Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E65A67AA64C11EF95798446762E951A.roa
File: 5E65A67AA64C11EF95798446762E951A.roa (raw, json)
Hash identifier: ejh7mWyGnQg02NaiOxW/2NRCpLdIO8uLqmyv2ij5TJY=
Subject key identifier: D9:15:85:EE:D9:AA:B6:E1:36:1D:80:21:AC:11:9F:A6:14:76:6F:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E65A67AA64C11EF95798446762E951A.roa
Signing time: Tue 19 Nov 2024 08:00:40 +0000
ROA not before: Tue 19 Nov 2024 08:00:37 +0000
ROA not after: Sun 15 Dec 2024 08:00:37 +0000
asID: 214497
IP address blocks: 154.213.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69382 (0x10f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:00:37 2024 GMT
Not After : Dec 15 08:00:37 2024 GMT
Subject: CN=673c45a8-21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:90:68:99:3a:35:30:e9:76:b1:44:47:7d:
c0:dc:1d:72:34:e1:fc:84:f3:e4:2c:75:4e:20:2b:
06:cc:8f:fb:1f:92:ba:fb:d3:7b:b5:ef:f4:2c:0d:
25:51:70:9d:56:ba:68:4b:77:49:ea:56:eb:31:65:
7d:63:dc:df:af:1f:2a:6f:d3:fe:12:20:b2:0d:df:
33:49:f2:bd:99:dc:c4:19:e2:a5:e5:c3:46:41:47:
41:c9:46:a5:90:89:5a:93:66:80:b2:e3:a2:86:c9:
75:15:29:15:d8:56:c4:69:73:f6:5d:25:e2:8d:56:
fb:7f:bb:10:65:fd:f2:67:6e:2a:9a:4f:bf:e7:c9:
6c:5d:98:92:5c:05:69:38:f7:48:2f:2f:f9:9d:8d:
13:d7:71:5f:cd:bd:6e:ba:ae:5a:44:c1:7b:49:ac:
03:f8:63:31:1f:c6:da:ed:7b:11:d3:27:59:27:6e:
55:3c:d5:0e:bd:e1:a6:82:42:9e:a3:12:3d:09:34:
d2:6e:fd:46:eb:5f:93:9d:cf:23:5a:6b:06:ba:ae:
40:b6:c1:ba:84:01:cf:b7:3b:4d:b2:22:3d:bf:21:
29:43:8f:83:4b:17:09:48:bd:ee:f2:78:a4:25:de:
63:27:ea:b3:a5:88:4b:35:1d:ff:76:0a:08:94:6e:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:15:85:EE:D9:AA:B6:E1:36:1D:80:21:AC:11:9F:A6:14:76:6F:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E65A67AA64C11EF95798446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2c:6c:eb:f9:76:b0:7a:01:13:3c:79:d7:ab:cd:11:83:f2:
64:0d:92:a6:8b:35:f0:24:ea:05:38:de:c2:25:e8:30:52:86:
4b:46:5b:e3:28:78:9f:a4:d0:51:cb:0f:9b:11:78:2f:e7:c0:
26:7f:4b:10:6f:ca:f1:e9:42:65:a9:28:2f:95:19:9d:74:04:
4d:34:ef:e4:45:ac:0d:20:de:dc:72:0e:e1:22:cd:99:35:0f:
92:19:08:55:8f:f6:ff:ad:3b:d6:c0:26:d9:e6:c3:5a:82:5d:
4c:ed:2f:51:e9:be:c2:cd:03:aa:5d:1a:d8:1a:a1:28:e0:e6:
2d:a5:23:39:bd:df:a8:4c:68:f0:cb:29:bd:ef:f1:b0:2e:8a:
c3:0a:da:04:f5:56:68:74:b6:d1:9f:d2:8d:c3:1e:4c:99:f4:
41:83:f1:4c:1e:66:74:40:5f:c1:88:4a:80:3b:38:f0:00:9d:
82:20:6b:c2:81:b9:97:8a:57:69:82:7a:83:7f:7d:94:d6:0b:
7d:af:40:4d:6a:27:65:2b:cb:c5:08:f2:f9:4c:cb:a7:e6:e1:
4d:ce:ed:14:f8:a5:14:e6:4a:f7:ac:b8:43:4d:76:7d:51:de:
24:3a:59:06:3c:3f:6a:f6:48:b0:b7:01:73:4b:fa:3f:f0:b6:
af:1b:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org