Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549F1A5AA9CA11EFAD7606B6762E951A.roa
File: 549F1A5AA9CA11EFAD7606B6762E951A.roa (raw, json)
Hash identifier: 0lue+xRGLFsJuEdjEse65yMwYnAahl33CNFc24V2yQc=
Subject key identifier: DD:35:2D:9F:66:C7:2D:3B:AB:F3:F4:4A:49:EC:26:B0:72:1A:94:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549F1A5AA9CA11EFAD7606B6762E951A.roa
Signing time: Sat 23 Nov 2024 18:39:54 +0000
ROA not before: Sat 23 Nov 2024 18:39:50 +0000
ROA not after: Mon 02 Dec 2024 18:39:50 +0000
asID: 5650
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70116 (0x111e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:39:50 2024 GMT
Not After : Dec 2 18:39:50 2024 GMT
Subject: CN=6742217a-1454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:3a:f8:ba:3f:4d:e5:f4:3b:08:c4:41:82:
fa:da:c1:61:f3:87:86:d0:ea:33:ee:34:95:f7:02:
36:42:67:65:3c:88:e3:52:0b:60:0d:dd:34:59:07:
21:ee:c5:4d:b3:61:b6:83:17:e7:a8:fa:ad:f6:e2:
e6:a8:59:cd:34:1c:e4:4f:b4:9b:cf:72:bf:56:93:
87:5c:1b:0a:56:9a:06:34:71:69:35:2e:5f:7d:a7:
ac:8e:4f:8f:3d:3f:16:b1:1d:43:c8:7f:4c:55:1b:
da:a1:ab:41:f4:26:f8:f8:d9:eb:15:57:70:d7:5f:
f8:7b:56:ac:80:89:4f:9c:84:61:92:9b:1c:78:51:
4f:9b:e5:65:bd:8f:f9:d7:90:c1:ac:a4:f0:18:30:
7d:b2:43:32:43:bb:ae:02:ab:86:8c:59:4b:78:eb:
cb:73:a1:71:94:92:7e:15:00:56:ca:9a:62:d2:46:
9b:bf:df:ad:3e:9b:53:b4:9c:95:46:36:9b:b9:39:
5c:37:50:0d:0e:1e:fc:87:27:ea:03:05:87:ea:f3:
d2:86:b8:e3:63:73:04:47:39:06:f2:fd:85:a9:ca:
e2:88:c1:eb:4d:0d:22:63:10:41:20:0f:00:2c:29:
86:7d:a8:55:bd:e5:74:b3:f7:b5:f5:83:1d:9e:63:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:2D:9F:66:C7:2D:3B:AB:F3:F4:4A:49:EC:26:B0:72:1A:94:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549F1A5AA9CA11EFAD7606B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
80:c8:6a:51:cf:3d:5c:e6:9a:1f:fa:35:dd:d5:e9:4b:be:f3:
d4:76:1b:16:c5:dd:83:f9:13:64:31:ce:3a:f1:f8:4e:dc:ac:
41:89:2e:75:b0:07:28:c0:0d:70:71:21:4a:4f:4a:b1:0d:0c:
54:27:31:26:b9:c7:22:6b:a2:85:92:27:e1:30:83:96:c8:48:
0d:8e:9b:ca:ff:56:4a:49:9c:c1:23:a6:72:f1:1c:12:29:dc:
b2:7a:5a:6d:ad:bc:d7:34:1e:62:58:0b:73:87:96:1f:17:6b:
0c:da:f8:76:b0:d8:11:8a:43:a3:d2:80:c6:21:b9:33:eb:f5:
6a:81:ec:31:80:39:9f:ae:74:1c:df:d0:68:5a:e9:54:7f:e9:
20:ac:b0:a7:16:62:71:a3:78:ac:de:81:01:cc:75:d1:4c:82:
f7:90:4d:f0:cf:d8:22:15:04:9d:60:2d:44:d6:a0:b3:9e:17:
38:bc:99:51:7a:ee:66:0c:6f:6a:e7:57:6d:d8:da:08:72:6b:
24:17:8d:8c:dc:8c:23:ad:4a:49:bd:8d:f1:d2:b0:09:d9:f5:
38:7c:c8:cc:53:2f:e1:cc:cd:ed:21:95:91:3b:7c:e6:66:e6:
60:d7:9e:40:da:47:28:df:bf:46:74:37:e1:26:51:54:0a:42:
81:53:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:10 2024 by rpki-client on console-ams.rpki-client.org