Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47197198A26111EFA37FEA98762E951A.roa
File: 47197198A26111EFA37FEA98762E951A.roa (raw, json)
Hash identifier: 4Sm9YuctLdm4orz0izAOP6oWp6/atQD1C8efEj0mErw=
Subject key identifier: 45:B5:CA:54:F0:5E:2E:E8:A8:0E:E5:75:9B:91:69:E8:02:5A:C3:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47197198A26111EFA37FEA98762E951A.roa
Signing time: Thu 14 Nov 2024 08:20:16 +0000
ROA not before: Thu 14 Nov 2024 08:20:12 +0000
ROA not after: Sun 12 Jul 2026 08:20:12 +0000
asID: 55967
IP address blocks: 154.85.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68846 (0x10cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:20:12 2024 GMT
Not After : Jul 12 08:20:12 2026 GMT
Subject: CN=6735b2c0-a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:fb:19:27:63:b4:55:50:44:73:65:87:bb:
36:6a:64:a1:e9:d1:1b:8d:b2:29:1a:b7:9b:73:ae:
ea:18:ea:b5:46:58:e7:13:95:02:74:e1:3f:5a:ee:
04:c4:5f:51:ca:71:9a:7c:19:1f:9c:79:79:2b:76:
c3:c1:95:6f:4e:f2:0a:61:21:07:74:1c:69:c0:70:
56:e1:37:6a:bd:71:96:e9:af:b9:5d:7a:fd:5a:04:
70:fc:0b:6c:82:d8:22:48:04:27:7f:a8:dd:4d:4d:
f2:10:aa:04:6f:e8:88:87:87:28:45:32:2a:0a:b2:
e1:24:b3:a8:26:87:b6:89:57:32:fa:4a:90:8e:3c:
4e:66:15:25:c1:2d:72:55:ab:bb:73:5e:bd:a6:32:
38:b1:48:b4:e2:15:cc:6f:47:3a:a3:24:1c:ac:bd:
b0:ee:7f:0c:64:f5:1b:a3:09:8b:f3:e6:9f:ad:4c:
70:93:c6:a9:6b:9a:11:8c:22:c3:9b:1f:f9:5e:e0:
a9:b9:f6:61:7a:e2:8b:c3:6e:53:6c:08:9a:ce:a3:
95:6a:04:da:4d:fd:9b:33:fd:2a:17:90:32:7a:1d:
11:ab:29:18:fe:6f:04:7b:47:d7:0f:d8:ac:6c:aa:
dd:da:bc:56:3f:74:85:89:f6:14:5f:7a:a4:fe:04:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:CA:54:F0:5E:2E:E8:A8:0E:E5:75:9B:91:69:E8:02:5A:C3:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47197198A26111EFA37FEA98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.48.0/21
Signature Algorithm: sha256WithRSAEncryption
53:92:28:8e:3a:14:39:19:20:5b:01:9d:06:2d:7d:fc:92:57:
0b:86:9a:aa:f1:84:40:83:94:c4:ff:31:5b:6b:7d:be:75:37:
35:f2:35:5f:43:1e:a8:d2:2e:4c:ee:cf:6a:cd:88:87:2f:8b:
1b:e5:b1:2c:d2:58:21:b7:36:0a:bd:bf:a1:f4:3d:bb:ac:c9:
0c:d3:db:33:af:a6:19:13:3b:72:da:d5:57:ce:10:eb:6e:09:
6f:31:f5:e4:db:1c:49:69:24:6d:8f:b2:dd:90:8b:76:22:1b:
c8:b0:5f:7f:95:1c:64:c1:40:6c:4e:69:ac:4a:73:0f:c4:c5:
e3:20:5d:e6:bc:55:93:1d:3d:c4:67:fa:23:cc:31:45:c6:dc:
49:1c:42:e6:14:19:78:02:5a:52:2a:ae:8c:96:19:f1:3f:b8:
02:dc:0b:8f:6d:a5:b9:24:3e:48:8f:01:12:ae:4f:12:3f:0e:
23:cf:12:a9:d0:7a:15:08:bf:4b:45:26:af:57:fb:e8:12:b2:
be:72:2e:59:34:89:ee:e2:da:8a:00:9c:69:dd:45:51:94:9e:
11:11:ef:44:8d:9b:6b:51:31:9a:b8:60:55:2e:e3:59:66:1e:
9f:1a:77:fc:66:ad:4a:a9:44:aa:15:03:7d:a5:a0:26:ae:62:
a4:3b:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:07 2024 by rpki-client on console-ams.rpki-client.org