Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700AF45692DE11EFB475C6AF762E951A.roa
File: 700AF45692DE11EFB475C6AF762E951A.roa (raw, json)
Hash identifier: 3lGmeW2OhSQGW3p5CsVxzwG2dbxBVCw9Od11mJZZIi0=
Subject key identifier: 01:3E:36:F6:01:CB:D1:55:02:69:3D:44:B4:A9:91:87:36:02:4B:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01023A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700AF45692DE11EFB475C6AF762E951A.roa
Signing time: Fri 25 Oct 2024 14:35:53 +0000
ROA not before: Fri 25 Oct 2024 14:35:50 +0000
ROA not after: Sun 01 Dec 2024 14:35:50 +0000
asID: 48031
IP address blocks: 154.218.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66106 (0x1023a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:35:50 2024 GMT
Not After : Dec 1 14:35:50 2024 GMT
Subject: CN=671bacc9-7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:e4:b8:14:c4:c4:90:27:3e:b6:dd:22:41:
5a:2c:cf:da:fc:38:1c:8a:9d:59:6e:fd:9c:1e:64:
46:5c:01:73:b0:d0:45:d6:48:e0:95:dc:e7:8c:01:
b7:42:d5:80:bd:09:bf:83:e0:90:66:a3:5a:b1:48:
aa:a5:de:d2:ae:c6:cd:d6:77:68:9f:a1:01:54:4e:
29:7f:fd:56:cb:ab:59:4a:4c:ae:88:eb:f6:52:19:
f8:0d:13:bb:6b:c1:7c:b3:52:d3:e8:87:12:cd:6d:
b0:f6:4b:44:4b:51:72:0c:3e:3e:72:38:76:e2:4b:
cd:6f:41:1b:d1:12:fd:1b:7f:4c:85:b5:71:24:12:
5b:80:ce:36:7b:98:b4:b7:c5:51:13:15:47:67:9d:
e1:79:2c:1e:42:26:73:1c:34:2e:83:1f:b3:09:e0:
ed:dc:41:b9:d0:79:f5:8d:75:07:1f:e6:e7:7d:13:
30:c6:8b:93:f5:e0:a9:82:e8:c7:26:57:cc:e3:ed:
5c:5e:98:e7:40:fb:08:4a:9b:20:ec:d0:5b:3d:32:
0b:11:a5:3a:06:f7:56:e6:24:bd:14:30:5f:32:75:
84:16:df:5b:c1:30:c8:45:66:a3:27:83:5f:07:cf:
9c:8d:aa:8d:6a:5f:07:30:8e:a9:32:b8:af:3d:cb:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:36:F6:01:CB:D1:55:02:69:3D:44:B4:A9:91:87:36:02:4B:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/700AF45692DE11EFB475C6AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.16.0/20
Signature Algorithm: sha256WithRSAEncryption
82:3a:68:f6:6f:d2:c1:58:5a:0c:75:61:66:8d:b3:02:73:76:
25:28:4b:c5:b4:61:3d:6b:ac:35:b3:b4:5d:04:52:94:92:51:
26:cd:f6:ca:f6:be:65:19:e4:db:22:20:9d:ba:8a:39:68:bb:
90:b2:0a:51:8b:70:73:b2:9e:3d:ce:48:e4:ef:05:0a:10:04:
1b:f1:7e:9e:bc:46:10:3a:30:1f:f5:93:45:14:d7:81:cc:b0:
b9:c9:1a:94:83:8b:55:97:01:cd:ec:14:44:35:4d:f3:68:98:
43:4d:7c:e6:62:10:e2:1f:16:f6:94:b9:18:be:ad:ed:a7:b5:
ed:7c:73:cd:bd:86:ff:d7:df:6d:28:5b:a2:27:46:6f:28:70:
f5:78:2b:49:1d:57:6a:d6:06:86:dc:d7:33:e9:5e:4b:c5:51:
c3:79:a3:9e:5b:a5:ca:6c:00:52:d7:1c:c5:12:65:fa:ba:bf:
c9:20:6b:97:59:c1:46:96:12:ed:f3:17:8d:61:3e:96:de:22:
a6:8e:6a:41:84:25:4d:c0:e5:e1:76:9b:d9:84:fd:a3:89:40:
83:77:46:37:c7:d8:5e:84:49:8f:79:31:26:28:08:6a:0e:14:
a3:70:0e:0b:0f:8b:7e:92:1a:00:f4:38:9d:89:bb:29:59:7a:
ed:4e:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org