Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F3EBCA344A11EF8E0FD77D762E951A.roa
File: 63F3EBCA344A11EF8E0FD77D762E951A.roa (raw, json)
Hash identifier: FGQM6eUJuFmJjtBMXhBzBXOj8baeISkk2eyJ87Yyzmw=
Subject key identifier: 7E:82:CD:19:71:37:CA:79:56:E3:F7:8E:49:63:D8:85:8B:8F:C7:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C775
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F3EBCA344A11EF8E0FD77D762E951A.roa
Signing time: Thu 27 Jun 2024 05:59:18 +0000
ROA not before: Thu 27 Jun 2024 05:59:15 +0000
ROA not after: Mon 30 Dec 2024 05:59:15 +0000
asID: 984
IP address blocks: 154.92.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51061 (0xc775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 05:59:15 2024 GMT
Not After : Dec 30 05:59:15 2024 GMT
Subject: CN=667cffb6-b26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:7b:aa:4d:21:f8:07:70:24:4a:20:41:0d:
70:f0:35:0b:68:05:e9:d8:31:70:9d:ae:fa:dc:53:
ed:be:dc:6a:3a:77:af:a0:ff:8f:d5:18:cf:f6:40:
aa:d1:97:4f:02:32:98:e7:bf:be:b6:d1:be:d2:bb:
b7:4a:03:da:f1:1b:d9:a1:50:c4:53:ed:aa:cc:f1:
64:99:6d:5a:6e:19:b7:3f:af:fc:58:24:65:da:8d:
ec:05:f6:ad:7b:d5:dc:02:31:94:b1:4f:2b:92:c7:
1a:a9:ff:c5:9c:63:df:98:7c:18:70:bb:5f:8e:e0:
91:4c:b2:bc:21:ed:bd:15:9c:99:d0:ff:53:8e:5d:
24:7b:4e:8b:9d:ea:d7:0e:89:66:1e:55:26:8b:17:
08:d5:0a:fa:f7:57:c0:e9:b1:cd:16:88:53:72:a9:
d4:72:34:67:84:1a:00:97:5c:3d:5b:d0:31:23:ef:
95:00:9a:98:1a:d1:50:ef:24:c8:1d:04:aa:72:6d:
34:82:79:0e:03:9f:57:99:3a:c5:c3:30:c3:e0:94:
ce:39:8e:e8:b8:b2:9c:1a:d9:73:8a:dc:33:62:ca:
77:41:97:c2:da:43:62:02:59:fe:63:5c:8d:c6:78:
ad:31:88:a5:37:0b:ff:21:39:0d:c0:3b:c4:86:54:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:CD:19:71:37:CA:79:56:E3:F7:8E:49:63:D8:85:8B:8F:C7:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F3EBCA344A11EF8E0FD77D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
32:82:9f:0b:b6:f3:67:22:55:ba:9e:92:09:64:54:c6:d5:ff:
ce:fb:4d:47:a1:36:98:ed:b5:4a:9b:85:d4:c7:0f:aa:e1:c1:
8f:2f:3f:da:20:42:c8:e1:14:c4:1e:f1:fe:15:b4:90:c4:8a:
78:a9:c6:81:5c:31:e7:54:cb:69:b6:01:68:18:5f:26:43:85:
2d:a7:f0:55:16:88:7e:02:fc:4e:2a:28:cd:14:12:b0:b5:2c:
9c:8e:ac:af:b1:b7:60:ee:f4:5f:d3:42:97:c9:9d:f9:c6:07:
d4:b2:17:c3:6c:f2:07:f5:fb:d2:d4:fb:03:5c:f5:ee:1a:d1:
c5:d5:8e:3e:20:cb:36:ef:04:4d:46:f4:7c:ee:d4:61:8f:ad:
6c:9b:8b:bc:a5:4d:80:6d:45:46:10:ca:67:0a:42:55:a8:e9:
f9:cb:8c:b2:28:97:89:67:77:cf:55:57:b8:30:1e:f0:cb:2b:
d5:bf:a8:c9:78:fb:6d:a8:04:f9:bd:62:dc:f3:86:78:99:20:
a0:86:80:85:c3:91:b0:03:c9:95:7a:24:4b:82:5f:cd:d2:32:
99:08:c0:fb:52:6d:93:d1:26:ea:2e:fc:8f:da:d8:84:33:9d:
4a:57:a7:8c:3c:91:5c:f5:25:40:2e:42:57:fb:ed:d7:fd:43:
67:55:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org