Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8C07D82E1711EFA24B44AC762E951A.roa
File: 4E8C07D82E1711EFA24B44AC762E951A.roa (raw, json)
Hash identifier: L1y6inKTxjl8SQVJtKIj4zlDq4P0xxlrrU7FC+8nRkU=
Subject key identifier: A3:77:5A:F8:A7:48:B4:D5:07:AF:77:5B:A5:63:E5:90:EE:1D:C6:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C4AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8C07D82E1711EFA24B44AC762E951A.roa
Signing time: Wed 19 Jun 2024 08:38:31 +0000
ROA not before: Wed 19 Jun 2024 08:38:28 +0000
ROA not after: Mon 26 May 2025 08:38:28 +0000
asID: 141109
IP address blocks: 154.209.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50351 (0xc4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 08:38:28 2024 GMT
Not After : May 26 08:38:28 2025 GMT
Subject: CN=66729907-82cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:2a:b0:ca:c6:64:58:da:01:d0:59:68:72:
2f:85:25:45:41:6e:19:6b:ad:bc:e0:7d:ea:00:ff:
9b:5f:9d:83:be:12:cb:28:05:b3:2b:75:69:81:f6:
e2:c0:70:6c:79:49:b3:e8:b9:f6:f3:5f:08:c4:32:
25:83:64:b0:19:48:45:dd:55:3c:7d:cb:da:ec:9a:
21:0b:71:ca:a6:f9:5e:84:ea:99:d3:76:21:91:8b:
f4:97:e7:dd:60:bd:25:4b:a7:2c:3b:88:e5:a3:b7:
f6:16:06:ed:36:2b:31:74:e4:f4:2e:8b:4d:a9:1c:
b3:2e:09:00:e2:30:ad:42:4a:eb:d9:8c:75:95:f0:
a8:7e:a1:73:16:27:db:fe:06:5b:85:70:83:f1:b0:
fe:68:07:e6:a7:85:26:b9:a1:a8:39:9c:40:96:7b:
cc:28:21:fe:f4:24:65:ba:4b:4b:8b:e2:ff:a5:78:
2d:81:81:7f:24:ff:68:71:8d:4b:f5:73:c0:82:f6:
14:e4:d0:ff:8c:5d:01:53:3a:fc:0b:30:2b:72:c3:
f8:49:e8:3f:3b:89:f5:c0:2b:ab:2f:e8:0e:87:65:
60:60:1f:68:c8:d5:d9:4d:56:25:5a:0f:16:34:1c:
4e:81:aa:5f:bf:98:74:8d:93:e0:69:53:ff:31:87:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:5A:F8:A7:48:B4:D5:07:AF:77:5B:A5:63:E5:90:EE:1D:C6:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8C07D82E1711EFA24B44AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f2:18:c9:f5:83:1f:bf:33:e5:bc:d6:e5:dc:82:b2:f1:dc:
41:d4:09:76:81:b6:94:49:26:35:f3:2b:ab:db:9c:b3:82:51:
19:35:66:69:14:9c:12:99:8b:a8:fb:dc:b8:55:62:85:6f:eb:
c7:d0:f7:b6:bd:64:b2:25:74:ab:a6:6e:0f:3c:b4:13:fc:43:
da:95:90:ed:f2:51:6d:6b:e7:70:e0:bf:1a:2f:f8:3f:8f:f2:
06:17:6d:4a:49:27:ad:d3:45:2a:6a:f2:d6:f1:0d:f9:34:60:
25:dd:23:fa:88:fc:cf:e7:28:61:0e:c8:f1:7b:8f:7b:03:8c:
5a:c8:70:7b:d1:3d:a1:0c:76:1a:35:b0:5c:bb:54:c6:0f:d2:
21:c4:a8:89:ac:c0:2b:3c:ec:82:e0:c1:06:cd:e8:95:70:67:
5a:6a:4a:1c:fd:e6:31:2d:81:d9:1c:6d:32:9c:c2:0d:68:ae:
01:07:92:07:f6:ee:47:2a:2f:63:df:20:82:13:89:09:26:ac:
7e:0b:f5:67:f6:47:8c:52:10:8a:35:4b:95:90:d4:b9:c4:4c:
c8:c4:1e:78:dd:39:8c:9c:e5:31:a3:e8:a0:82:3b:92:9d:66:
f2:4e:ce:95:9f:aa:a0:81:e3:5f:20:e9:19:53:36:08:f8:b8:
58:d7:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:09 2024 by rpki-client on console-ams.rpki-client.org