Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B9294952F11EF9A77ED4A762E951A.roa
File: 702B9294952F11EF9A77ED4A762E951A.roa (raw, json)
Hash identifier: 6lqm/ThxByqVqIkOXpHA4+7MX2J3Y701gQZeFHNSQJ0=
Subject key identifier: 99:0A:E5:E8:22:8B:D8:31:49:B6:4B:DF:61:2E:CC:74:27:01:20:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B9294952F11EF9A77ED4A762E951A.roa
Signing time: Mon 28 Oct 2024 13:20:45 +0000
ROA not before: Mon 28 Oct 2024 13:20:41 +0000
ROA not after: Sun 01 Dec 2024 13:20:41 +0000
asID: 202656
IP address blocks: 154.222.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66269 (0x102dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:20:41 2024 GMT
Not After : Dec 1 13:20:41 2024 GMT
Subject: CN=671f8fad-915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:8d:5f:a7:e3:1e:25:5d:fa:ca:e4:57:8e:
02:67:0d:48:dd:75:4b:98:a8:03:d3:cc:f1:4c:0f:
63:e5:36:fd:65:d4:44:0b:b3:ae:2f:5a:77:29:ab:
86:bd:f5:8c:ae:c8:65:01:65:4d:80:8c:dc:0d:3e:
b6:dd:75:4f:3b:e8:6c:25:45:5b:44:49:4e:5d:24:
9d:46:b4:11:df:73:3c:9b:35:c8:f0:92:aa:6c:47:
e3:d4:b9:c0:9e:23:28:fe:74:5c:de:2d:24:05:8e:
1b:c7:b3:28:58:e4:d0:74:ef:1c:61:5c:76:97:a8:
06:ab:27:8d:84:7d:b8:d6:92:a4:ee:e8:aa:5f:7a:
07:ea:a5:19:89:c1:e3:78:17:dc:b1:bd:15:13:93:
43:33:cc:3b:b1:16:ec:c9:62:84:ce:dd:8e:ac:3f:
e8:6e:0c:08:26:24:38:4e:8c:21:b9:67:a7:01:16:
35:3b:b8:7b:6d:2d:28:51:1a:90:8e:04:29:b0:b1:
53:1f:c2:4d:6a:f2:3b:0c:bc:69:5a:80:35:7e:76:
d8:0f:7b:91:41:42:b4:89:9d:9f:32:06:6a:78:33:
31:72:49:27:37:43:a9:6e:3d:98:44:f5:d4:41:03:
08:b7:4d:5c:ff:5d:f7:90:4b:ad:20:bf:a5:2f:bd:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:E5:E8:22:8B:D8:31:49:B6:4B:DF:61:2E:CC:74:27:01:20:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B9294952F11EF9A77ED4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:90:a3:02:51:83:47:c1:7d:db:8e:0e:0d:84:ab:12:a8:ae:
ab:d3:71:d6:41:f2:34:7b:f9:e7:1d:01:e9:0d:ba:e3:57:10:
37:fa:43:df:ba:c8:38:95:95:86:4f:7c:12:69:1d:b0:72:24:
d1:d9:c2:a0:a9:f0:97:3c:c8:ce:27:4f:7f:d3:83:9c:75:61:
ec:f9:19:82:b2:c3:63:cb:79:bc:46:91:81:02:3e:5c:ca:a7:
64:2b:d8:c4:ce:a7:2f:b8:cb:be:c5:8c:00:87:b7:d2:17:b2:
0c:0b:fb:ab:b5:5c:5c:67:91:85:e4:09:60:59:c4:41:ed:27:
ac:e9:24:63:4f:46:5e:90:be:19:57:12:4f:c2:0f:5f:b4:b4:
40:d7:8a:a6:57:11:a0:0a:4f:3f:3d:bb:b5:b7:f0:e2:f0:ee:
d2:ec:17:1b:80:b1:fd:22:79:ae:53:0f:4e:07:4a:b2:e4:33:
95:c0:07:73:33:8e:65:4a:76:e9:6e:e6:2e:48:4f:3f:4b:97:
32:bd:0f:fa:e1:21:45:9c:a5:6f:51:c9:2b:b5:5e:43:01:2f:
08:45:71:76:fa:85:ad:7f:cc:fb:be:ae:9c:f4:e6:8c:65:93:
03:d0:67:6a:5d:60:f4:c1:06:c3:b1:dd:cb:b3:db:11:2f:4a:
21:7f:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:16 2024 by rpki-client on console-ams.rpki-client.org