Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E7BF9AA2FD11EEA1CE6512D25BE465.roa
File: 69E7BF9AA2FD11EEA1CE6512D25BE465.roa (raw, json)
Hash identifier: x294OfHotPRg8EuMCxEZh8e/FPVtHgL9wx4I+pABoAw=
Subject key identifier: CF:CC:E1:77:00:D4:67:01:0D:0A:E7:53:2C:EA:DD:0C:DF:EB:AE:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 66F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E7BF9AA2FD11EEA1CE6512D25BE465.roa
Signing time: Mon 25 Dec 2023 08:12:58 +0000
ROA not before: Mon 25 Dec 2023 08:12:55 +0000
ROA not after: Wed 25 Dec 2024 08:12:55 +0000
asID: 18229
IP address blocks: 154.83.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26353 (0x66f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:12:55 2023 GMT
Not After : Dec 25 08:12:55 2024 GMT
Subject: CN=6589398a-e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:7d:32:96:47:22:3c:51:1c:b4:9a:fe:11:
f3:82:5e:43:8b:96:6e:d2:ce:4a:26:c0:08:6c:25:
57:e8:87:74:eb:cf:46:61:0e:40:47:33:7b:81:9d:
c7:6a:9a:b5:1e:68:dc:94:75:24:66:32:66:25:64:
bf:02:0d:38:4a:7c:61:71:7a:ce:ca:fd:69:e7:dd:
8f:81:c4:d6:a4:f9:18:57:98:d1:be:2a:18:c2:b6:
10:fb:d0:67:47:c3:50:a7:d7:fd:6a:37:5e:59:6b:
19:ba:0d:95:bf:82:57:61:fd:c1:a9:8a:d6:fe:92:
a9:82:a9:75:b9:f0:6e:4e:47:c9:c8:9a:e0:db:c4:
ee:69:4c:97:17:e0:ef:10:d5:a1:ae:c3:1c:9f:8c:
bd:a3:74:9c:c6:9c:8b:14:e1:ff:1d:a3:64:74:a9:
f1:2a:48:3c:12:59:6d:63:74:4e:f4:9a:6d:6c:e9:
11:4d:35:a4:d9:af:af:59:e5:11:1f:bc:3a:70:d4:
cd:92:11:fd:4e:df:ad:34:c8:48:23:37:f2:4c:d5:
03:8f:db:b2:c8:72:9c:36:55:19:a4:f5:92:9e:e7:
ee:64:da:31:0d:9a:a1:23:97:88:d5:fd:2a:fa:43:
83:91:19:9a:51:de:80:ed:a8:9b:0c:3a:97:cf:aa:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:E1:77:00:D4:67:01:0D:0A:E7:53:2C:EA:DD:0C:DF:EB:AE:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E7BF9AA2FD11EEA1CE6512D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1d:9c:29:f1:98:d5:02:71:fc:96:9f:72:17:e4:55:3b:e9:
ab:93:d6:ac:4d:4a:1a:7b:2a:d8:44:6d:d6:40:93:92:8d:38:
4a:76:4e:1d:d7:00:d8:fb:60:2d:9d:f7:3e:79:90:bf:5e:df:
5a:4e:5b:7d:c5:f4:4f:c5:39:de:80:67:8f:8c:1e:0e:b7:d4:
f6:c8:c1:5a:04:a7:fb:3c:7d:26:ad:db:a6:c9:03:e2:a0:17:
3a:3b:dc:9c:c9:5c:57:83:e6:00:02:d4:5c:10:16:0d:2a:30:
41:19:c8:c9:2d:61:0a:7e:d0:5b:29:2b:ef:ed:98:48:81:eb:
54:f1:4d:48:5d:c6:74:38:26:de:ca:b7:79:dc:cc:d3:73:d0:
3b:d2:5f:ec:e7:77:8f:e4:2b:60:65:df:dc:d9:57:03:54:b3:
aa:91:fb:da:9a:fe:e0:8e:b9:c5:53:67:c4:7b:4e:0e:56:34:
ef:e8:64:07:65:8b:b4:42:da:b3:c1:41:f3:60:5b:14:25:23:
c0:d5:06:e0:ab:4f:22:77:79:d7:de:f2:62:8f:5e:a8:bb:11:
8d:6e:20:43:12:61:9f:75:99:48:6e:8f:69:60:9f:89:56:5c:
83:da:6c:2d:7e:5a:d8:7b:96:ca:54:65:b0:9f:84:2f:99:d1:
3b:a5:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org