Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F535EEA65011EFAE07615E762E951A.roa
File: 71F535EEA65011EFAE07615E762E951A.roa (raw, json)
Hash identifier: cFcK55fs+aGz4o0iLpF548eW9UD6wVBMc8GV6dHPc1w=
Subject key identifier: 73:53:B3:F9:39:43:EA:E6:54:E9:09:74:2A:7A:54:CC:CD:AA:98:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F535EEA65011EFAE07615E762E951A.roa
Signing time: Tue 19 Nov 2024 08:29:51 +0000
ROA not before: Tue 19 Nov 2024 08:29:47 +0000
ROA not after: Sat 23 Nov 2024 08:29:47 +0000
asID: 149014
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69408 (0x10f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:29:47 2024 GMT
Not After : Nov 23 08:29:47 2024 GMT
Subject: CN=673c4c7f-1633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:4f:98:70:84:54:ab:77:8b:55:d5:c5:30:
ab:75:1e:17:a5:89:e9:d6:18:16:f6:c2:5c:2b:50:
6f:d6:f0:ab:d8:d0:d5:c8:9f:8f:ed:90:4c:c0:fa:
65:cb:5f:d2:21:2e:06:f7:5c:87:97:f2:fb:44:e5:
17:98:81:fd:e6:3e:06:1a:ab:34:e1:b9:96:19:ab:
9d:1e:81:d7:39:91:06:c0:81:b3:ec:c4:f2:19:ed:
fd:a1:44:45:2e:21:8d:44:4a:c0:17:88:61:10:70:
50:77:42:eb:a9:47:22:ce:52:f3:73:6d:a2:22:9e:
17:97:05:d7:d4:5c:d6:cf:8e:a1:32:0d:ea:1d:ac:
45:bb:ed:53:34:f3:e6:8b:01:e9:c1:90:e4:f1:6f:
79:f1:38:6e:52:3e:f9:c8:54:bf:5a:a1:8d:a8:c4:
4b:39:de:e8:d7:40:d0:0b:07:c9:ab:3d:9c:b5:b0:
8f:7c:18:69:eb:e3:79:13:55:8a:54:7c:6f:27:77:
e2:64:86:ed:c6:15:ac:05:30:ae:34:f2:e4:53:b6:
23:3a:f4:fb:2f:02:bd:21:1a:7f:8a:3b:89:6c:46:
2c:d0:22:a9:bf:cd:3b:2a:82:eb:4d:e9:7a:64:69:
3e:70:26:8a:4e:ed:e1:cd:cf:33:2b:1f:ef:dd:d5:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:B3:F9:39:43:EA:E6:54:E9:09:74:2A:7A:54:CC:CD:AA:98:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F535EEA65011EFAE07615E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
71:94:ad:de:82:79:9a:9e:86:d8:5b:59:ed:65:da:c8:f1:3c:
30:99:02:58:5b:31:63:14:39:be:8b:c3:97:b2:73:3f:a2:3e:
d0:33:4c:94:a0:3b:cb:51:d1:af:4b:6c:c4:ea:40:34:23:34:
10:5c:46:8f:93:76:da:93:b4:5c:1c:22:2c:c9:27:aa:c6:90:
14:96:27:57:21:83:a6:db:8e:7f:48:98:d9:52:bd:4f:f8:18:
9f:42:60:e7:e0:0f:02:32:9d:66:e8:a0:94:f6:6f:33:0b:ea:
05:62:2c:36:56:aa:b9:2c:e8:8b:69:61:bf:1a:ed:97:78:8c:
21:d1:5d:d9:a6:0a:29:1a:d2:9a:a6:3a:46:b7:0d:7b:27:7a:
01:a9:a4:e9:db:d6:f1:41:5e:34:fa:36:42:5f:4a:7b:07:4b:
7d:37:fa:fa:77:56:5a:6e:ae:30:f8:19:4e:bf:07:3f:40:0a:
af:b7:05:b7:46:6e:f2:ee:dd:eb:e6:82:53:9c:67:b5:47:69:
d2:60:76:dc:4f:cd:83:45:58:f3:58:78:bb:94:d2:3b:38:d2:
c8:4b:73:61:0c:67:bb:c7:74:7c:8b:06:d4:fc:07:38:39:c9:
5d:94:37:ae:ec:75:85:07:9c:51:c8:46:04:15:e0:fe:7b:bd:
80:5b:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org