Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6310B26A736A11EF98054555762E951A.roa
File: 6310B26A736A11EF98054555762E951A.roa (raw, json)
Hash identifier: r/fN0PwjZuDAsyKj772tuwnry+NmrUUP26x01ZApTXM=
Subject key identifier: 70:39:17:17:0E:44:12:A5:46:59:7C:52:26:57:13:31:0F:B7:75:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6310B26A736A11EF98054555762E951A.roa
Signing time: Sun 15 Sep 2024 13:57:04 +0000
ROA not before: Sun 15 Sep 2024 13:57:01 +0000
ROA not after: Sat 30 Nov 2024 13:57:01 +0000
asID: 142403
IP address blocks: 154.83.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61250 (0xef42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:57:01 2024 GMT
Not After : Nov 30 13:57:01 2024 GMT
Subject: CN=66e6e7b0-76f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:f2:77:0e:d2:ce:13:11:ce:65:f1:14:a5:
d1:65:50:6b:5e:b7:85:02:14:9e:dd:9a:34:63:27:
d0:a3:ba:6e:5d:1e:24:4b:69:2e:ed:87:99:ba:00:
cd:80:28:e0:d9:d6:06:f7:cc:7b:d3:a5:08:45:6d:
74:ed:f7:9c:75:70:cf:48:d3:fa:5f:05:b8:dd:4c:
49:04:60:fb:4a:90:a8:88:1a:39:2f:fa:cd:f7:42:
c6:57:9c:54:fe:03:8b:56:d1:9e:87:fa:5c:14:6a:
07:0f:89:01:c6:19:be:80:54:cb:64:95:b8:dc:28:
d7:44:65:23:34:02:b9:17:20:c5:d9:f7:64:69:31:
4a:43:97:71:ee:c9:44:ae:67:de:70:90:03:7a:14:
4f:58:28:b4:64:c9:fe:fc:36:4d:4f:1e:f7:f6:52:
c9:a2:07:cc:f8:f6:42:40:62:63:35:9e:9d:b3:fb:
c7:48:a6:87:13:fb:c6:8a:6e:b5:bb:c9:ba:0a:e6:
01:0e:c7:b4:7c:68:7b:06:64:9c:91:d4:c1:da:ff:
c6:f7:e6:ee:95:52:e9:68:91:eb:73:68:5e:33:76:
b9:b1:8f:70:84:87:8f:75:5f:3a:78:ce:8d:f1:0e:
6d:71:c2:ce:6e:66:f1:9d:31:c0:92:81:89:1f:08:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:17:17:0E:44:12:A5:46:59:7C:52:26:57:13:31:0F:B7:75:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6310B26A736A11EF98054555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:34:b3:f1:89:aa:a0:9f:c5:ca:f9:f9:cb:e0:82:88:0f:1a:
de:6c:d1:8e:39:e8:41:b2:8e:b5:b6:97:73:d6:52:fe:e7:29:
96:30:16:c3:65:39:f5:52:e6:7c:90:bd:3e:ef:bf:2f:8e:58:
59:8c:57:36:34:34:38:a7:7c:0a:62:c7:73:9d:47:fc:1b:8e:
20:c4:fc:fa:9d:14:05:34:a6:05:01:65:c0:d6:56:74:2a:4f:
05:22:5d:1f:6d:a4:a9:c9:a5:a9:a8:9d:81:0d:4a:6e:90:3e:
f2:b8:d1:88:29:ee:27:02:97:93:f3:38:c9:7a:a4:c2:41:3d:
1a:db:d4:bb:57:da:00:1a:0b:52:0d:71:7e:ab:f3:17:3f:6b:
b1:0b:0c:59:85:52:49:5e:66:fc:7c:1a:8e:93:a4:a5:aa:b5:
ef:06:58:2f:df:1b:3a:00:2e:1e:d4:2a:c2:41:38:9b:6e:f1:
af:29:0e:81:0f:f3:e1:91:32:c2:e2:5b:16:14:1a:75:14:46:
37:c3:33:4a:11:ca:57:a7:2e:ef:f9:6b:7e:0b:cd:96:7e:84:
17:2e:17:53:d2:f8:78:26:41:a7:74:fb:29:f6:d9:48:b0:70:
e1:59:1d:7d:40:a6:8e:b7:b1:32:5a:c2:de:ac:cc:45:1d:3c:
02:45:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org