Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A1C99A5F1511EFA4C0138A762E951A.roa
File: 71A1C99A5F1511EFA4C0138A762E951A.roa (raw, json)
Hash identifier: 9chz1qyBaJUzEL6JmbI+KI/yyFC55BgansGHwkhEzoI=
Subject key identifier: 54:F8:A1:9E:95:F7:32:56:6B:12:E7:59:EC:89:43:43:4D:C4:82:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E33E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A1C99A5F1511EFA4C0138A762E951A.roa
Signing time: Tue 20 Aug 2024 16:58:38 +0000
ROA not before: Tue 20 Aug 2024 16:58:34 +0000
ROA not after: Sun 01 Dec 2024 16:58:34 +0000
asID: 5065
IP address blocks: 154.86.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58174 (0xe33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 16:58:34 2024 GMT
Not After : Dec 1 16:58:34 2024 GMT
Subject: CN=66c4cb3e-bd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:38:4f:8d:a6:22:57:09:91:bd:96:1e:21:
fb:c0:12:8f:02:06:1f:8d:4f:39:0a:5b:69:7e:1e:
05:49:36:57:66:20:a5:9c:43:7d:de:34:cd:53:6d:
5f:0a:17:22:68:78:ad:7b:73:3b:16:99:eb:01:59:
50:cf:82:28:ef:c0:22:73:22:ab:ab:6b:54:0a:76:
8f:08:6d:69:99:5c:d6:38:5b:a6:fb:61:07:74:e2:
4b:1b:a2:e4:f6:18:89:a8:63:12:32:1a:1c:ec:68:
0a:af:8f:91:9c:ce:b2:71:83:b5:c7:ef:72:c8:1f:
56:86:ca:d1:ec:64:75:7b:39:40:0d:56:eb:4d:b4:
ce:35:83:79:ee:6e:a8:b4:56:aa:54:05:13:64:31:
d4:bd:69:28:d0:d2:4d:e0:40:0d:41:d6:3e:d0:e5:
93:86:6a:3d:a3:a1:e5:80:39:de:99:fc:b4:04:92:
5a:b9:10:38:83:24:15:f8:dd:fb:e6:55:f6:09:b7:
2c:cf:82:ce:8b:03:a4:0a:ab:8d:69:a2:ec:ef:d9:
fe:39:43:b8:89:6b:f4:9c:79:08:16:b6:c2:27:70:
f2:9e:3e:5e:95:59:fa:6c:bf:af:eb:05:6d:d1:04:
9b:e0:e4:f1:36:48:a1:df:4f:19:e2:90:1d:04:6e:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:A1:9E:95:F7:32:56:6B:12:E7:59:EC:89:43:43:4D:C4:82:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A1C99A5F1511EFA4C0138A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4e:0e:d4:b6:9d:47:08:06:26:04:c9:93:73:2b:ff:54:9b:
29:0b:40:d5:f4:1e:95:80:79:0f:32:7f:72:92:d9:5a:88:79:
cb:66:e8:b9:6a:0a:c3:8b:0c:8e:ba:a2:d5:80:90:96:79:4b:
76:6e:28:34:82:c5:d8:2a:88:57:f3:09:48:8b:52:57:db:56:
36:ed:1a:3a:38:ef:60:15:8c:1b:b5:42:45:be:92:6a:3a:e2:
87:c9:c3:c0:d2:98:a2:4c:b1:3d:39:85:ae:52:2d:89:b9:cc:
7c:34:69:51:e0:b4:81:cf:bd:e7:6b:8e:43:04:03:62:e6:6b:
70:bf:74:41:8d:81:da:82:7e:bc:05:25:f9:2a:8e:38:8c:60:
60:b9:c2:ca:fb:59:c6:66:0f:b1:02:8d:29:c6:b2:7f:4d:83:
b7:3c:b8:de:d8:81:05:44:9f:ea:8b:9e:b9:08:f0:4b:81:c3:
43:fb:a7:e1:92:c5:c9:93:d1:a7:3c:ed:95:cc:88:b2:38:d9:
6c:a5:50:04:93:fe:73:36:52:30:3f:44:20:95:c6:e5:e1:aa:
a1:1c:32:17:5b:79:78:77:62:db:fb:00:f2:2d:fc:2c:42:59:
f2:5a:a0:e5:8c:1a:4c:b9:95:8d:1a:5d:ff:ed:0e:69:c2:db:
9f:22:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:44 2024 by rpki-client on console-ams.rpki-client.org