Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C80B78A8CF11EFA43C598E762E951A.roa
File: 72C80B78A8CF11EFA43C598E762E951A.roa (raw, json)
Hash identifier: 85UrJWIZMxG7L57yKUS571QMZLafcK+ayDl5w+b8qNE=
Subject key identifier: F6:E6:68:16:EC:62:E4:EA:5B:C0:92:5B:E6:6E:E1:D5:7B:F8:AA:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01102D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C80B78A8CF11EFA43C598E762E951A.roa
Signing time: Fri 22 Nov 2024 12:44:01 +0000
ROA not before: Fri 22 Nov 2024 12:43:57 +0000
ROA not after: Sat 30 Nov 2024 12:43:57 +0000
asID: 137443
IP address blocks: 154.223.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69677 (0x1102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:43:57 2024 GMT
Not After : Nov 30 12:43:57 2024 GMT
Subject: CN=67407c91-1303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:ca:b6:b4:8a:8a:41:c0:2b:e1:a0:5b:52:
de:a2:c8:4d:d6:f0:26:82:d1:23:f2:c1:0d:90:4f:
94:d4:2e:ed:92:3a:1d:66:89:51:96:be:ee:0a:37:
1d:d4:07:f2:b6:15:1e:ce:17:0c:8c:05:b3:a0:1e:
fe:ec:fa:ed:ec:c0:f9:e3:c3:da:d2:d9:99:5e:0d:
7d:30:fa:12:ea:88:7d:f8:1b:aa:e2:a1:12:91:77:
25:1d:1a:cb:c6:72:35:7a:ac:66:8c:bd:f2:88:64:
44:45:ff:a6:c8:cb:24:87:02:80:3a:dc:9c:b5:0f:
e6:66:64:96:74:c3:ca:32:13:84:16:f6:8f:6d:9e:
e8:2c:8e:4b:0c:1d:9c:31:36:a5:97:21:bb:ce:ed:
8c:b7:15:b0:ca:7c:80:36:80:01:3a:23:2b:ee:f0:
01:76:f5:8d:c2:e8:9b:a2:ab:e2:ac:46:bf:85:1e:
5c:f7:64:f1:43:2d:0a:5c:5a:fa:1b:a5:ef:26:89:
98:cd:45:91:2a:37:64:54:fd:7e:d7:f7:0f:cb:af:
de:e0:9f:e9:dc:e9:b5:44:61:9d:2a:ce:6e:a9:5c:
96:39:10:82:9b:a6:e4:79:3e:73:28:62:31:cb:9a:
55:c3:a6:48:2a:e1:8f:d2:6a:48:0f:b1:22:22:9d:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E6:68:16:EC:62:E4:EA:5B:C0:92:5B:E6:6E:E1:D5:7B:F8:AA:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C80B78A8CF11EFA43C598E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.171.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a2:ae:7e:c2:d7:0b:ee:e8:bd:36:66:c5:8b:ee:3e:6f:4a:
23:57:90:10:5e:32:17:1f:99:19:1e:2c:23:65:86:14:2a:c9:
e2:d4:7c:28:f9:4c:60:47:13:09:5e:4c:9a:80:68:72:2d:1d:
00:15:45:47:f8:75:59:ed:5e:89:32:20:c2:dc:d7:5b:be:89:
2f:6e:d3:c9:fc:37:a8:62:c6:a4:9c:5c:13:5a:ba:fd:78:c0:
f3:d7:e6:0b:e6:58:dd:48:c3:8b:ca:68:e1:67:e4:eb:cb:b8:
61:9f:44:13:42:3f:29:8c:e6:84:f3:6f:d4:d7:8e:44:2f:f3:
f0:3e:f4:49:55:42:6d:e3:05:0e:54:ad:5c:34:37:7b:71:cd:
60:9b:90:57:9c:48:b3:9a:be:b7:84:9d:83:dd:b7:cb:18:44:
68:7f:16:7d:21:98:aa:f2:07:18:66:47:cd:69:01:63:6f:93:
bd:c8:cf:af:51:a9:bf:7b:c7:83:82:19:2c:74:14:33:17:eb:
51:77:77:52:7c:83:de:3e:75:d7:58:6b:6f:1e:24:f4:21:a9:
88:19:9c:bb:6e:55:f0:e0:ce:f3:80:4a:83:4c:d7:01:48:a7:
e0:18:c0:54:a0:1b:6f:5c:39:c4:db:1f:79:73:8d:1d:90:8a:
bd:48:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:18 2024 by rpki-client on console-ams.rpki-client.org