Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5307B4B092B211EFB73F6A9F762E951A.roa
File: 5307B4B092B211EFB73F6A9F762E951A.roa (raw, json)
Hash identifier: t8cZnddjIln3NOs1UkE1iUalwWZE6RJm456WaZrMZks=
Subject key identifier: FB:BE:39:53:BC:73:91:51:8F:6C:28:9F:44:AC:33:4D:EC:D5:A5:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5307B4B092B211EFB73F6A9F762E951A.roa
Signing time: Fri 25 Oct 2024 09:20:07 +0000
ROA not before: Fri 25 Oct 2024 09:20:03 +0000
ROA not after: Wed 27 Nov 2024 09:20:03 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66012 (0x101dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:20:03 2024 GMT
Not After : Nov 27 09:20:03 2024 GMT
Subject: CN=671b62c7-1e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:d5:66:04:22:9c:7f:c1:30:c7:05:d9:49:
35:18:ec:b4:5f:77:e0:3a:83:a3:99:7e:73:7f:1f:
9e:6e:b1:1e:0a:fd:2d:aa:ef:52:d6:6d:bf:45:86:
67:65:20:0e:04:d2:44:c4:c1:94:f8:c2:e4:d0:43:
e9:97:46:7c:4a:80:9a:96:6f:23:11:11:d5:e1:3b:
d1:b6:6a:15:6b:79:91:d0:b4:f0:7c:1a:b6:c5:1f:
53:b9:ce:0d:bc:a9:99:c1:68:47:1c:b4:04:06:97:
2e:92:ee:cd:da:52:87:df:ee:e9:c5:ad:70:b0:ac:
6e:b5:f9:d9:2c:0f:db:9d:5b:46:42:07:53:21:80:
e4:39:f3:c1:85:fe:76:68:6a:c4:80:0b:52:f3:29:
d6:17:2b:68:5a:52:9f:d4:d6:92:c1:0f:84:92:a1:
cb:6f:37:26:04:13:97:d1:aa:19:ee:b2:23:e9:5c:
24:bb:67:3a:89:0e:a8:b1:4c:25:36:48:74:5c:61:
78:af:19:6b:e8:fb:b3:b4:d9:87:b9:81:48:dd:47:
98:a3:76:1c:2d:e7:91:6c:2d:3e:fa:16:e3:69:46:
0c:cc:9c:6e:6f:78:c4:c5:a4:ca:1e:16:ce:cf:e0:
17:f8:a2:b1:70:4d:c1:0a:a1:ad:79:a9:e9:a7:7b:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:39:53:BC:73:91:51:8F:6C:28:9F:44:AC:33:4D:EC:D5:A5:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5307B4B092B211EFB73F6A9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0/23
Signature Algorithm: sha256WithRSAEncryption
28:fd:23:dd:aa:41:b2:7a:4c:b9:60:b5:7b:57:e6:a1:e1:62:
f9:09:25:e0:58:d5:02:f3:08:d4:a0:95:71:c9:01:7a:c0:ef:
98:97:df:aa:28:d0:91:98:7d:58:99:bb:68:28:57:fd:25:3c:
e6:7a:de:f7:64:69:d2:ee:ef:0d:7b:90:ec:98:f4:26:4c:9a:
54:e2:ac:27:bf:84:f2:8b:2d:f2:f5:5b:0e:b2:5e:7b:06:50:
ee:9d:ac:58:90:50:90:ec:25:88:52:34:7b:a0:bf:d5:3a:c5:
c0:82:8e:cc:8c:b6:44:87:87:e6:e4:2e:92:43:0a:3c:2e:51:
9d:42:4c:83:36:eb:b9:c2:8a:81:85:27:80:01:c4:ab:26:f7:
39:e5:cc:61:3e:bf:88:f5:85:f6:0b:62:67:42:df:af:0c:e0:
ce:0e:86:8c:09:96:21:cb:cd:f8:d0:92:aa:af:fc:74:e7:ca:
9f:e4:28:b3:cb:05:fe:40:55:1c:e5:04:55:af:dc:b3:bd:46:
f4:06:f1:76:2d:cb:d9:d2:de:e7:4d:a1:89:13:ee:39:98:43:
ab:20:74:a2:1a:c0:ec:98:13:26:e4:8d:52:84:8b:12:db:0d:
54:38:51:f2:08:d8:87:c1:47:a7:89:74:c6:b7:de:3e:ce:a6:
fa:f8:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org