Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/710B8318A33011EF9E753343762E951A.roa
File: 710B8318A33011EF9E753343762E951A.roa (raw, json)
Hash identifier: ja/8ZgUIbtkGdDhWTDWR3cYVXAjBxlaHS5cXJn+sq8s=
Subject key identifier: EA:39:AC:28:70:6C:8C:DC:9B:88:5E:99:BA:6F:5C:20:70:70:EB:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/710B8318A33011EF9E753343762E951A.roa
Signing time: Fri 15 Nov 2024 09:03:12 +0000
ROA not before: Fri 15 Nov 2024 09:03:09 +0000
ROA not after: Sat 04 Jan 2025 09:03:09 +0000
asID: 140869
IP address blocks: 154.81.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68972 (0x10d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:03:09 2024 GMT
Not After : Jan 4 09:03:09 2025 GMT
Subject: CN=67370e50-50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:1a:84:b2:8d:bc:34:f9:12:62:1c:5e:67:
e3:c9:1b:8c:25:96:3e:01:99:f1:f8:bb:26:6c:cf:
c4:91:4f:50:1f:ac:5d:f5:6b:01:30:92:79:e5:a4:
f6:44:15:39:d8:16:b3:33:26:ba:92:36:71:e6:d6:
58:5b:41:7e:c4:c3:0b:72:6b:b3:d9:6f:c0:b9:11:
94:15:40:f4:c9:d0:bf:cd:78:fc:d0:8b:02:cc:20:
04:48:2c:07:2d:4b:9d:89:e6:fa:51:b3:95:47:38:
7a:5b:28:bc:57:8d:1b:b0:70:c6:18:ec:28:5c:03:
82:ff:41:5f:e2:0a:28:e1:1a:b0:fe:fb:88:c4:a9:
c2:70:ee:a9:c4:89:b0:f9:f8:eb:ce:48:d3:fd:ae:
53:ec:33:00:3e:a5:24:97:22:fd:39:2f:d4:8e:09:
ea:3b:0e:ec:8e:78:16:41:a6:4a:a1:c1:01:a4:70:
25:c0:50:e6:0a:fa:f8:61:9f:f7:3f:ec:c8:ae:f8:
fa:2a:5b:74:f1:06:81:ed:0e:eb:ff:12:78:b8:a0:
e8:ee:f2:3e:c3:2a:6c:ed:ff:d5:d7:91:81:86:21:
6a:0f:67:b0:dd:6a:93:5e:53:42:38:bd:f8:9e:9c:
9b:cb:d9:af:8b:ad:a9:42:8a:58:94:72:01:28:71:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:AC:28:70:6C:8C:DC:9B:88:5E:99:BA:6F:5C:20:70:70:EB:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/710B8318A33011EF9E753343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:2e:76:69:01:70:e8:3c:c4:00:85:2f:e3:e9:20:ec:89:ab:
39:7e:dd:b5:5c:7b:ac:54:4f:44:6c:11:4f:4a:cc:48:9e:1b:
71:50:1e:e8:96:1a:54:8a:ff:50:77:ac:79:4f:24:b1:11:d7:
cc:38:c4:e4:e2:06:bc:29:af:fc:41:01:89:49:5e:09:98:f6:
05:4a:25:a8:69:87:a4:9f:d6:e6:68:c0:6c:d3:1a:90:67:8d:
f4:15:a6:49:c7:55:7b:90:02:91:84:dd:4d:a3:84:53:f8:31:
e5:f0:39:c9:7e:5a:f7:72:60:ec:5d:fd:5a:e1:61:4e:60:f4:
8e:14:8c:f7:3c:b3:da:a5:76:4b:a1:2b:61:69:50:fe:02:e0:
80:59:a8:c5:3a:93:44:23:01:21:c1:f5:29:58:ed:b1:c2:be:
1e:12:1d:c8:6a:97:b0:d4:1f:71:7f:26:07:e3:05:9f:b3:54:
a3:8b:c8:ac:c5:b3:61:ec:8a:8f:f3:36:e4:c6:50:44:94:2f:
f0:ae:66:95:ed:48:6b:fe:26:5d:ed:cb:5c:55:39:60:de:ce:
89:74:61:ff:9e:bc:b3:8d:34:2d:55:31:0e:2b:83:ba:34:ed:
1a:24:e2:82:16:f1:24:ea:cf:62:28:64:90:9d:55:08:3b:e9:
92:50:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org