Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5683F14AA0DA11EFBDC45755762E951A.roa
File: 5683F14AA0DA11EFBDC45755762E951A.roa (raw, json)
Hash identifier: /wtgpi6iXv3jv89+fRJTzSp1a1V4BFEJY77Uj0aCazw=
Subject key identifier: 36:1A:07:E3:8E:78:EF:E2:04:B0:EE:68:63:CE:6B:6F:3E:8D:2A:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5683F14AA0DA11EFBDC45755762E951A.roa
Signing time: Tue 12 Nov 2024 09:41:49 +0000
ROA not before: Tue 12 Nov 2024 09:41:44 +0000
ROA not after: Sat 07 Dec 2024 09:41:44 +0000
asID: 138915
IP address blocks: 154.223.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68644 (0x10c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:41:44 2024 GMT
Not After : Dec 7 09:41:44 2024 GMT
Subject: CN=673322dd-2f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:07:dd:ae:95:d1:23:92:6a:42:5b:8f:2e:
6c:d8:a0:4b:98:c1:85:d6:79:8b:fd:c3:06:f2:9f:
23:08:3c:1f:b4:b1:e2:e2:86:d9:a7:08:09:b5:54:
34:5c:dc:51:7c:46:37:de:b3:8a:72:72:4b:b3:5a:
bb:a5:33:34:bc:d3:f5:c6:a4:30:65:8b:f3:6b:e9:
4b:ba:88:34:24:8e:ba:64:aa:89:2c:c7:38:ae:94:
62:e3:6a:8f:8c:6a:b4:8e:ae:49:41:e8:6f:b0:74:
ef:26:62:a4:fc:42:f8:41:fc:ba:75:68:1c:de:42:
23:84:e9:07:62:8d:d7:b3:4d:3d:88:63:38:9b:f2:
2b:f8:c1:6a:0e:95:f6:6f:76:fc:87:41:2f:b4:15:
70:ed:40:84:3b:77:09:c1:b5:91:fe:68:07:29:34:
2b:c9:c2:31:65:0c:5f:66:e8:06:2b:f6:18:ad:ba:
b1:64:1e:0d:2f:85:61:bb:24:b5:03:cb:e1:bc:a0:
9f:c3:b3:79:21:88:3f:e5:fa:cd:6d:45:88:6f:f0:
d4:30:07:d9:02:74:eb:45:01:0a:fa:e0:6a:38:3b:
8c:83:2b:6b:11:3c:5c:14:da:d0:aa:8f:ac:ab:f0:
2b:08:3e:81:17:3d:32:ef:f0:39:ab:cf:1e:ba:04:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1A:07:E3:8E:78:EF:E2:04:B0:EE:68:63:CE:6B:6F:3E:8D:2A:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5683F14AA0DA11EFBDC45755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.74.0/23
Signature Algorithm: sha256WithRSAEncryption
63:9a:e1:52:76:5b:df:44:8b:a3:ec:89:25:87:22:23:74:55:
1c:4b:31:c8:3d:86:42:58:39:0b:88:52:b0:1c:ad:0c:e4:aa:
55:52:a4:7d:09:24:f2:40:40:49:95:32:ee:f7:0e:c7:8b:36:
ff:54:a9:c5:b5:76:54:b3:2d:42:42:63:2d:8e:76:04:9b:16:
8a:7d:6b:fc:fe:37:16:49:17:ac:7f:15:8d:c6:ee:8b:57:6a:
40:ea:9d:88:f7:51:1c:e1:b6:a8:31:79:3b:d2:f9:65:53:e4:
fd:a6:5d:d7:c8:e6:fe:60:85:b0:7f:3d:92:a2:03:27:bc:cc:
46:f7:91:74:16:15:21:5f:3f:78:0f:b1:bd:fd:60:6f:b9:08:
ee:af:46:d5:b4:0a:27:94:a7:1a:41:7a:6b:c1:a5:22:42:ed:
05:f1:2e:11:28:57:35:25:2d:4f:bd:85:8f:1c:6b:57:88:c0:
40:44:8b:dd:b2:4b:47:74:69:4f:a2:09:d0:85:36:22:26:ad:
9c:0b:b5:64:fe:3a:20:17:14:1e:f7:d8:8d:0c:80:61:f2:12:
91:2b:d7:a0:2d:36:56:d5:e8:ef:71:46:27:ec:be:3f:59:04:
81:75:ae:bb:99:a6:89:0b:2b:00:6a:c6:c2:35:d3:b5:5e:fa:
4f:73:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:11 2024 by rpki-client on console-ams.rpki-client.org