Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48E10BB09B8311EF9F9A68B4762E951A.roa
File: 48E10BB09B8311EF9F9A68B4762E951A.roa (raw, json)
Hash identifier: h1xVL29ACHtz9fRd0IUxN3zehW38ZLTBWDQb8EUmSjk=
Subject key identifier: 66:98:E2:5C:1E:2F:5F:CE:8F:F7:0A:D0:C0:40:2B:85:6B:3C:BC:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48E10BB09B8311EF9F9A68B4762E951A.roa
Signing time: Tue 05 Nov 2024 14:36:04 +0000
ROA not before: Tue 05 Nov 2024 14:35:58 +0000
ROA not after: Mon 20 Jan 2025 14:35:58 +0000
asID: 135097
IP address blocks: 154.91.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67583 (0x107ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:35:58 2024 GMT
Not After : Jan 20 14:35:58 2025 GMT
Subject: CN=672a2d54-072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:03:8e:1f:c9:3b:77:96:14:2d:bf:3e:5f:
2a:c7:0f:ef:ee:83:ad:2c:e0:76:1d:5f:b5:97:8f:
de:b4:b5:be:1b:82:15:84:97:00:78:27:0f:2e:91:
a9:6c:c3:d8:2d:c7:f4:9b:69:f0:4e:85:e4:ec:df:
17:df:0b:7c:29:e0:9b:84:c5:f1:ff:ca:d2:21:38:
9c:d5:ae:01:db:c1:f4:9b:2b:94:54:dd:cb:17:1d:
9f:d3:c8:1b:69:cd:03:c6:07:8d:3a:67:a2:78:82:
84:39:2b:9d:7b:00:26:af:a5:aa:b4:f1:23:c8:3e:
7d:5e:89:49:25:39:47:df:53:d4:e2:f8:0d:29:3e:
14:73:c1:39:f2:55:0c:62:89:f0:99:54:39:e1:af:
d4:7f:d0:60:f0:a6:c4:46:ff:58:c9:96:55:e5:f9:
e0:f4:6e:68:f9:c5:63:84:18:29:82:52:ef:92:e2:
ee:33:bd:00:68:6c:3a:6a:71:d3:4e:52:e2:41:60:
bf:2d:e2:b1:52:e0:ef:11:82:fc:b5:2c:81:cd:3d:
ae:43:b4:1d:13:df:65:63:7b:ac:33:06:67:b8:4f:
e6:d3:d2:df:54:f8:76:5d:37:24:3e:55:65:a1:cc:
b2:b7:b0:13:a6:a6:23:31:0a:f5:44:92:48:13:35:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:E2:5C:1E:2F:5F:CE:8F:F7:0A:D0:C0:40:2B:85:6B:3C:BC:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48E10BB09B8311EF9F9A68B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:7b:e4:80:db:14:9a:de:a9:f9:ab:5e:86:c4:7d:a6:df:11:
88:6f:86:ff:da:eb:ef:cb:1f:e4:8e:fe:f4:7a:00:11:dd:0e:
d9:58:79:7e:3e:77:05:b3:63:91:70:f2:ec:b5:4d:4b:a8:ec:
3d:63:41:3d:8c:24:89:62:31:06:c1:32:5a:2d:89:e2:20:6f:
45:17:d0:a7:ac:c2:5b:2d:53:22:a2:6d:5b:3c:1f:be:b9:f4:
36:15:d5:01:a8:3e:32:2d:0e:b0:41:8f:d0:dc:94:ca:84:64:
76:e0:89:a2:72:c1:e4:01:a7:52:df:7b:af:b5:f7:c7:7d:f0:
eb:e6:56:dd:3a:68:a4:86:a4:72:33:43:24:2f:0e:53:d3:0c:
f0:8b:43:ce:2c:3a:5c:06:34:75:c0:e1:79:90:75:96:6b:c7:
90:53:07:b1:4a:1f:9a:0a:ca:7b:84:80:a0:18:61:23:f7:8e:
a4:6b:29:c1:f9:b3:08:4c:50:07:1c:58:11:57:db:a9:52:e7:
b8:33:ee:c9:ed:ed:22:1e:d9:82:06:45:e5:c3:d6:05:16:df:
1f:5c:fe:ed:99:63:ab:86:07:13:24:c3:8d:7b:31:60:5d:f7:
81:34:cd:c3:d5:d6:2c:81:2a:9b:29:f2:4d:37:c4:18:cd:b3:
b9:13:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org