Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F6AD9473FD11EF94C048AB762E951A.roa
File: 46F6AD9473FD11EF94C048AB762E951A.roa (raw, json)
Hash identifier: qLnLtKvtXCSwN8UlRTK+W2MtTMlCqekEKG9brERoZVg=
Subject key identifier: 9A:CC:8B:A9:43:56:DE:2B:C3:87:C9:61:56:2F:85:03:5D:F8:41:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F6AD9473FD11EF94C048AB762E951A.roa
Signing time: Mon 16 Sep 2024 07:28:33 +0000
ROA not before: Mon 16 Sep 2024 07:28:27 +0000
ROA not after: Sat 30 Nov 2024 07:28:27 +0000
asID: 142403
IP address blocks: 154.94.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61311 (0xef7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:28:27 2024 GMT
Not After : Nov 30 07:28:27 2024 GMT
Subject: CN=66e7de21-7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:7f:ea:5b:3c:26:40:8b:09:78:57:5c:34:
33:af:15:99:ac:21:fe:1d:80:97:66:c1:f5:ea:fc:
78:ed:83:a8:3b:3b:c4:f0:7a:ca:b2:a8:16:30:32:
bb:a8:a0:05:9e:f5:4c:0a:e9:50:c7:67:65:ca:9c:
e4:05:90:8e:f0:c5:90:a9:c3:d3:d0:38:d1:38:8b:
dd:d9:f6:28:80:7b:f5:1f:ee:13:79:da:9c:66:7d:
53:95:9c:5a:eb:c8:93:33:bc:af:b3:e2:6e:30:9a:
93:55:8f:99:94:7d:13:92:49:89:b3:a9:a4:d8:2d:
a5:ca:2b:e2:79:d0:f4:6a:6e:4a:db:7d:9a:58:ed:
6d:71:c6:29:02:5e:5a:49:4a:58:b1:17:79:88:68:
f4:45:7c:88:81:82:ae:c0:92:42:d9:4e:cc:f5:63:
13:66:a0:71:0a:c7:8f:94:a2:ca:a5:0a:7b:ff:99:
39:1b:27:17:1b:c7:6f:22:a1:b8:d3:f6:c8:5a:47:
33:49:82:18:2e:b6:e4:82:55:42:37:58:2b:a5:aa:
0a:61:9b:97:68:12:a5:99:97:26:fa:01:14:c8:1d:
f8:48:64:fb:b8:65:06:61:e5:a5:22:8a:d0:72:98:
be:4e:1e:19:29:ad:42:5d:4b:90:1e:74:40:8a:da:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:8B:A9:43:56:DE:2B:C3:87:C9:61:56:2F:85:03:5D:F8:41:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46F6AD9473FD11EF94C048AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c6:52:ac:ec:d3:52:6c:10:6c:64:1d:ff:18:de:49:5c:e0:
86:39:6e:a1:b5:aa:82:52:32:7d:b7:b9:3e:ee:64:a1:ad:f6:
cf:2f:f0:1c:fc:e6:5e:25:bd:8f:f7:12:10:99:ea:20:38:23:
c6:4d:fe:4b:0a:f1:7d:ba:eb:5b:3b:a8:90:d3:f3:6d:5d:77:
c1:99:8d:45:f3:fc:48:71:0d:d5:83:23:7f:df:b9:2d:a6:2e:
a8:e8:cd:31:8a:d9:55:14:5c:52:42:33:0f:9d:b0:bb:00:a9:
17:8e:bf:c9:1d:d3:31:df:f4:90:d7:c3:90:d6:a6:68:da:1a:
e8:c6:b7:53:54:22:86:c6:00:0c:13:18:9b:f5:6f:be:fa:df:
84:d0:ae:7c:5f:07:75:89:47:ba:3d:f9:37:b6:24:b5:57:2a:
d7:2e:d9:f0:3e:ff:4c:8e:96:d6:c2:0e:0e:08:95:2f:eb:ab:
da:28:9b:9f:3e:f7:3b:60:83:a5:60:25:bd:c8:ce:95:66:2e:
09:2a:31:13:f8:92:a4:0f:36:fe:ee:e5:2f:fd:2b:45:ad:49:
ba:a9:3e:c2:3c:02:3f:75:f4:d4:a3:3f:cc:eb:3b:85:08:bf:
65:35:b9:9f:80:ed:fb:9b:ef:6b:85:b9:71:60:fb:9c:c4:da:
fd:53:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org