96:38:62:74:
b7:40:ab:2a:66:98:5c:8b:03:75:1b:38:b0:39:08:
f4:d4:52:32:19:84:db:b2:a8:52:77:5a:f1:6f:5c:
b3:33:0a:a3:b8:f3:04:e4:7d:c3:aa:ae:4b:56:30:
f2:33:6d:c2:1b:4d:03:f4:50:ae:76:67:e3:f4:43:
89:78:2b:01:b7:ee:de:d9:39:c5:ea:f1:05:38:48:
a3:b6:db:53:1b:ac:25:a6:b4:83:3b:7a:0f:99:d6:
49:e9:69:dd:4d:eb:30:42:16:52:8b:9b:a4:83:b9:
95:04:4b:c9:28:e3:18:85:fa:af:30:8c:b1:72:59:
56:a9:93:eb:aa:97:08:5d:07:0f:4f:61:fa:ec:40:
4d:11:c4:a6:5f:6d:f4:71:28:ed:47:12:ab:7a:d6:
9c:31:70:4a:6c:f9:c3:bc:21:6e:85:54:7c:98:f7:
70:c6:1c:37:3c:1d:5f:24:d0:e1:dd:0d:7e:49:64:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:53:AC:32:28:3A:8C:42:4F:29:A8:95:86:34:A7:FE:CA:3D:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40B2978C983211EF8539AF4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
20:5c:c4:96:75:11:1c:31:b9:ed:b6:c2:70:23:ca:17:86:b9:
b2:84:ef:bc:8e:23:67:f7:13:ad:80:3c:af:94:30:1e:fc:a4:
65:e8:03:eb:72:00:3f:e3:2e:26:91:e2:d6:b0:56:11:dd:63:
e0:c8:8c:f7:2b:3e:cd:8f:42:e6:27:0f:7f:cc:1f:a3:0d:1c:
4a:8f:91:a0:40:d8:2b:0c:be:40:45:d5:d0:4e:8d:31:4c:c3:
e0:9f:1a:ac:5d:af:32:be:79:e3:54:23:22:c9:19:4c:26:a2:
16:41:eb:c0:4c:56:24:b1:9b:0f:47:5c:ea:35:43:f4:59:8a:
2f:25:2f:22:15:6c:c6:ec:4a:52:39:71:d2:79:3e:71:c9:ba:
d8:75:d9:73:25:6c:37:73:ca:dc:10:33:0a:47:b0:05:81:a9:
78:81:1b:fd:6d:35:c3:40:1f:d9:cb:41:a7:9f:65:e7:99:75:
f5:af:15:c4:67:88:7e:89:55:56:f5:33:00:26:aa:41:4f:7f:
e1:3a:99:9a:2f:dc:da:54:91:6c:c2:b9:92:d5:9b:93:33:60:
5a:5f:66:1e:82:9f:fa:9d:f0:55:49:ab:83:ae:3c:86:2b:9e:
b2:ba:cf:b1:b1:cd:3b:3d:6c:f5:63:04:cf:86:8e:f4:5b:81:
38:59:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org