Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A6B390A4BE11EFBE623E83762E951A.roa
File: 43A6B390A4BE11EFBE623E83762E951A.roa (raw, json)
Hash identifier: 4Bmzm8untmlsQPy1KOnU2ZN4mljRVOv2wtamjMSm43w=
Subject key identifier: EB:DA:F0:64:37:FC:D0:10:30:DE:E9:7E:D5:2D:71:0A:50:FD:74:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A6B390A4BE11EFBE623E83762E951A.roa
Signing time: Sun 17 Nov 2024 08:30:56 +0000
ROA not before: Sun 17 Nov 2024 08:30:52 +0000
ROA not after: Tue 10 Dec 2024 08:30:52 +0000
asID: 54252
IP address blocks: 154.201.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69214 (0x10e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 08:30:52 2024 GMT
Not After : Dec 10 08:30:52 2024 GMT
Subject: CN=6739a9c0-ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:3f:56:14:8b:7d:24:6d:d2:bc:ef:21:ec:
85:0a:0c:93:0a:0d:25:49:3c:d4:3f:c7:04:18:b6:
d2:0e:5d:c2:8f:b5:a8:c6:f1:ab:33:9a:de:76:cc:
3f:fb:7b:f2:c7:8c:9b:9a:10:f1:e9:b9:94:b7:c0:
dc:ba:ce:70:81:a6:1a:91:d8:1f:f7:85:a5:8b:a1:
51:96:94:bb:5d:3c:38:61:5c:08:61:1e:88:b9:4a:
8f:83:36:4f:cf:0a:bb:55:13:83:4d:31:46:3f:5d:
a3:8f:0b:f0:56:f7:eb:1d:ca:7c:b3:f9:49:5a:25:
82:94:0f:95:94:44:53:9a:8c:95:90:d2:48:b9:eb:
1b:d1:18:dd:44:fb:00:6a:45:38:d3:8b:b0:6a:50:
33:af:45:91:b4:5d:44:c6:1c:ce:e5:de:e9:d9:e3:
da:08:14:83:8b:37:6e:ac:bc:34:97:61:8c:af:de:
b4:e9:b0:32:dc:35:83:67:6f:63:5e:1a:dd:0a:00:
25:87:6c:5f:e7:e1:42:14:f9:2f:cd:b2:e3:ae:a3:
ca:64:4e:11:3f:44:5f:f6:34:5b:69:4a:48:a0:9d:
03:c5:64:21:6b:e4:d2:a3:94:13:85:f8:cc:8d:19:
58:f4:cb:bb:6a:03:6e:93:eb:2a:a2:19:a8:55:1f:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:F0:64:37:FC:D0:10:30:DE:E9:7E:D5:2D:71:0A:50:FD:74:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A6B390A4BE11EFBE623E83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:1b:b6:d3:87:c1:9b:36:a3:2d:a0:ee:35:a7:0c:0f:d1:be:
0d:e9:39:09:26:ac:8d:14:74:04:c5:20:a7:81:8e:00:f3:d8:
65:9b:b4:6e:81:64:d2:31:76:fc:db:0c:1e:b2:60:65:83:d0:
a2:6f:88:02:cf:7c:4c:22:9a:2a:4e:d8:36:76:a0:10:b5:2b:
fe:a5:d7:06:0b:3f:c2:f2:2f:71:b3:69:4d:2d:50:12:b7:69:
8a:f4:ac:d4:89:b2:fa:ca:2b:7f:cb:70:1d:9b:b1:bb:bd:9f:
ec:99:7b:97:8f:ed:2a:93:e0:af:4f:c2:74:55:bb:8a:c0:46:
62:f9:3b:8b:e5:cc:6e:3b:65:41:5e:de:13:39:a4:13:49:20:
d7:cb:27:f2:09:66:71:c2:c5:73:fc:fc:52:19:2c:92:5f:e6:
b0:c0:45:92:e3:62:f2:42:46:5b:0a:94:e7:48:2d:5c:c5:0b:
50:02:6a:e3:72:f6:b9:d0:eb:96:d3:2b:77:5c:aa:b0:ed:d8:
1e:fd:fa:d5:19:73:15:a9:07:48:eb:ea:77:d5:c2:44:c5:b4:
d4:c6:b4:eb:1e:4a:c3:53:00:ef:d8:3d:a3:b9:75:cb:1a:db:
1f:94:48:be:bb:6e:58:a9:13:cc:b5:3a:65:6d:66:0c:d3:9a:
b1:bd:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org