Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100A026A8D811EFA028A247762E951A.roa
File: 7100A026A8D811EFA028A247762E951A.roa (raw, json)
Hash identifier: md4FiE1p6aBnTNs5PGRwJkdtouZM4nSQQkO7YR/7qZs=
Subject key identifier: 6F:6F:EE:0C:02:A1:64:F3:3B:C4:67:10:7A:2D:01:FA:4D:9A:16:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100A026A8D811EFA028A247762E951A.roa
Signing time: Fri 22 Nov 2024 13:48:23 +0000
ROA not before: Fri 22 Nov 2024 13:48:20 +0000
ROA not after: Mon 09 Dec 2024 13:48:20 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69687 (0x11037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:48:20 2024 GMT
Not After : Dec 9 13:48:20 2024 GMT
Subject: CN=67408ba7-79c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:ca:8f:33:26:e5:2d:86:5d:af:56:63:c4:
35:fa:16:8a:e3:75:c6:2e:26:1f:52:bb:af:bf:70:
02:51:86:b3:db:7c:07:e0:34:a7:2f:af:61:4e:99:
88:64:91:a0:03:b0:76:60:ec:8c:b7:2f:99:6c:b5:
f2:e1:c2:c7:9e:59:b8:f0:9d:5b:f6:2f:85:4a:c4:
87:1c:63:bd:6e:d5:ba:0b:f1:9b:0e:7d:6c:d7:34:
fa:31:de:bb:c4:a4:a5:d3:1a:30:9c:d2:98:a0:c8:
b9:5f:57:6f:1b:4e:33:fc:ac:67:d6:12:a8:13:b6:
c6:67:e8:54:1e:0f:7e:88:d1:dc:eb:b2:61:44:1b:
97:cc:69:f6:f0:45:1e:b7:a6:38:49:cc:10:60:85:
ed:96:3e:da:ed:3b:c7:dd:a1:99:c0:1b:1e:41:7f:
11:fc:0c:5a:ec:3a:bb:56:f9:7a:88:05:73:fe:c3:
e2:a8:ec:96:98:88:2c:b9:5e:00:a0:6c:ed:68:fd:
f9:a4:26:31:5e:e8:9f:62:b2:03:b8:a7:44:16:a8:
a7:e0:5a:f3:a4:05:c9:59:90:dd:d1:a1:c8:cd:33:
18:2f:fc:50:5f:fc:5d:e7:45:7a:77:ef:f2:6d:76:
83:0f:ac:17:34:c1:d8:19:96:8c:df:0e:96:3e:28:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:EE:0C:02:A1:64:F3:3B:C4:67:10:7A:2D:01:FA:4D:9A:16:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100A026A8D811EFA028A247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:c4:50:26:b6:f2:6c:e3:93:1e:d5:db:c0:a3:f3:7e:c2:ee:
91:3d:e6:86:3f:d6:a1:27:7d:61:6c:5d:f5:23:1a:72:0c:cd:
dc:3c:5d:86:02:3b:29:e5:53:a3:86:55:eb:74:e9:98:4e:64:
98:af:5d:0e:b4:67:79:4c:da:02:85:da:fa:14:c9:87:5b:91:
e6:8f:5c:7b:8e:9c:d9:38:62:82:57:6e:62:fd:73:be:3f:04:
ad:21:2a:03:79:ff:7e:3b:ed:2c:57:77:a4:4f:b6:19:a4:36:
6b:c3:31:bc:3c:7f:aa:ad:ab:f2:93:46:f8:27:38:a8:1f:2a:
15:07:18:a6:0c:27:6b:55:f4:58:c4:32:f1:ac:3e:80:1b:ea:
b3:fd:5b:08:f8:61:fb:a4:5b:32:52:5f:a8:34:ba:7e:5e:32:
f9:58:7f:fe:73:06:5a:73:9d:72:c2:09:c6:30:ca:7c:13:f2:
83:09:ad:90:3b:bb:45:6d:59:2c:f4:ec:6a:2c:63:68:ba:7f:
af:28:2f:fb:c2:d7:eb:09:e7:27:c6:9b:b7:be:8c:66:dc:42:
05:59:5c:c6:41:77:1a:39:b4:a7:8e:84:85:dd:f5:65:6b:95:
01:1f:29:4a:34:48:c3:fb:c5:b4:0f:d9:a9:7b:1a:d2:44:68:
8d:c9:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:17 2024 by rpki-client on console-ams.rpki-client.org