Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70FDE4369B7111EFBEB42046762E951A.roa
File: 70FDE4369B7111EFBEB42046762E951A.roa (raw, json)
Hash identifier: yDA9OVaJkmhOcRx6V5hlzn51b+HKeMpGZwHdUUsfNI8=
Subject key identifier: 5A:35:99:06:E4:12:83:AB:11:F6:7E:65:28:54:98:ED:77:27:A4:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70FDE4369B7111EFBEB42046762E951A.roa
Signing time: Tue 05 Nov 2024 12:28:20 +0000
ROA not before: Tue 05 Nov 2024 12:28:16 +0000
ROA not after: Mon 13 Jan 2025 12:28:16 +0000
asID: 7018
IP address blocks: 154.195.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67517 (0x107bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:28:16 2024 GMT
Not After : Jan 13 12:28:16 2025 GMT
Subject: CN=672a0f64-06ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:c6:5c:11:8a:93:3d:2c:77:94:83:c1:f0:
72:9a:01:12:a3:6c:c8:88:97:24:2e:d8:63:da:ca:
20:3d:c2:ff:61:d9:19:d0:e7:1d:65:22:bd:86:1e:
64:5e:f5:b4:3d:17:91:95:e9:d2:ed:81:29:f1:19:
a2:9d:a0:de:09:13:4d:93:78:4d:88:18:13:c3:e9:
60:17:0d:85:58:28:f4:1b:c0:02:f4:c4:5c:dc:2f:
a7:7d:61:87:c2:2b:7f:60:f3:dd:c0:2b:fe:f4:4f:
31:4f:83:3c:cf:c1:f5:f4:02:86:e0:3c:ba:57:16:
c6:d2:3a:cc:a6:f9:0b:96:28:2d:eb:22:93:9c:1d:
ef:af:54:4f:df:f2:3f:ae:f7:fa:f6:cd:81:b9:4a:
e6:78:b8:1f:58:17:47:6a:9e:26:d4:75:8e:e4:29:
d9:ac:57:83:af:9a:bc:c3:44:bd:cd:3f:b0:f6:15:
d9:bd:e9:db:5a:db:0c:ac:db:55:ab:76:4d:6c:08:
70:75:22:b4:50:1c:29:83:07:28:ca:23:34:02:6a:
39:6b:b2:c9:bb:92:af:93:ba:43:3f:61:b4:7d:92:
9e:d2:b9:90:aa:29:78:e1:8b:1a:a3:6d:f0:1b:4d:
5f:03:aa:8e:6a:c3:2b:48:e4:4c:61:09:94:d9:51:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:99:06:E4:12:83:AB:11:F6:7E:65:28:54:98:ED:77:27:A4:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70FDE4369B7111EFBEB42046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:69:9d:91:fa:2d:51:97:aa:ea:bb:0c:3d:62:c6:0b:8c:88:
4b:ff:a1:ad:b9:1d:c8:ac:38:45:cb:dd:d7:1c:66:1f:f8:82:
a1:b9:22:84:a1:c1:1b:68:2a:e2:5a:0f:2c:c8:49:9b:89:54:
ea:cd:cb:17:1c:c4:21:28:d1:a8:8a:9f:86:c2:68:81:b7:1b:
a7:30:ce:97:f2:4b:a9:d0:46:28:f1:b8:45:f9:fb:82:a3:7f:
ed:98:21:95:e3:49:f1:03:a3:b1:55:a1:58:77:32:be:dd:a1:
4e:68:51:42:78:c8:e9:de:e7:71:46:3e:47:54:b9:9f:36:a4:
75:17:6f:2d:51:3a:e3:1b:62:6d:b0:e3:0d:60:d9:f3:cc:67:
79:25:9a:a6:ca:74:49:92:0a:3e:3e:a9:8f:e8:2f:65:5e:b4:
eb:f8:25:79:29:9a:cb:dc:07:a0:42:19:c6:c2:e0:96:8d:f2:
19:27:83:dc:29:69:0e:f8:27:10:ca:54:6b:ad:64:36:2b:49:
9a:30:f1:bb:34:0a:92:98:f4:ff:ba:33:66:bb:c9:bb:a7:22:
a9:2b:a5:93:aa:66:d8:58:05:0a:f1:c8:fc:02:11:86:9e:eb:
70:36:5a:82:ac:6e:7f:40:6e:ce:d5:50:de:a3:3a:16:a3:b5:
52:05:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:43 2024 by rpki-client on console-ams.rpki-client.org