Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F313D8AA8E511EFB31C7198762E951A.roa
File: 5F313D8AA8E511EFB31C7198762E951A.roa (raw, json)
Hash identifier: grgKNoparRrCbSxWPW0ztxG7HBinYlOfRcNC3VogXkk=
Subject key identifier: 61:A1:1C:20:95:30:11:4D:3A:03:91:77:A7:18:74:C8:54:EE:50:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F313D8AA8E511EFB31C7198762E951A.roa
Signing time: Fri 22 Nov 2024 15:20:57 +0000
ROA not before: Fri 22 Nov 2024 15:20:53 +0000
ROA not after: Tue 03 Dec 2024 15:20:53 +0000
asID: 62240
IP address blocks: 154.194.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69831 (0x110c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:20:53 2024 GMT
Not After : Dec 3 15:20:53 2024 GMT
Subject: CN=6740a159-b30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:50:1a:3a:c8:d1:34:b7:22:97:29:c9:4d:
3a:98:ae:81:9e:c7:fb:a0:95:2d:c5:0d:e7:e1:ac:
52:a7:e0:d0:04:97:49:e8:90:a1:9f:7a:42:6e:8d:
b1:46:87:06:a2:70:78:c2:6d:00:5b:cf:54:2e:46:
c5:81:61:76:f8:93:f3:d7:bb:e4:21:f9:8e:3e:2d:
63:69:a0:ed:28:c1:fd:3d:ae:92:ec:4e:86:cb:59:
03:67:f0:eb:e0:a5:c8:2e:a5:21:e6:49:fc:e4:9a:
6e:9a:02:c9:b8:d7:97:c6:d7:19:8e:26:f0:63:a0:
5a:3d:d3:38:5e:25:9e:8a:53:de:be:95:94:d8:73:
1d:35:5b:28:90:66:f6:2b:39:cb:d6:21:0e:56:20:
f0:2b:05:d0:78:6e:ce:0a:3f:01:f5:8c:ce:68:42:
b1:b1:7f:0c:20:f1:7e:97:35:bd:4b:fd:a6:bd:86:
17:aa:e0:ea:ee:bd:d8:0e:14:b8:19:a0:a0:d7:77:
60:58:c4:f1:07:63:68:ad:1a:57:70:92:f2:ef:29:
0d:8c:2a:20:ec:fa:cf:b6:54:f3:23:30:8b:bd:26:
97:31:5c:5e:73:4d:a7:ca:fa:e3:b3:4d:14:73:ed:
bd:84:c5:5f:f7:99:55:9d:16:ab:34:4b:7f:45:a1:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:1C:20:95:30:11:4D:3A:03:91:77:A7:18:74:C8:54:EE:50:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F313D8AA8E511EFB31C7198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:dc:80:f8:ff:23:88:ab:eb:dd:b1:40:98:76:89:5a:e5:52:
d1:93:d4:75:63:4c:d1:8d:60:1f:33:b1:3b:3d:16:65:d0:a4:
fd:9b:9c:59:25:f9:db:12:ac:77:7f:3a:b2:11:fd:6c:27:c6:
4f:6e:23:6a:37:29:89:38:a5:dc:4a:cc:0d:3f:a6:1f:30:89:
23:c0:16:b0:9a:c8:de:cc:7d:66:93:ab:58:5a:5e:2c:60:ba:
76:6e:16:78:66:c7:e1:8e:d9:e6:77:e7:0a:66:44:86:a4:d4:
ed:ef:fd:89:d5:00:37:31:4d:82:71:ab:17:9d:21:09:a5:98:
e3:91:d9:8c:96:c0:aa:6b:c4:16:8f:52:3f:40:1d:63:b3:3c:
96:27:61:b2:48:ba:70:68:9d:13:1c:68:f9:90:30:89:f0:94:
c1:74:9b:a1:3b:aa:22:15:42:e7:66:91:82:29:e4:96:ca:fe:
25:d8:39:65:87:dc:52:1c:68:5a:87:6b:ab:bb:96:f7:0d:6c:
fb:0a:46:70:dd:9b:cc:60:33:35:70:39:c9:9a:ce:98:f8:16:
e6:fe:9f:be:8b:1e:da:37:1c:e8:c1:f6:a9:75:09:c0:f7:c3:
34:3e:7f:17:ee:fb:74:ed:f8:44:ff:f2:b3:d0:74:4c:31:02:
05:26:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org