Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677ADB2C4A5811EF9685675A762E951A.roa
File: 677ADB2C4A5811EF9685675A762E951A.roa (raw, json)
Hash identifier: maB12zwKZzRlTrHlX9b8O4Z4O0lcEEELyjos0ZTS3OY=
Subject key identifier: 83:B1:A6:5C:70:A1:5F:6D:A7:B7:E1:6D:46:BD:D5:D7:58:37:2E:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D6D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677ADB2C4A5811EF9685675A762E951A.roa
Signing time: Thu 25 Jul 2024 07:35:03 +0000
ROA not before: Thu 25 Jul 2024 07:34:59 +0000
ROA not after: Fri 11 Jul 2025 07:34:59 +0000
asID: 136950
IP address blocks: 154.91.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54994 (0xd6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 07:34:59 2024 GMT
Not After : Jul 11 07:34:59 2025 GMT
Subject: CN=66a20026-5e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:d4:a6:53:1c:7a:53:0a:1f:89:bd:e6:74:
1e:55:c9:55:20:04:e4:1e:ff:cf:b8:46:d6:27:0d:
b3:69:32:22:1e:f5:b8:3c:d4:90:a9:78:d9:cd:09:
9c:cb:61:8e:06:b2:81:0c:87:8d:ca:1e:d4:38:54:
8a:68:6f:c6:8b:77:ae:34:45:04:76:56:13:fb:9d:
2b:d5:79:bd:4f:6e:08:18:83:13:bf:8d:c2:a0:af:
cb:fb:b4:28:bf:1a:a7:08:a6:92:42:10:ca:f4:96:
db:e2:30:1c:4b:7d:da:c8:a9:87:06:12:6e:ea:a7:
ec:00:a4:67:e2:19:7b:cb:89:37:b2:bc:48:1d:47:
62:33:32:31:94:5d:0f:ff:78:22:6a:21:37:9c:3f:
97:bb:7b:3c:a1:b7:93:29:aa:a1:15:e8:b8:a1:cd:
60:27:ee:5b:b2:48:a9:a5:36:e4:89:89:3b:6a:da:
bb:61:2b:d1:48:38:18:44:6b:7d:cb:50:36:64:e5:
12:26:c6:c7:e3:44:5b:8f:d0:ce:6a:02:9f:aa:3a:
ff:9d:74:16:ec:6b:60:e9:cf:e9:fd:3e:2f:b7:f6:
4d:ac:08:2f:76:f4:0b:6a:e0:0d:2f:8a:ca:3d:df:
f1:ac:ff:a5:07:1c:be:bb:35:27:bd:f7:10:1b:62:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:A6:5C:70:A1:5F:6D:A7:B7:E1:6D:46:BD:D5:D7:58:37:2E:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677ADB2C4A5811EF9685675A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8d:81:59:e9:b0:85:6b:aa:7a:08:53:8e:db:0c:ba:59:43:
2e:47:79:6d:9e:94:45:ec:de:da:ea:c7:c1:e4:56:91:b2:c5:
55:0c:ca:c8:ac:a7:43:a9:56:ec:61:1d:c1:36:66:f6:67:b5:
f4:24:6d:ae:40:84:dd:d1:1e:d4:3c:c4:59:93:7f:98:f4:a5:
5e:79:25:77:04:19:3b:c8:e8:39:df:0c:98:e0:0b:28:43:8c:
34:e0:16:e3:ef:5b:ed:49:21:78:64:7c:15:ed:68:07:52:96:
44:52:87:0d:80:69:06:28:2d:79:49:d1:81:90:20:ea:78:ec:
39:ed:aa:79:85:1e:a0:69:7c:de:c5:b3:80:4a:b8:56:f0:de:
60:8c:c0:92:09:cc:f4:e5:34:18:c6:bd:77:d5:8b:5a:f6:79:
01:b7:bc:33:9f:8a:47:dd:18:45:27:a1:74:5f:27:78:ed:03:
94:dd:2d:4f:5a:89:af:44:cb:99:35:93:f8:59:d5:cf:2b:28:
90:4b:56:25:68:82:3c:b6:b8:1f:ba:c7:53:e6:61:3a:7d:d7:
9a:c6:af:13:11:f0:23:cc:1e:fc:b5:dc:cf:2a:95:fa:fc:2e:
0d:37:33:c9:92:93:fd:d7:b9:05:d2:e4:13:6e:ed:c6:da:51:
9c:d7:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org