Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62586BF2911E11EFAA4FC7AE762E951A.roa
File: 62586BF2911E11EFAA4FC7AE762E951A.roa (raw, json)
Hash identifier: nA7auHlgeG3HvvvuTAz0MsLRV9mBQT02PmFx6bQKgjM=
Subject key identifier: A8:AC:98:7A:80:4A:06:32:B5:FE:53:00:3E:CC:DB:0B:37:64:E1:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62586BF2911E11EFAA4FC7AE762E951A.roa
Signing time: Wed 23 Oct 2024 09:08:36 +0000
ROA not before: Wed 23 Oct 2024 09:08:32 +0000
ROA not after: Tue 26 Nov 2024 09:08:32 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65768 (0x100e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:08:32 2024 GMT
Not After : Nov 26 09:08:32 2024 GMT
Subject: CN=6718bd14-2483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:0a:f8:10:b9:df:33:47:b4:ca:c3:89:03:
76:a2:9d:04:1a:86:57:96:33:6c:6b:fe:82:bf:d4:
54:48:8e:ac:a9:73:fa:fa:e5:fd:b9:ac:32:7d:ef:
68:de:ad:6f:ff:14:05:e6:2b:b9:b2:35:85:5c:5f:
a1:43:db:48:62:ed:00:f1:1d:0d:18:6c:bd:63:37:
11:22:ed:ca:65:54:1a:f0:43:4e:97:df:4a:db:7b:
86:fb:df:8c:6d:fe:e5:0e:35:4a:3b:52:9d:88:aa:
bb:c0:87:cc:d1:f5:b8:8f:bc:5e:58:db:7e:f0:a3:
5b:e9:d8:cc:f9:32:e3:24:fa:50:85:8b:15:89:49:
89:d3:b9:0f:8a:a1:9d:d2:ee:78:39:f7:05:df:3c:
60:a2:33:a7:d4:41:9e:0a:e2:64:16:fd:7e:e2:26:
af:4d:5e:cb:a4:4b:53:d5:1a:74:9b:c2:3a:8f:23:
89:e5:fd:41:4c:4d:68:5a:c5:75:f9:8a:6c:ad:a4:
a3:3d:11:36:6a:50:1b:1b:94:5a:d5:b5:be:3e:dd:
2d:02:4b:62:bb:ed:b1:41:03:37:2e:fd:53:6c:9d:
6d:9b:e6:9a:26:b5:df:63:21:1c:ef:e8:5e:28:8e:
c9:6e:ff:95:ab:76:60:2c:c1:fe:42:17:a7:68:ef:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AC:98:7A:80:4A:06:32:B5:FE:53:00:3E:CC:DB:0B:37:64:E1:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62586BF2911E11EFAA4FC7AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:c4:30:94:df:bd:ba:be:c1:77:c5:83:47:2e:3b:84:6c:d0:
c2:77:2d:ef:c5:d6:0a:f5:55:2d:45:f6:65:92:d2:5e:3a:ea:
7e:2f:88:d0:64:48:ec:23:af:de:b8:60:55:59:10:dd:ca:7f:
a3:9a:14:5d:17:ee:7e:e9:31:7f:59:81:54:50:61:44:62:39:
12:ec:c0:31:d9:88:c8:a4:25:bb:9e:60:b1:df:5b:0a:90:22:
88:a9:f9:80:e3:81:5f:71:5b:5f:c0:92:57:31:a9:7a:20:b4:
72:2b:e6:6b:64:f1:2e:49:91:7e:af:00:38:93:ad:ab:93:12:
11:35:8c:c0:cb:ef:23:32:30:1d:4d:32:f3:7d:45:ee:d2:4b:
67:b2:21:3b:22:d6:39:5d:3e:52:fd:e9:47:86:92:50:77:83:
2b:a8:84:2e:68:3b:02:e4:81:1b:3b:a2:67:b4:7e:c2:5a:fe:
13:73:79:42:32:51:ed:52:05:53:15:6a:df:66:8e:85:68:39:
23:5d:55:88:26:56:55:51:df:8a:f2:e5:a3:b8:bd:9f:a2:34:
ca:30:3d:86:26:cd:d2:9c:ee:18:c0:3c:42:8a:f7:44:54:2c:
0a:8b:33:39:5c:51:10:7d:d5:48:1f:22:59:23:a5:0e:2e:33:
29:a3:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org