Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4363FA2E6A6B11EF9A77839C762E951A.roa
File: 4363FA2E6A6B11EF9A77839C762E951A.roa (raw, json)
Hash identifier: Uupi+6swoZuQRRBrRtfeVQIDi97phElt4jgygSivNIU=
Subject key identifier: 44:07:8A:5D:E2:2A:9D:11:2C:5E:F2:90:AC:7F:02:4B:0E:37:AD:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4363FA2E6A6B11EF9A77839C762E951A.roa
Signing time: Wed 04 Sep 2024 03:10:40 +0000
ROA not before: Wed 04 Sep 2024 03:10:36 +0000
ROA not after: Mon 30 Dec 2024 03:10:36 +0000
asID: 17561
IP address blocks: 154.85.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59915 (0xea0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 03:10:36 2024 GMT
Not After : Dec 30 03:10:36 2024 GMT
Subject: CN=66d7cfb0-b972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:72:09:7d:d0:f4:ab:ea:9c:a1:b0:0d:02:
68:0b:e4:4b:81:85:9e:53:06:28:e1:43:d1:e9:30:
65:4c:8a:28:55:6f:3b:13:7e:39:41:9c:e2:7a:fb:
75:ef:50:ce:d9:1d:80:ba:1e:e2:1d:5d:49:26:41:
8e:26:7a:ce:60:f6:fc:6d:79:e2:10:68:2d:4f:84:
fc:7a:59:8d:85:bc:c0:a8:f2:a4:4b:74:bb:c5:41:
bb:15:f4:5b:13:93:07:bc:eb:45:24:0c:85:24:37:
f5:35:a3:7c:6b:b8:4c:44:fb:c9:bf:7c:e8:62:e3:
43:3b:be:24:dc:59:7a:78:8a:39:43:57:a1:de:0c:
77:e6:6f:3c:20:04:85:f8:1e:47:88:f7:97:e9:d1:
30:f6:2f:03:2c:6a:47:a1:b5:81:64:b6:bc:66:94:
81:95:3b:f0:0e:33:17:33:5e:b0:57:e5:aa:75:28:
48:9d:9e:00:d3:bd:48:d3:3c:b6:83:f0:f2:a2:5c:
05:d9:ed:71:df:56:1e:9e:03:9e:c0:54:97:4b:82:
b9:f3:ab:23:da:ad:0f:6d:22:63:c9:c2:c3:39:74:
c2:8f:a6:19:91:57:53:4e:04:ae:aa:0d:c7:20:87:
63:50:c0:66:2e:1e:30:84:9d:f8:45:ba:4c:df:52:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:8A:5D:E2:2A:9D:11:2C:5E:F2:90:AC:7F:02:4B:0E:37:AD:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4363FA2E6A6B11EF9A77839C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.32.0/19
Signature Algorithm: sha256WithRSAEncryption
25:7e:58:75:91:cb:5c:b7:bc:6a:b0:6a:1b:a9:7d:94:30:c3:
2d:a8:8f:d1:b4:74:0e:2f:db:a7:71:0b:e3:07:05:d4:dc:2b:
06:43:24:7e:e0:00:72:1a:f8:02:c2:41:09:19:9e:24:29:8a:
36:1a:0e:f1:00:74:25:74:de:95:90:a6:12:7a:e3:48:98:23:
3e:4b:aa:31:9c:7d:2b:62:aa:23:4c:a2:a4:ed:f2:84:97:bf:
b7:af:7b:fc:62:c1:2d:80:4b:e9:2b:51:54:0e:99:3c:7b:90:
e4:df:4c:18:c0:55:5f:bd:d7:d6:fc:aa:68:f1:33:a7:03:8d:
33:7e:4b:6b:36:48:ac:48:92:d6:7e:1f:34:b9:7d:10:d7:38:
b2:2e:d1:3f:14:ac:2d:6d:2a:f9:c0:15:1b:1f:e3:42:64:2d:
3d:e5:29:db:00:34:8c:df:c7:2d:43:2b:3b:90:03:92:5a:78:
ab:a3:32:c5:d7:b1:a9:9e:5d:c5:90:1e:12:30:a9:20:1e:7c:
85:98:3a:4f:f4:e6:d0:11:6e:87:a8:66:a9:72:5c:03:d3:3c:
d3:0e:d4:3a:33:ea:c7:68:49:8a:b6:16:5e:40:3a:e6:38:53:
80:fb:35:2c:32:09:15:64:ce:41:0d:53:59:88:b3:e0:a4:24:
6e:1c:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org